
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vhQEx9Coo1vWVzZyaVhtwpykPEY.roa
File: vhQEx9Coo1vWVzZyaVhtwpykPEY.roa (raw, json)
Hash identifier: 2mVnjnPAT9FxVw72BPQxriIdpHaJc9bHhOsgGnd+bEQ=
Subject key identifier: BE:14:04:C7:D0:A8:A3:5B:D6:57:36:72:69:58:6D:C2:9C:A4:3C:46
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01C2
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vhQEx9Coo1vWVzZyaVhtwpykPEY.roa
Signing time: Tue 31 Mar 2026 07:54:04 +0000
ROA not before: Tue 31 Mar 2026 07:54:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 211.120.40.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:54:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BE1404C7D0A8A35BD657367269586DC29CA43C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a3:a7:09:f3:cb:36:a9:a7:13:c1:cb:87:43:
48:ad:7f:5b:a4:4e:a6:20:94:0e:d4:f3:51:ac:01:
a5:fc:7f:27:2d:87:04:67:be:55:d7:ee:a5:91:80:
bf:ac:2b:44:1d:ef:58:3a:88:c2:ed:a0:82:18:73:
34:49:a8:0d:d6:17:6e:59:76:7a:57:81:e4:f8:66:
5d:d9:fc:d0:04:86:b7:19:f2:c7:f0:ea:cb:8c:4f:
56:29:31:fa:e8:a6:c6:61:da:98:b6:0e:59:c7:9c:
13:8e:22:4a:8b:45:6e:1e:66:f1:15:18:96:97:17:
c2:c8:e5:f9:a0:25:69:2e:73:1c:1e:fe:be:44:90:
d7:a0:36:77:78:5c:11:48:91:33:58:86:5c:48:10:
a9:a8:d0:7c:e1:9f:42:67:02:79:95:49:67:79:64:
b1:4c:54:d0:c9:76:c2:3a:e5:0f:5e:26:98:ff:9e:
84:e3:84:db:d8:18:e0:81:cb:1f:d4:d9:80:ab:40:
a2:65:39:c5:5d:0b:69:d1:b3:35:c7:78:d4:c2:6d:
59:2e:c1:d4:09:15:e0:b8:6f:a8:ba:1f:05:ac:90:
a2:02:d2:d1:25:47:96:1d:09:67:d9:98:b7:67:a5:
96:95:f0:2e:a1:ef:c3:12:cb:7b:ed:df:b1:ac:62:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:14:04:C7:D0:A8:A3:5B:D6:57:36:72:69:58:6D:C2:9C:A4:3C:46
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vhQEx9Coo1vWVzZyaVhtwpykPEY.roa
sbgp-ipAddrBlock: critical
IPv4:
211.120.40.0/21
Signature Algorithm: sha256WithRSAEncryption
75:d9:4e:69:ec:53:72:4c:eb:8f:a1:c5:f5:f1:d9:7f:d2:8d:
d1:59:d7:c6:be:6d:69:7d:5d:c6:07:48:04:93:a5:2f:34:80:
c3:bc:a6:21:bc:ad:2d:47:ee:60:0b:a5:de:9b:e5:15:b1:cb:
1b:5c:31:fc:58:7d:03:cd:57:9b:15:10:72:88:7b:75:f4:8c:
ff:c1:7d:66:66:a4:16:90:4d:f2:79:5b:c7:25:11:7a:05:bf:
a7:a0:1d:c0:ff:3c:1d:e2:26:46:a6:ca:4d:50:49:b7:b3:67:
da:fa:82:46:5a:15:ff:05:4d:7e:ec:f4:2e:23:e4:82:0f:7b:
0a:71:67:fe:b2:e3:6c:8c:6f:67:72:33:25:b2:2e:9c:2a:92:
c7:16:84:7c:89:ab:6b:e5:13:e3:7f:5b:18:4a:bd:76:b5:2a:
7b:3a:63:2a:45:97:ef:c6:a5:bb:d8:c3:7a:62:b0:e5:6b:1e:
f4:3e:c8:fd:8e:04:f1:d3:90:65:52:e9:85:5d:e9:87:2d:dd:
81:b3:6d:cb:fc:1e:41:bf:89:3d:87:9a:3a:02:91:05:14:ae:
af:aa:c8:ba:e1:8b:73:11:d1:24:5b:4b:54:3a:97:9b:e8:47:
1e:df:9d:34:07:43:87:de:f5:3d:18:4e:6b:fe:44:21:2a:ba:
26:f3:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:44 2026 by rpki-client