
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/wDEJKNw8mJssoVP0qre7bkCTKh0.roa
File: wDEJKNw8mJssoVP0qre7bkCTKh0.roa (raw, json)
Hash identifier: asJue0aiz0gcZmWWbf9u+g5ybaEHLHfpK3KxlYDIZUk=
Subject key identifier: C0:31:09:28:DC:3C:98:9B:2C:A1:53:F4:AA:B7:BB:6E:40:93:2A:1D
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 014D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/wDEJKNw8mJssoVP0qre7bkCTKh0.roa
Signing time: Tue 31 Mar 2026 07:53:07 +0000
ROA not before: Tue 31 Mar 2026 07:53:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.218.0.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C0310928DC3C989B2CA153F4AAB7BB6E40932A1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7b:80:77:66:83:dc:fc:9b:1e:f9:cf:a4:51:
44:f6:3a:d2:8d:e8:ef:32:2c:44:42:43:80:c7:de:
85:3d:f6:4c:a3:e6:26:b0:62:cd:22:d5:16:a5:56:
fa:90:06:75:d9:6f:3c:60:1f:e0:8f:c4:b4:92:d6:
5a:b9:a9:ff:89:75:f3:4e:10:41:89:53:97:40:11:
49:19:ba:95:c8:13:e7:9b:d3:82:3a:cc:47:0e:77:
33:d1:1f:d1:3a:1a:ab:7f:1a:c3:ff:aa:9c:6b:d7:
fe:e8:64:65:4b:a4:1b:00:18:e9:d7:c3:c3:6e:95:
76:ca:f4:67:99:fc:eb:db:80:19:68:be:fe:8b:5b:
bc:e6:88:8b:81:13:3b:69:f9:1e:41:f1:7e:e8:2f:
bb:59:2e:1a:69:f7:c7:9a:cc:d6:5d:d0:a9:45:1b:
93:fc:80:7a:dc:f9:f6:43:94:0c:e8:be:a7:de:89:
b7:92:5a:62:a3:00:47:53:a7:e3:e5:08:ef:3e:7c:
56:1d:9e:8b:57:56:64:33:ff:1b:96:d6:93:ee:f4:
00:e8:de:7d:0e:6c:89:92:b2:05:7e:e7:c1:d7:a3:
00:19:38:51:99:b8:25:2f:85:05:14:dc:3c:c6:fe:
12:e6:b0:d1:e6:f5:b8:73:30:5b:7c:8f:41:12:6e:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:31:09:28:DC:3C:98:9B:2C:A1:53:F4:AA:B7:BB:6E:40:93:2A:1D
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/wDEJKNw8mJssoVP0qre7bkCTKh0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.218.0.0/21
Signature Algorithm: sha256WithRSAEncryption
66:91:9a:ea:3a:da:e3:f7:76:72:13:43:b4:de:07:40:61:9d:
30:31:a7:a0:1b:a5:f6:55:b0:83:c7:39:03:59:1c:f0:84:14:
87:0c:17:77:59:f2:04:25:7f:da:de:14:a7:88:00:69:45:c9:
05:99:d0:9d:20:a9:c4:b1:0b:18:79:91:64:b3:c8:8f:d6:21:
da:d4:88:45:5a:13:08:e0:b4:22:79:a5:5f:5c:0e:ae:15:2b:
2b:6b:8e:f7:57:8a:40:f5:5c:66:41:a3:db:4d:e8:cf:4f:7a:
b0:ae:21:fd:52:4f:3f:48:6c:c7:d8:7e:c9:ca:b4:f6:c6:80:
c4:26:50:b9:25:3c:e9:07:be:3d:c4:d9:c3:53:25:84:e1:43:
82:1d:31:19:29:8a:65:79:ac:3f:3d:fe:81:8e:dc:d9:90:c2:
4e:ea:fe:9e:53:33:aa:00:2b:4e:35:bd:9b:30:05:58:0b:31:
ed:fa:1f:f4:82:e6:1b:35:d6:04:73:6c:88:8a:83:4b:02:aa:
bb:d1:62:36:85:26:7f:e7:3a:8d:81:4b:b7:ec:d5:3e:4f:cd:
15:38:ef:9d:5e:ee:bf:87:d5:d8:6a:06:8a:b6:de:78:c6:b8:
0a:75:75:ef:c5:2e:b0:98:07:10:99:01:35:f1:f1:f1:26:93:
c6:e0:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:27 2026 by rpki-client