
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/xsNtCLerw51y7RuZdzTlgEWu2JQ.roa
File: xsNtCLerw51y7RuZdzTlgEWu2JQ.roa (raw, json)
Hash identifier: iHaBu2n+gS6vDFk1UDfWiQJUu0bFqSepeuAGxM2WYjE=
Subject key identifier: C6:C3:6D:08:B7:AB:C3:9D:72:ED:1B:99:77:34:E5:80:45:AE:D8:94
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0191
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/xsNtCLerw51y7RuZdzTlgEWu2JQ.roa
Signing time: Tue 31 Mar 2026 07:53:41 +0000
ROA not before: Tue 31 Mar 2026 07:53:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.171.102.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C6C36D08B7ABC39D72ED1B997734E58045AED894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:df:67:8a:67:bb:27:76:2f:f7:02:29:bc:
5d:10:db:19:76:55:5b:14:77:e9:f4:8e:f6:40:fa:
62:89:4c:ba:62:a3:af:3a:e3:18:b8:50:c9:18:2b:
fb:4e:a7:f7:94:8f:58:cc:41:94:aa:81:67:32:be:
e4:09:a5:36:34:5b:6c:b6:be:34:87:fe:8d:ac:5f:
f2:6c:27:6b:57:cb:9b:b3:3f:69:76:91:0a:75:9f:
aa:57:4b:4b:de:06:3e:69:a5:59:0d:6a:f0:d1:83:
b1:70:8c:7a:4b:7a:b6:ce:1a:b7:e8:ea:17:9a:7d:
3c:e1:06:03:3e:31:b0:3d:3e:94:35:d8:4a:e4:67:
e1:f5:92:59:a0:37:f2:aa:8c:8e:e2:00:13:06:e7:
5a:67:0f:9e:3e:1d:e0:9b:cf:e9:8a:57:92:c4:1d:
db:f6:c7:fc:2e:3b:95:2e:32:f7:8d:66:76:05:42:
d0:37:a1:93:b1:cb:02:8a:f7:a2:4f:82:ee:ad:66:
78:95:58:9e:02:31:9a:e7:d3:b9:11:7a:7d:cb:70:
7f:d3:04:40:cd:09:1d:95:1c:29:96:b7:4f:3a:6b:
a9:53:da:e5:b9:fd:59:08:f5:3a:2e:9e:71:9d:5e:
41:b2:3c:78:f2:96:82:22:c8:37:92:fa:57:56:6b:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C3:6D:08:B7:AB:C3:9D:72:ED:1B:99:77:34:E5:80:45:AE:D8:94
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/xsNtCLerw51y7RuZdzTlgEWu2JQ.roa
sbgp-ipAddrBlock: critical
IPv4:
210.171.102.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e0:a0:da:e5:ce:1e:77:5e:8b:fd:1c:80:09:18:3c:64:e2:
8c:bc:f7:79:f8:a0:09:9b:89:2b:38:e7:d8:9e:e7:14:05:2b:
ec:c5:f1:72:d2:1c:f3:e3:c3:4b:d4:05:de:d2:e7:bf:f7:67:
d1:22:b0:d1:cc:fb:ff:33:00:73:94:9e:71:be:1e:56:50:9a:
c2:8f:f6:9d:ed:47:5b:d4:66:33:8a:92:92:37:1e:89:01:0c:
80:3d:44:e4:24:2c:97:f1:72:60:53:b8:f3:13:4c:9b:d2:93:
f1:fe:31:35:eb:c5:e5:ac:f9:4a:52:fa:52:52:ec:e8:25:29:
ab:75:a8:bb:0d:7c:ee:b3:2c:57:ae:ab:d4:15:89:e0:03:92:
b3:bd:75:06:aa:a0:d5:be:06:d0:d1:01:10:b5:a4:ef:86:c3:
e9:5a:2a:58:5e:ca:3f:d0:73:fc:ce:85:27:e8:fe:49:87:c9:
d7:bb:ba:ae:c8:f4:53:1e:8d:c6:85:ba:bd:1e:88:de:41:9f:
27:09:a6:b0:e3:0a:d5:4e:71:a4:0b:ce:8e:4b:2b:07:1a:46:
cf:06:10:d1:fd:4b:aa:2f:7e:cc:c1:fc:93:2b:6c:8d:5e:7f:
8a:55:2e:53:94:51:81:ce:52:8f:2d:df:ea:41:a3:b5:39:00:
b1:79:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:01:48 2026 by rpki-client