
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ynR5vE2jxF-SzJx0Qkc9ZY6-Zos.roa
File: ynR5vE2jxF-SzJx0Qkc9ZY6-Zos.roa (raw, json)
Hash identifier: lmaqearfXCf/54O8kB6o/P+iemqzLZdcvo+Pj274V9c=
Subject key identifier: CA:74:79:BC:4D:A3:C4:5F:92:CC:9C:74:42:47:3D:65:8E:BE:66:8B
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0138
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ynR5vE2jxF-SzJx0Qkc9ZY6-Zos.roa
Signing time: Tue 31 Mar 2026 07:52:55 +0000
ROA not before: Tue 31 Mar 2026 07:52:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.234.138.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:52:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CA7479BC4DA3C45F92CC9C7442473D658EBE668B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:bd:c9:28:d4:a1:d7:c2:73:27:49:2b:77:
21:16:00:1a:07:78:f6:c8:88:f2:bc:51:89:03:b5:
ba:97:5a:96:05:68:9d:bb:6f:50:a8:13:35:9c:78:
f1:af:04:2c:c4:8b:fa:9a:94:31:aa:7a:97:6d:b5:
52:61:25:6f:3c:e5:f3:97:47:b9:b7:9d:16:1c:be:
72:82:11:af:47:ec:1c:38:a5:7b:52:e1:f0:56:d7:
6b:33:23:cb:4e:60:d9:5a:58:99:54:ba:cb:3c:8a:
fc:99:31:d6:55:fb:38:e6:ef:47:21:72:52:b6:5c:
38:9b:5b:37:bb:b2:fe:b4:0b:26:b9:6e:26:48:3e:
df:b5:57:41:a7:41:73:7c:53:90:63:18:f7:04:77:
af:62:62:dc:ae:ae:36:b9:6f:89:db:f0:20:60:72:
4f:aa:2e:1b:12:ea:27:fc:3f:5c:25:6a:fc:f4:d7:
7b:f5:c5:0c:54:04:a1:ca:dc:05:3d:aa:15:ca:26:
d2:27:47:d1:33:17:46:e3:cb:4e:05:4e:47:15:3e:
f9:b0:66:ac:ab:46:17:1e:1c:ab:0b:73:f9:31:67:
20:18:5f:f5:e8:61:32:cd:1a:61:24:2d:35:70:c2:
ed:06:eb:cc:7f:f6:7e:a2:38:e9:7f:98:24:78:95:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:79:BC:4D:A3:C4:5F:92:CC:9C:74:42:47:3D:65:8E:BE:66:8B
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ynR5vE2jxF-SzJx0Qkc9ZY6-Zos.roa
sbgp-ipAddrBlock: critical
IPv4:
202.234.138.0/23
Signature Algorithm: sha256WithRSAEncryption
77:61:f6:51:8d:66:9d:9c:0d:51:38:41:6a:bd:d4:a9:d6:06:
62:87:95:e6:42:89:64:61:1e:66:33:9d:e3:1e:15:3c:00:c0:
b0:fa:eb:9c:6c:c6:21:e9:8a:3f:b3:e2:8f:b0:86:a2:25:03:
de:a6:88:c3:ac:7b:0e:51:a7:25:77:db:9c:35:12:75:5b:3a:
94:66:39:6e:e1:26:11:1c:f7:0e:e5:78:bc:6c:98:9a:91:5b:
18:23:54:72:fb:7a:8e:65:71:d5:2c:3b:40:60:50:72:c2:17:
90:8a:58:ea:46:1f:70:44:ef:0b:27:35:45:87:23:c1:56:8a:
87:14:4e:66:ff:09:1e:98:8f:15:e6:9a:bb:5c:4b:d6:c2:89:
5e:f3:a0:e0:c8:c0:70:e2:69:03:da:de:d7:da:c2:36:44:c2:
d8:74:18:42:5e:c0:5b:52:e3:81:44:38:ad:47:46:7f:fc:32:
88:e8:bd:63:c1:25:72:5c:b2:a8:79:2e:4a:b8:f2:d1:21:8a:
25:d2:d1:d4:3a:ed:25:57:de:de:f8:41:88:1e:3b:cc:22:45:
cb:e2:03:14:1f:66:b2:7f:40:3e:d0:c8:49:28:87:4a:e9:22:
b5:4c:ea:63:6c:be:60:a6:31:07:ed:52:26:e7:ca:0a:76:76:
6b:f5:56:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:50 2026 by rpki-client