
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zpgVazmhgatY8k-uhpNKo-nqWP0.roa
File: zpgVazmhgatY8k-uhpNKo-nqWP0.roa (raw, json)
Hash identifier: ifwwob+GzdLlXpzI712F6ImL2pEKQAHfHDfeW06q6QY=
Subject key identifier: CE:98:15:6B:39:A1:81:AB:58:F2:4F:AE:86:93:4A:A3:E9:EA:58:FD
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0134
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zpgVazmhgatY8k-uhpNKo-nqWP0.roa
Signing time: Tue 31 Mar 2026 07:52:54 +0000
ROA not before: Tue 31 Mar 2026 07:52:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 202.230.208.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:52:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CE98156B39A181AB58F24FAE86934AA3E9EA58FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:29:2f:40:55:1f:9c:76:0c:85:50:0a:22:
af:95:2c:25:35:75:20:45:4a:d6:15:3e:dd:8c:65:
5c:c6:bb:82:d9:2e:e1:36:11:02:37:0f:4a:ea:e6:
47:00:e5:c1:65:e4:dd:83:04:73:06:74:8c:52:20:
b6:7b:f9:88:28:68:bb:f1:31:55:d9:88:80:3d:af:
9d:d3:06:37:45:ca:dd:74:bf:65:82:a2:18:ac:33:
71:e7:b0:f6:d5:fa:30:94:fd:9d:5c:11:15:e7:50:
3f:57:fc:64:ae:f7:1b:31:b9:0a:15:6f:93:36:58:
85:df:7f:f7:25:3d:a5:75:62:b9:13:18:d2:c7:cb:
08:fd:44:d1:2c:33:5c:7f:17:57:57:35:07:9e:40:
e3:5e:f1:ec:b8:ca:4d:29:5d:75:a0:8e:46:f3:2c:
01:db:b1:6c:d2:54:02:82:98:63:77:bb:6f:76:a3:
da:b2:7f:39:97:93:61:1e:d3:45:ae:01:f1:23:f7:
70:9b:1c:69:d1:2b:c1:a2:b5:21:d3:53:da:0b:7d:
7b:9e:24:3c:b5:06:7f:10:52:65:44:67:e5:3d:0f:
e8:d9:db:20:e7:9b:dc:dc:03:4f:f2:4c:4c:00:1f:
63:fd:71:74:7b:8c:89:f1:d1:ad:37:8f:06:07:5f:
ba:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:98:15:6B:39:A1:81:AB:58:F2:4F:AE:86:93:4A:A3:E9:EA:58:FD
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/zpgVazmhgatY8k-uhpNKo-nqWP0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.230.208.0/20
Signature Algorithm: sha256WithRSAEncryption
76:47:dd:9e:15:e0:3a:b4:dc:49:6f:23:20:22:6d:18:d5:59:
3f:5e:37:88:c2:87:42:64:bd:b6:f0:c0:c8:61:66:54:62:9d:
a9:ff:be:3b:ca:5a:38:f3:95:73:10:53:52:aa:7d:74:8b:0d:
7f:39:68:82:9d:dc:50:8e:a5:c7:c7:c8:dc:8f:73:31:cb:32:
2f:33:12:80:06:2d:7c:db:cb:29:66:e9:9e:cd:80:8d:00:1d:
d1:b0:25:37:87:37:2c:c1:4c:5c:43:bc:04:fb:0b:24:13:45:
59:4e:85:0d:cf:8f:1b:60:be:96:22:8b:55:ef:13:a0:82:80:
34:96:ce:3f:c0:3d:77:2d:f6:28:0f:c4:16:dc:fd:37:46:ac:
f6:5b:15:55:88:a6:8f:bb:e8:be:7e:4a:60:a7:0f:8a:21:5f:
6c:62:f6:28:c3:b6:08:b4:cf:5d:e8:64:15:60:db:54:56:31:
5f:da:9a:73:05:5d:d4:d7:b9:e2:7d:33:cd:07:a9:02:2c:bd:
26:e1:31:13:79:8c:cd:e2:f3:f4:69:54:6b:e1:3f:9a:19:05:
53:8f:fa:fe:2b:d4:df:81:9e:55:73:ff:35:04:c0:f7:02:3a:
16:a6:ed:a2:1f:6e:e4:6a:e2:a8:f6:c4:2d:fb:9b:47:ee:b5:
97:1c:9c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:44 2026 by rpki-client