
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/AMidYPrTi-qHl3k064MT5BPUGHs.roa
File: AMidYPrTi-qHl3k064MT5BPUGHs.roa (raw, json)
Hash identifier: iS1ZUn3ZSpzHKULskhUBC6U9zWZPz0rfuDKjcTA0kQ8=
Subject key identifier: 00:C8:9D:60:FA:D3:8B:EA:87:97:79:34:EB:83:13:E4:13:D4:18:7B
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: B8
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/AMidYPrTi-qHl3k064MT5BPUGHs.roa
Signing time: Tue 31 Mar 2026 07:49:03 +0000
ROA not before: Tue 31 Mar 2026 07:49:03 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131898
IP address blocks: 219.100.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Mar 31 07:49:03 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=00C89D60FAD38BEA87977934EB8313E413D4187B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:f7:08:08:d7:60:ce:8a:38:65:c7:02:d4:
5a:83:4a:c3:e4:3c:f8:1e:41:35:e8:c3:50:b7:57:
6e:fa:71:ad:be:48:c2:f4:bb:44:8f:6c:cd:97:a6:
84:26:16:5a:47:6f:df:40:31:70:44:3e:eb:95:3a:
57:32:ba:a9:ae:a8:ec:9b:3b:2f:38:1a:6c:b2:0b:
9a:53:68:0b:83:5a:f4:11:47:07:af:bd:95:a5:64:
1d:8e:f0:60:6f:c7:76:8f:c3:25:f1:e4:c2:53:6b:
00:f6:cf:b9:4f:1c:82:7a:0c:e9:4e:a4:aa:63:74:
41:b6:ed:99:46:12:44:84:60:fa:b0:8c:f0:16:59:
b8:22:2e:bb:ab:a5:f6:1e:a9:74:cf:a0:b2:cf:ca:
0a:93:e8:34:09:6b:16:dd:d5:78:43:9e:ba:46:37:
72:41:77:48:bc:1b:cf:29:b8:a4:77:d8:d3:72:0c:
27:30:ed:30:be:67:e6:41:bc:49:f0:a7:c0:f3:f0:
a4:cf:c9:27:1b:e7:bc:8f:f9:b4:28:0e:d5:3f:c5:
dd:c7:44:7d:aa:8d:d7:e9:69:ed:67:af:f5:9e:f8:
6b:f0:91:ec:fb:4c:01:8f:eb:c1:04:8b:95:56:b3:
af:b0:71:01:12:67:8d:3d:92:ef:3b:b2:68:95:d7:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:9D:60:FA:D3:8B:EA:87:97:79:34:EB:83:13:E4:13:D4:18:7B
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/AMidYPrTi-qHl3k064MT5BPUGHs.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:37:36:5b:dd:99:74:96:e6:fe:8f:97:4f:26:11:8f:5e:30:
7f:fe:d7:8f:69:b3:c8:80:eb:b5:55:47:81:47:77:da:df:de:
b6:5d:a0:eb:aa:a2:50:0d:e0:e0:24:74:a6:75:b6:31:f3:0e:
86:a7:7f:ee:a3:f7:62:25:05:5f:5b:ef:f1:60:78:ab:86:2d:
38:5f:9e:08:6a:3c:22:69:60:01:56:97:1b:1c:6f:19:e0:84:
fb:fb:1c:b4:be:f3:c2:86:be:f4:8d:c6:38:ce:99:10:f2:33:
cb:22:63:72:0f:21:1e:8f:95:cf:45:9b:03:44:04:07:f7:db:
d4:54:58:2c:bb:5b:4e:cf:cc:99:43:2a:56:eb:1c:6f:49:94:
0f:e4:97:da:ec:2a:2b:b8:c0:db:4e:72:d8:6f:97:14:bd:72:
8f:4e:e9:7a:55:ec:75:54:50:5f:3b:11:06:9d:70:90:85:a2:
b9:da:f0:b1:dd:8e:de:fd:a8:fe:4c:66:bd:4e:3b:08:3c:3d:
a9:47:c1:82:24:a6:a3:fb:1a:07:4e:29:d8:97:69:57:52:b0:
79:30:5e:74:23:e2:e8:27:2c:fe:20:3c:2f:41:02:fa:bc:05:
1c:ad:49:98:aa:b9:c8:62:df:d8:10:a0:4b:2b:87:42:6e:00:
2b:d5:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 02:04:52 2026 by rpki-client