
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/HGrzpwOtuod0QuTBmfMjkd85RC8.roa
File: HGrzpwOtuod0QuTBmfMjkd85RC8.roa (raw, json)
Hash identifier: QOEOudeCgb+POaeSovr2Q8NEY60ExJgcVADHfKNYdNQ=
Subject key identifier: 1C:6A:F3:A7:03:AD:BA:87:74:42:E4:C1:99:F3:23:91:DF:39:44:2F
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: A8
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/HGrzpwOtuod0QuTBmfMjkd85RC8.roa
Signing time: Tue 31 Mar 2026 07:48:54 +0000
ROA not before: Tue 31 Mar 2026 07:48:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38631
IP address blocks: 103.2.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Mar 31 07:48:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1C6AF3A703ADBA877442E4C199F32391DF39442F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:cc:7e:94:2b:18:42:00:98:e2:76:64:f2:
07:3d:9b:0c:49:e1:ae:65:47:16:41:32:04:3f:92:
1b:e8:ae:6f:ea:5a:74:ae:ee:c3:67:aa:26:e7:aa:
1b:9c:0b:c0:d1:34:c8:ad:39:ff:b3:4e:52:d3:85:
ab:20:57:91:d2:39:7f:1e:e6:90:23:11:e8:d9:94:
f1:b3:57:a5:67:a0:22:c5:a8:4e:0d:51:f2:45:b2:
4e:1f:f0:6b:57:4d:59:eb:e2:3b:85:d1:42:ad:1f:
a4:40:8f:af:59:9e:18:e9:97:86:e4:32:47:19:94:
93:19:3d:ab:60:3d:19:ad:a8:a3:62:9b:07:94:09:
74:eb:11:4b:d5:c9:54:c2:35:a2:82:73:98:2e:f5:
42:6f:af:7b:07:93:79:42:07:2d:6f:e2:ce:e8:96:
a1:42:4f:d3:e2:4b:7e:0f:e7:04:50:b6:e3:7e:95:
db:70:7f:a7:b1:26:b9:91:7e:ef:53:0e:4b:39:d6:
3f:7b:2d:9d:14:80:c1:3c:2d:e1:57:82:94:91:78:
fc:f9:71:75:cd:7b:f7:1a:ea:d0:89:8b:25:0a:67:
49:10:cf:3c:e5:cd:2d:b6:ae:9e:ac:a1:47:04:f4:
73:52:f2:11:55:fc:a7:75:11:ce:7f:99:4a:c7:67:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6A:F3:A7:03:AD:BA:87:74:42:E4:C1:99:F3:23:91:DF:39:44:2F
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/HGrzpwOtuod0QuTBmfMjkd85RC8.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.28.0/24
Signature Algorithm: sha256WithRSAEncryption
32:62:8a:79:d3:78:75:7d:a1:01:df:be:14:a3:e7:d5:27:9d:
e8:17:cb:22:84:3d:00:c2:63:20:27:6d:da:46:5f:99:0e:5b:
f7:f3:91:11:12:32:7e:eb:0e:27:f1:92:d8:e0:a2:3b:90:43:
9f:fb:1e:b5:a2:62:2c:29:52:d5:7c:84:07:bc:3e:70:88:47:
44:b0:2a:71:91:6d:90:42:2e:f5:d0:0c:fa:ef:d0:41:bb:c5:
3a:ee:2e:10:4a:79:86:40:2d:71:4b:9c:ec:99:be:c9:69:13:
c5:9d:c0:e3:5e:32:ba:9a:05:58:7d:dd:ad:c6:dd:b5:7f:60:
69:61:b8:5b:4f:29:b3:3d:d9:34:89:9c:f5:15:4f:b3:10:3e:
a5:6b:a3:96:8d:47:c6:30:98:2b:8a:88:cc:22:1d:c4:c0:c3:
dd:98:ed:96:ae:61:df:c9:0c:57:fc:ec:16:75:68:21:e9:29:
ad:c4:c9:7d:22:2e:77:91:d1:f5:1e:56:44:77:0e:36:1a:9d:
19:1e:ea:59:d1:7a:b5:47:54:83:f3:5e:d5:c2:0c:1b:9f:c6:
87:82:84:04:43:ad:7a:47:5e:c2:d5:b8:04:d8:02:08:2c:40:
7f:61:2e:60:f5:e3:e1:db:44:fa:8f:74:8b:fa:53:77:8d:74:
67:49:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 02:05:37 2026 by rpki-client