
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/S1O8SdgelEcyqE4Zoy2YHdbqW1Q.roa
File: S1O8SdgelEcyqE4Zoy2YHdbqW1Q.roa (raw, json)
Hash identifier: GAo7E5G5JXaMRDDqIap2QqkSIppNkbBsutCHRH1lRNQ=
Subject key identifier: 4B:53:BC:49:D8:1E:94:47:32:A8:4E:19:A3:2D:98:1D:D6:EA:5B:54
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: AC
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/S1O8SdgelEcyqE4Zoy2YHdbqW1Q.roa
Signing time: Tue 31 Mar 2026 07:48:56 +0000
ROA not before: Tue 31 Mar 2026 07:48:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38631
IP address blocks: 119.235.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Mar 31 07:48:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4B53BC49D81E944732A84E19A32D981DD6EA5B54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:9a:15:4c:5c:52:9e:a7:0f:03:43:3b:1f:
d6:5b:b2:63:d9:bf:f4:2c:47:7f:44:17:1b:f6:36:
ec:31:49:06:0f:13:d9:b7:09:68:1a:e5:a0:e8:ef:
c0:de:27:6a:76:7b:65:43:a0:d3:03:db:cb:70:a3:
6c:97:f6:0b:3b:eb:95:d4:73:a5:76:6b:ae:5e:c4:
13:94:5c:af:63:84:78:f0:9a:3b:a7:5a:c2:5d:eb:
df:0e:8f:76:12:36:51:c1:eb:70:1c:8e:fd:ad:fa:
18:77:92:3c:d1:cb:67:b9:87:8e:98:c0:0b:33:22:
52:20:2b:a5:74:1d:b0:cc:25:38:bd:1a:d9:46:d8:
bb:44:68:0d:54:51:3d:7a:de:99:94:92:53:f5:01:
96:4a:37:9a:fd:58:4b:c1:28:69:c9:3c:a1:3d:54:
d4:5c:4d:4d:fc:64:7c:f2:05:b8:35:ca:02:75:32:
36:78:74:b4:f3:e8:bc:95:00:d2:10:19:a0:1e:1c:
69:04:77:c4:0d:5a:2e:63:8f:55:4d:54:a2:38:0c:
95:4d:19:e6:79:93:b5:f0:7b:34:e5:71:11:a5:7a:
d9:a6:01:6a:e8:b9:b2:8a:a8:c0:9a:b0:0e:8a:ef:
6b:ce:ae:60:48:56:01:55:46:d5:7c:cd:29:2f:82:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:53:BC:49:D8:1E:94:47:32:A8:4E:19:A3:2D:98:1D:D6:EA:5B:54
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/S1O8SdgelEcyqE4Zoy2YHdbqW1Q.roa
sbgp-ipAddrBlock: critical
IPv4:
119.235.235.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4c:cf:f3:0f:4e:18:f6:6b:f6:0a:97:04:21:1d:7f:e8:7b:
9b:5b:f7:00:a5:67:f3:7f:6a:b2:a8:b6:5b:60:bb:f4:36:f6:
3c:c3:e1:6b:64:69:f2:84:f8:2a:44:12:67:99:8a:2a:bb:cf:
82:36:6d:df:fd:ac:4e:12:4e:55:b7:36:ab:c3:b9:9a:60:35:
d3:eb:39:f3:9c:57:2b:2c:ac:19:c2:62:80:14:f4:2a:52:f5:
7c:95:53:ae:a6:56:56:da:97:fc:c6:ae:27:33:b2:d5:e8:72:
5a:73:13:e2:63:98:3d:24:a4:9f:dc:53:00:61:89:21:bf:d1:
67:57:2c:35:c3:ec:28:0c:18:06:3c:db:f3:b5:cb:6c:95:e2:
38:a7:da:1b:d1:49:95:ef:b6:9b:0b:77:92:8a:44:fa:33:a8:
b1:79:91:86:c5:17:97:fd:8d:63:80:36:c7:fd:58:00:4f:c7:
96:14:3f:ef:9a:71:29:85:c1:a1:2d:c5:1d:aa:f6:87:b3:47:
86:79:c7:ed:77:27:ec:96:63:96:98:22:f8:9c:81:5d:fd:21:
9c:48:bd:f1:0d:58:e5:4f:c4:bd:8f:bb:10:c5:8c:76:4a:25:
72:06:dc:6d:f8:d9:f9:21:7a:d9:5f:a7:21:71:92:ab:64:ec:
c5:f6:79:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 02:07:20 2026 by rpki-client