
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CjmMjg9RKE9zN-uJ6X-A0bz_FrE.roa
File: CjmMjg9RKE9zN-uJ6X-A0bz_FrE.roa (raw, json)
Hash identifier: l1HifF+GM46Z/Q3CBQrf42C3V+qPfMErm8cC5T0lr8U=
Subject key identifier: 0A:39:8C:8E:0F:51:28:4F:73:37:EB:89:E9:7F:80:D1:BC:FF:16:B1
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0169
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CjmMjg9RKE9zN-uJ6X-A0bz_FrE.roa
Signing time: Tue 31 Mar 2026 07:48:11 +0000
ROA not before: Tue 31 Mar 2026 07:48:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2914
IP address blocks: 61.213.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0A398C8E0F51284F7337EB89E97F80D1BCFF16B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:ed:65:89:38:16:69:cc:d5:17:2f:4d:ef:
33:16:77:a6:2c:0b:05:3d:fc:c4:c4:3b:1b:1a:b7:
c5:af:6e:af:96:e8:b9:47:ff:21:b2:35:ab:ea:96:
c7:92:a7:28:b6:47:93:d8:6e:e7:d5:75:54:54:f7:
59:db:24:77:f4:a6:6f:9d:c4:bc:5d:59:d0:38:39:
d4:5c:5f:8d:5b:b4:86:e1:58:c6:63:95:88:c8:58:
42:90:ff:17:e2:64:2e:d1:a8:85:08:7f:4d:d8:a6:
fe:33:3a:11:b6:31:ab:6e:e7:f0:07:70:5e:0c:4f:
35:46:83:65:96:a1:6d:72:4c:58:f6:27:e8:3e:51:
b3:de:b6:bf:f1:7d:36:56:db:97:9e:e2:4b:22:b8:
88:10:29:18:e1:76:f7:bd:3b:84:4f:e7:4f:dc:8f:
98:54:fb:80:49:cf:8b:2c:e6:6b:fb:dc:20:a4:37:
8e:b1:6c:a5:70:8a:da:cc:dd:79:fc:11:63:64:ec:
d0:f2:e9:4a:4c:dc:65:9a:07:0c:e8:6e:1b:20:36:
f0:e6:e7:83:17:28:ee:39:0f:71:4c:1c:9e:be:aa:
16:ef:9f:be:cc:c4:f9:71:14:52:f6:d1:50:ec:5e:
48:2f:0e:11:3c:7f:4b:65:63:72:39:9f:35:eb:a7:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:8C:8E:0F:51:28:4F:73:37:EB:89:E9:7F:80:D1:BC:FF:16:B1
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/CjmMjg9RKE9zN-uJ6X-A0bz_FrE.roa
sbgp-ipAddrBlock: critical
IPv4:
61.213.144.0/20
Signature Algorithm: sha256WithRSAEncryption
84:94:fb:5c:b3:ad:bb:a8:54:f1:48:a9:c7:9a:eb:f9:d8:3d:
aa:6a:e3:dd:cd:f6:34:ec:75:3e:4e:82:b3:de:34:bc:5d:40:
34:48:72:33:a7:95:40:a6:62:47:49:83:86:e7:ff:9d:f4:58:
b2:49:f5:79:f7:3b:db:f7:05:29:75:04:c0:db:5a:f0:af:14:
f7:ef:18:74:c1:f3:92:ba:8f:34:e8:66:ea:fc:ab:e8:96:f6:
a4:69:75:c5:35:a8:3d:ff:c4:6a:be:e5:50:f5:b0:ab:d9:16:
e0:76:0f:ae:27:d6:ba:89:2b:73:9b:d3:53:48:1a:0f:41:0f:
9e:3f:94:00:f3:d3:a4:32:66:f2:17:a8:70:31:ee:66:81:46:
af:9d:8d:3f:8f:76:ec:98:12:0b:6e:b8:39:51:99:66:29:91:
2b:9e:e3:62:97:0f:f6:13:ab:05:cc:50:06:b1:3a:fd:29:8c:
33:e2:d2:7c:80:25:37:ef:f4:c6:77:09:2c:69:a0:91:54:20:
4d:be:a0:af:1b:28:00:80:17:15:d8:09:55:53:ea:81:36:ba:
51:15:57:03:f3:91:85:01:83:62:5b:5c:fb:95:73:ad:1b:5f:
78:9f:1f:17:55:88:aa:5e:84:09:10:d1:0f:6a:62:9e:80:38:
72:dc:41:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:13 2026 by rpki-client