
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/rC1O20EomwvEsuL0Tp6ogq1shcg.roa
File: rC1O20EomwvEsuL0Tp6ogq1shcg.roa (raw, json)
Hash identifier: Fs+XO06czQKvSQEhBX4/9NUgnWWT989lj+F/vKKr4YE=
Subject key identifier: AC:2D:4E:DB:41:28:9B:0B:C4:B2:E2:F4:4E:9E:A8:82:AD:6C:85:C8
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0165
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/rC1O20EomwvEsuL0Tp6ogq1shcg.roa
Signing time: Tue 31 Mar 2026 07:48:10 +0000
ROA not before: Tue 31 Mar 2026 07:48:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2914
IP address blocks: 124.40.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 11:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AC2D4EDB41289B0BC4B2E2F44E9EA882AD6C85C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:17:17:16:0c:1b:d7:c4:be:62:58:39:f8:
f1:0d:10:90:4c:a6:e8:fe:e0:53:49:6a:dd:2e:3a:
70:57:86:db:b8:25:09:27:27:a5:eb:35:7f:89:a8:
06:9f:40:79:e6:f0:4c:77:73:7d:2f:ba:27:dd:5d:
f4:ca:49:21:b4:36:4c:1d:f2:3e:59:31:ec:14:ee:
df:a7:96:48:37:77:c5:da:ac:cd:ec:f9:c8:60:a9:
92:a8:97:46:57:50:12:cd:4b:bc:73:ab:60:8c:f9:
32:38:f9:58:ef:db:63:01:2d:76:42:45:84:5b:f4:
a7:31:3b:bc:66:9e:dd:75:b9:d1:e2:4e:c6:24:06:
8c:38:ad:44:e8:65:35:2e:31:5f:10:5f:61:57:0d:
d7:74:e2:77:97:fc:26:a0:2d:99:7f:80:90:14:d8:
05:a8:95:bd:88:d5:3f:cc:76:c0:7f:70:fa:a9:99:
54:33:69:9f:46:c3:03:fd:80:8d:cd:26:91:75:9b:
01:d8:82:95:dd:ba:d3:2e:9d:ac:d8:ad:e3:5f:54:
48:12:34:93:8b:96:c9:5a:d6:51:ed:41:ed:d2:24:
24:6b:07:43:c5:76:90:1a:ff:a3:e7:df:59:75:3e:
f6:e9:e6:21:b4:36:73:96:fc:cd:52:42:40:0e:85:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2D:4E:DB:41:28:9B:0B:C4:B2:E2:F4:4E:9E:A8:82:AD:6C:85:C8
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/rC1O20EomwvEsuL0Tp6ogq1shcg.roa
sbgp-ipAddrBlock: critical
IPv4:
124.40.0.0/18
Signature Algorithm: sha256WithRSAEncryption
73:26:28:79:79:cf:40:e9:30:c8:f8:e9:04:78:88:fa:82:1d:
55:93:a0:a6:48:6e:bf:f7:1e:c1:ec:fe:ef:2c:f1:74:22:f3:
6e:cf:46:d2:02:04:84:90:3f:21:86:32:b3:88:b3:bd:d7:47:
12:28:12:36:c9:64:7e:7d:88:cf:77:06:48:bd:6e:63:63:b1:
3c:2d:4a:0a:f7:b0:77:6d:60:b0:01:4e:ae:61:cd:cf:3e:51:
35:29:30:8c:09:64:8a:2c:49:ab:aa:f1:4f:0b:a1:0e:41:21:
e8:64:44:2c:de:61:40:7a:e3:1e:48:87:79:28:76:6e:5a:0c:
56:24:68:e7:c8:9b:30:ec:cc:59:7e:df:3c:c8:8b:db:4a:74:
e2:e2:8f:1c:d5:01:70:26:45:68:6d:9f:27:73:8e:3f:18:98:
64:44:6a:45:15:ab:41:f5:94:cc:05:7c:0d:9e:14:7e:6e:44:
90:f0:59:e5:56:86:00:bb:77:a7:55:b2:1b:12:d8:8f:9c:9c:
b3:9a:e3:ed:e4:5b:a5:b7:70:34:01:30:87:3d:99:75:d9:e7:
95:62:43:fe:8e:be:fc:58:40:7d:db:f7:85:36:61:13:0c:ad:
1d:90:74:03:5d:1f:9b:55:76:b4:a3:12:51:44:c7:b7:55:dc:
b6:0f:2d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:13 2026 by rpki-client