
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/u_Xt8iSvU_y5aYjYhCPwaXkoVLc.roa
File: u_Xt8iSvU_y5aYjYhCPwaXkoVLc.roa (raw, json)
Hash identifier: f95JNf20YNAl410bf2TlxrC2axDdVOrQudH2+dZHqLE=
Subject key identifier: BB:F5:ED:F2:24:AF:53:FC:B9:69:88:D8:84:23:F0:69:79:28:54:B7
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 016E
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/u_Xt8iSvU_y5aYjYhCPwaXkoVLc.roa
Signing time: Tue 31 Mar 2026 07:48:14 +0000
ROA not before: Tue 31 Mar 2026 07:48:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2914
IP address blocks: 202.69.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 11:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BBF5EDF224AF53FCB96988D88423F069792854B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:0e:d7:69:bf:6b:8c:ed:cd:d8:e5:50:9d:
39:6d:1f:8d:7c:6b:1a:42:ef:aa:30:25:f8:46:d9:
39:03:c2:66:80:79:d5:75:3d:a0:a9:43:17:9b:5c:
53:88:42:32:6c:fe:75:e7:ec:67:83:48:f0:60:6d:
aa:e5:5c:b0:21:3f:bd:f1:c2:b3:63:57:91:16:0d:
c0:42:50:1c:07:f0:63:04:86:f0:cb:f9:d8:50:6b:
11:27:55:98:66:fa:b1:c7:8b:0f:df:a5:ac:be:98:
8d:19:28:3d:2b:c2:5b:20:7c:7d:84:e9:4e:5f:95:
bb:d6:44:3e:3f:21:8d:fb:e0:61:52:ee:2a:9c:a9:
33:89:52:d2:59:42:b2:5d:32:7b:bc:a1:67:50:e5:
86:8b:bf:67:87:66:75:ee:4f:f9:a5:f9:79:1e:9c:
38:13:b7:6f:a8:68:9e:3e:8a:b1:43:b1:be:f8:5f:
3e:46:ba:fe:a4:b2:3b:23:5f:4d:31:9b:97:1c:5b:
c4:82:a6:3e:8f:62:77:6c:a6:69:c1:f3:41:fe:ec:
52:b1:72:33:ac:92:0e:a8:ff:29:ac:3d:e1:11:88:
cc:2e:71:cf:38:76:82:11:ec:49:2e:15:ac:e1:30:
b6:7a:39:42:1f:30:c3:04:ae:56:db:1a:6e:34:87:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:ED:F2:24:AF:53:FC:B9:69:88:D8:84:23:F0:69:79:28:54:B7
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/u_Xt8iSvU_y5aYjYhCPwaXkoVLc.roa
sbgp-ipAddrBlock: critical
IPv4:
202.69.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:66:eb:53:27:2a:d9:9f:8d:b2:64:1a:d4:58:53:69:b0:63:
0d:54:e3:5d:f0:57:cb:dc:09:57:df:dd:f4:a0:22:1f:ad:34:
4d:0b:c2:b9:b3:ec:4d:19:be:78:ec:8d:b0:bd:10:4e:85:59:
30:5d:60:f6:c1:13:6b:af:d4:26:04:60:10:f7:38:15:50:50:
27:2e:1e:38:eb:85:68:f0:76:09:20:57:bd:45:40:3c:dc:c3:
95:01:23:8d:25:60:9a:ba:6d:44:3a:2e:3a:08:84:bd:b6:76:
32:1f:fe:7d:24:21:ef:c6:41:f4:5b:63:a4:27:35:88:d8:c7:
d8:32:ed:8a:82:f8:d6:b9:8f:96:ca:81:6b:2e:07:7f:9a:77:
cd:22:f7:67:16:0b:aa:74:93:6b:57:df:9e:24:a8:15:5b:e0:
1b:47:be:fa:30:1d:de:dd:d3:98:3e:44:7a:bb:df:c9:41:19:
77:f5:cc:9f:ca:b9:12:5b:56:5a:ce:1f:0c:d9:3e:2b:4d:e4:
83:81:94:b9:7b:46:b3:2a:5c:fb:5e:7b:f7:cd:48:c8:8c:85:
0f:92:9d:b3:30:67:28:91:80:a3:00:a8:91:da:e6:cd:e4:4f:
58:a0:2d:b7:77:52:cb:46:a6:76:b9:9d:bc:5a:a9:b4:aa:7b:
74:17:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:13 2026 by rpki-client