
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20220/zXW16OWW_eJSgABGFvA3tWntOUA.roa
File: zXW16OWW_eJSgABGFvA3tWntOUA.roa (raw, json)
Hash identifier: Zz/m8g2Hm8TUZaSPMH5AoHpcWDYSePzpnWOczLqeH60=
Subject key identifier: CD:75:B5:E8:E5:96:FD:E2:52:80:00:46:16:F0:37:B5:69:ED:39:40
Certificate issuer: /CN=FF0CF78BA02D6955CE5D696ABCA0A7FE1D2C571A
Certificate serial: 2E
Authority key identifier: FF:0C:F7:8B:A0:2D:69:55:CE:5D:69:6A:BC:A0:A7:FE:1D:2C:57:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_wz3i6AtaVXOXWlqvKCn_h0sVxo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/zXW16OWW_eJSgABGFvA3tWntOUA.roa
Signing time: Tue 31 Mar 2026 08:33:07 +0000
ROA not before: Tue 31 Mar 2026 08:33:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 149042
IP address blocks: 103.214.168.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/_wz3i6AtaVXOXWlqvKCn_h0sVxo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/_wz3i6AtaVXOXWlqvKCn_h0sVxo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_wz3i6AtaVXOXWlqvKCn_h0sVxo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF0CF78BA02D6955CE5D696ABCA0A7FE1D2C571A
Validity
Not Before: Mar 31 08:33:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CD75B5E8E596FDE25280004616F037B569ED3940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:96:9f:95:71:00:4a:d6:7d:33:ee:d3:70:
73:a4:78:35:ec:23:6c:24:c4:03:4e:70:84:b8:00:
61:3f:e0:77:f2:bb:9b:7c:5c:a8:cb:22:d1:39:b6:
62:7f:04:79:d3:77:a6:45:81:54:d5:21:b2:1a:96:
42:66:60:59:d5:9b:1d:5d:29:a4:06:60:44:a7:90:
f0:45:fe:83:57:e4:59:be:46:49:7f:e3:a8:41:e7:
cd:f9:2a:dd:6c:4f:b1:7d:4e:a6:5d:7a:2c:30:ff:
86:21:30:d9:7e:73:e6:83:fb:c5:1a:a7:c0:1a:ec:
18:a4:02:ff:df:5b:ba:bb:11:1d:e6:e6:19:7f:27:
4a:1f:f7:7c:7d:16:85:d6:2c:c7:e2:e6:08:f6:be:
19:ad:1c:bf:9a:83:28:0e:75:b3:40:33:b9:37:4d:
da:e3:fd:1e:b2:a3:fe:64:55:2c:1d:ce:47:a7:11:
f1:99:7e:d6:e8:a8:e3:28:fe:5f:ee:3b:14:46:a2:
92:8f:97:af:a9:a5:7c:37:b1:3f:bb:40:3b:01:73:
4d:7e:9d:10:49:64:f7:ec:ba:a5:27:26:49:73:67:
88:69:d8:55:75:89:f1:2a:86:98:16:6c:de:7b:95:
4b:ca:31:91:32:7b:98:af:86:fd:0f:1d:04:df:2b:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:75:B5:E8:E5:96:FD:E2:52:80:00:46:16:F0:37:B5:69:ED:39:40
X509v3 Authority Key Identifier:
keyid:FF:0C:F7:8B:A0:2D:69:55:CE:5D:69:6A:BC:A0:A7:FE:1D:2C:57:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/_wz3i6AtaVXOXWlqvKCn_h0sVxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_wz3i6AtaVXOXWlqvKCn_h0sVxo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20220/zXW16OWW_eJSgABGFvA3tWntOUA.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.168.0/23
Signature Algorithm: sha256WithRSAEncryption
36:c2:1d:ad:d2:aa:02:74:30:7e:dd:16:62:51:fc:83:78:c7:
9b:32:54:21:97:6d:53:f6:d3:d3:cd:9e:f2:4d:bd:4d:8a:6e:
97:02:b8:19:4d:39:3a:fa:1e:0e:20:e5:d9:60:dd:84:c8:4f:
10:3a:7f:74:d1:df:79:70:2e:f2:28:a7:f0:08:b4:c1:81:b4:
d9:82:d2:ba:e6:6f:ce:db:6c:fc:d0:57:91:44:e9:1e:81:df:
8c:a8:64:cc:f1:83:ea:e1:f9:39:d2:b1:45:c4:39:ba:fc:22:
cc:fb:f8:e7:c8:84:ad:7a:c4:14:bb:af:69:55:28:47:7e:79:
cd:fc:b4:07:42:8d:9e:b0:42:26:cc:12:8b:8c:83:2c:73:46:
2e:d1:c6:52:5e:b3:eb:4d:29:37:41:1e:ca:b0:33:b9:57:bd:
93:44:bd:91:77:19:37:8b:a8:52:10:4a:69:a1:b2:fd:1e:96:
a9:1a:d7:5f:8c:d9:65:f2:35:a4:e2:2a:29:83:5d:d1:19:98:
8c:47:32:71:17:7f:76:9f:6b:26:c3:33:3c:ed:64:7b:11:2e:
6d:ec:c5:a2:83:96:de:4e:10:ab:32:db:e0:c5:35:3e:64:a1:
0f:0e:06:a1:2c:d2:19:95:db:0e:53:75:9d:df:be:8d:ef:48:
bd:dc:c1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:54:20 2026 by rpki-client