
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20273/wJCtn0Qvx7wXVsMruPQcQmt9MjA.roa
File: wJCtn0Qvx7wXVsMruPQcQmt9MjA.roa (raw, json)
Hash identifier: h6olKlARvgQfJTyYM+pGQZTul1dECprLvaDaGu+jBzQ=
Subject key identifier: C0:90:AD:9F:44:2F:C7:BC:17:56:C3:2B:B8:F4:1C:42:6B:7D:32:30
Certificate issuer: /CN=895716F04D35F0F8BA47469217046A965E7A9B7A
Certificate serial: 17
Authority key identifier: 89:57:16:F0:4D:35:F0:F8:BA:47:46:92:17:04:6A:96:5E:7A:9B:7A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/wJCtn0Qvx7wXVsMruPQcQmt9MjA.roa
Signing time: Tue 31 Mar 2026 08:44:58 +0000
ROA not before: Tue 31 Mar 2026 08:44:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38656
IP address blocks: 161.248.40.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895716F04D35F0F8BA47469217046A965E7A9B7A
Validity
Not Before: Mar 31 08:44:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C090AD9F442FC7BC1756C32BB8F41C426B7D3230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:04:d2:a6:2e:b9:7d:8e:85:4e:9a:f0:76:
1a:61:ab:e9:1d:a3:8c:69:55:fd:75:6c:05:4e:08:
fb:29:7b:f0:76:35:c1:0c:1b:79:78:18:bf:10:c8:
36:c0:b5:b3:4c:3e:2d:e1:7c:aa:15:aa:53:ec:c5:
5a:b6:27:72:7c:86:c8:a0:f8:e1:99:67:88:bc:7b:
27:98:8b:7d:4d:f6:a6:49:55:1f:38:f7:e7:a4:66:
bb:c1:c9:b4:62:50:0e:9d:84:90:7e:01:a2:7b:fb:
05:54:7b:33:16:e6:1e:92:d9:48:76:f0:1b:1d:d2:
86:e3:d8:ab:f6:9b:6e:03:b1:1d:f9:18:30:e4:dc:
46:7e:f9:c3:b6:e8:d6:02:d0:10:ec:ab:2e:1a:b5:
16:aa:2a:da:bb:3e:1b:db:07:67:e1:fc:71:9f:e9:
3e:48:4b:44:af:a4:ef:1c:98:23:ab:77:07:b9:64:
64:56:19:74:bd:c1:cd:e4:70:8f:28:15:d7:8b:84:
bc:86:89:0f:71:4c:33:e8:b2:88:65:aa:71:a0:a0:
fd:c3:22:bf:e3:7b:9b:0c:61:e9:84:bc:db:57:d4:
b1:e4:95:99:3b:a4:28:52:25:d8:af:d9:53:55:56:
f1:2e:8d:e3:3e:78:4e:bd:b1:5d:cd:3c:55:8c:29:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:90:AD:9F:44:2F:C7:BC:17:56:C3:2B:B8:F4:1C:42:6B:7D:32:30
X509v3 Authority Key Identifier:
keyid:89:57:16:F0:4D:35:F0:F8:BA:47:46:92:17:04:6A:96:5E:7A:9B:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/wJCtn0Qvx7wXVsMruPQcQmt9MjA.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.40.0/23
Signature Algorithm: sha256WithRSAEncryption
01:00:2d:5b:de:88:e1:b5:78:f1:51:52:40:c7:13:0e:0f:10:
78:e9:5b:f0:84:b8:8f:e2:ca:5e:5f:ad:2a:f5:b4:04:83:c3:
be:10:7c:74:69:27:e3:34:73:9d:b6:b0:95:77:ae:d0:09:fa:
0a:88:f1:fa:63:65:53:14:79:b7:d7:cf:23:0b:58:14:d8:89:
1c:04:56:1a:ec:70:43:da:c4:2f:81:fb:9a:bb:0a:23:bd:81:
b3:e3:e3:e1:af:ae:5b:56:94:33:a3:34:68:e7:9b:df:d2:ee:
2c:d8:0b:6f:a0:10:ba:51:30:94:d2:e4:50:69:26:a3:80:7b:
49:19:6f:86:77:42:44:f9:43:7e:27:73:f8:ea:ff:be:8a:25:
0e:3a:38:3a:4a:59:3d:92:99:f5:bc:5f:3c:20:ff:7f:0d:5b:
8c:93:de:b6:43:a7:28:ac:d4:64:10:62:fb:f8:c6:00:a6:86:
cc:f2:ff:84:2d:14:ee:5e:93:96:30:44:8b:a2:80:ab:c9:b3:
29:75:24:24:94:bf:d1:a5:72:60:f3:49:65:fa:55:81:67:08:
77:fe:f2:23:55:32:a5:3f:3e:e5:2d:af:8c:a8:45:89:f2:a2:
b1:e3:77:ed:f4:be:05:11:f2:4b:92:c4:0b:0f:79:3f:6a:de:
94:fd:3e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 16:28:20 2026 by rpki-client