
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/KBpiDfr96h3nOjfXvBvoMV6xPlA.roa
File: KBpiDfr96h3nOjfXvBvoMV6xPlA.roa (raw, json)
Hash identifier: 8xclo56g6tKRsDQFc/qA3i3YWvEKVCYJWtovjsk2GG0=
Subject key identifier: 28:1A:62:0D:FA:FD:EA:1D:E7:3A:37:D7:BC:1B:E8:31:5E:B1:3E:50
Certificate issuer: /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial: 7D
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/KBpiDfr96h3nOjfXvBvoMV6xPlA.roa
Signing time: Tue 31 Mar 2026 07:49:19 +0000
ROA not before: Tue 31 Mar 2026 07:49:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24296
IP address blocks: 210.252.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Validity
Not Before: Mar 31 07:49:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=281A620DFAFDEA1DE73A37D7BC1BE8315EB13E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:48:6d:27:40:88:7a:47:98:88:a9:43:47:
1b:c1:42:f7:e4:b4:e2:c1:68:25:58:66:72:31:e8:
51:3f:57:b8:61:97:45:1b:d3:0c:46:ae:5d:f4:b8:
b3:f5:7e:65:05:c0:c2:ee:0c:8a:d7:e1:33:ea:ef:
92:d2:c2:f5:90:30:3f:17:81:65:2d:bb:29:ba:3b:
a0:ef:3e:f3:47:a1:f6:fd:17:3f:98:6c:c6:c3:cb:
de:f4:a0:76:47:a0:6a:95:dc:66:d3:56:bc:1d:db:
c2:f0:e1:9b:75:90:6a:e2:1b:9d:4e:28:05:27:d4:
ef:14:bb:1a:d5:4c:26:aa:51:86:1d:31:fb:64:ee:
e4:8d:84:01:ec:20:c3:ea:13:e9:60:2b:d9:ea:f4:
a2:94:ad:4c:6e:d5:b5:df:d7:7d:81:21:fc:95:6f:
23:39:bd:3f:32:5f:f9:00:73:4b:d7:2c:49:e7:77:
0c:89:dd:3e:17:a3:d6:89:4b:87:95:f3:df:c2:55:
f5:86:eb:87:e7:7f:32:b1:0d:24:d5:63:c1:d2:e5:
cc:4b:2b:7b:72:88:4a:ba:1c:e9:88:ae:ba:9b:56:
d7:a6:19:0d:e4:69:e2:cd:11:a6:52:b8:ac:5c:b0:
0d:5e:71:c0:44:52:a7:4a:b6:3b:1b:3a:01:92:26:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1A:62:0D:FA:FD:EA:1D:E7:3A:37:D7:BC:1B:E8:31:5E:B1:3E:50
X509v3 Authority Key Identifier:
keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/KBpiDfr96h3nOjfXvBvoMV6xPlA.roa
sbgp-ipAddrBlock: critical
IPv4:
210.252.64.0/19
Signature Algorithm: sha256WithRSAEncryption
51:a4:3e:9d:16:76:c6:7e:a5:72:04:7b:90:45:f4:f5:7c:09:
18:ff:2e:8a:e7:71:cc:8e:90:e2:ec:b2:3a:c5:f1:bc:0b:f3:
e9:5e:1c:b0:b5:c6:f4:d6:9a:54:17:a4:cb:64:ea:a7:35:d2:
c0:de:6b:bb:05:2c:d9:54:96:b0:1f:cb:5a:84:0b:75:91:50:
86:a7:b6:7a:e6:55:2d:5f:2b:7c:05:a4:96:18:15:fe:fe:4b:
24:76:e8:8d:27:2a:3c:ac:3b:80:67:cd:be:5f:9d:71:6a:ec:
99:11:1c:44:8a:e9:db:8e:22:50:01:5e:6c:ed:0c:70:f6:fa:
5c:8b:f1:ef:18:bd:76:7e:44:20:5d:2c:33:56:ac:88:ff:72:
4d:1e:a6:dc:75:8c:ea:cd:91:72:53:1b:48:fa:70:9b:ca:bf:
e4:07:02:95:82:1a:14:79:ee:3b:c1:b9:59:6a:9f:a5:a4:fe:
99:07:b8:b5:33:20:df:c1:29:c1:74:56:cc:e0:de:61:17:69:
1c:9c:59:cb:ab:ed:38:ed:52:7d:46:b4:02:f8:73:48:e0:8d:
dc:fe:07:fd:cf:67:c5:97:bc:d1:ff:00:0e:bc:e3:13:e7:f1:
26:c6:87:7b:f8:3c:a5:e6:e9:55:d1:1c:81:75:f1:c4:df:71:
6f:5d:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:43:29 2026 by rpki-client