
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3818/xGKwZIFNXatCLj2Ii-tUbgrnAEA.roa
File: xGKwZIFNXatCLj2Ii-tUbgrnAEA.roa (raw, json)
Hash identifier: TI87NrUnwg03i1LGKucioMu6Kk5iaQCwu5DM0TMaYkI=
Subject key identifier: C4:62:B0:64:81:4D:5D:AB:42:2E:3D:88:8B:EB:54:6E:0A:E7:00:40
Certificate issuer: /CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Certificate serial: 53
Authority key identifier: 18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/xGKwZIFNXatCLj2Ii-tUbgrnAEA.roa
Signing time: Tue 31 Mar 2026 07:52:20 +0000
ROA not before: Tue 31 Mar 2026 07:52:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 16509
IP address blocks: 202.244.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 13:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Validity
Not Before: Mar 31 07:52:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C462B064814D5DAB422E3D888BEB546E0AE70040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:d6:dc:30:17:d5:40:26:1d:cd:fb:7b:d2:
55:6f:ac:c7:55:1f:41:ab:7a:fe:48:b6:19:05:a0:
26:d4:74:8c:b1:cd:b2:2b:f4:30:5f:95:2e:72:f1:
c7:eb:ba:5d:e6:09:b5:60:0b:e4:d7:b5:36:4d:78:
2f:a4:8d:95:f6:7e:09:75:36:84:7e:c7:da:21:eb:
1a:57:18:fb:45:5a:c2:47:32:3c:ec:12:62:2f:c9:
d2:88:18:92:c4:e1:46:77:29:f4:c7:1a:23:ba:be:
76:69:84:87:d3:79:91:d2:83:5a:5e:ec:a4:53:39:
e8:98:cb:1c:c3:5b:aa:32:3b:a7:75:75:9a:96:35:
b0:bf:20:32:bf:97:bd:56:9c:8c:98:5f:3d:51:81:
cb:69:46:ed:5d:b7:19:a1:b6:25:c1:2c:05:ab:4d:
20:ae:74:0f:72:c4:c7:78:09:3a:45:34:cc:e2:9b:
f5:a7:14:4f:e6:84:90:11:19:16:62:e1:c6:68:8f:
0e:70:08:c5:37:fb:0f:75:35:f6:cc:20:39:2e:55:
ac:b9:30:d5:28:39:81:17:51:6d:8f:70:70:9d:06:
5f:60:19:0b:e6:f5:b6:8f:f8:27:60:c4:ce:be:47:
be:02:d6:a2:96:d2:6c:2c:b3:5e:23:1d:d1:c3:3d:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:62:B0:64:81:4D:5D:AB:42:2E:3D:88:8B:EB:54:6E:0A:E7:00:40
X509v3 Authority Key Identifier:
keyid:18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/xGKwZIFNXatCLj2Ii-tUbgrnAEA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.244.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:c5:8c:88:74:45:a5:3f:5c:f1:26:d7:7a:8b:96:d0:4a:3a:
8e:ef:93:4f:73:65:8b:e5:c3:94:6c:b5:fb:26:19:d0:d7:7e:
96:4e:99:af:59:53:76:5a:ab:f9:a4:f1:a6:f1:4b:ff:b0:30:
ec:e2:4e:ea:0e:ea:0d:d4:6e:6e:e2:68:53:32:10:4b:04:a8:
44:ab:80:f4:cc:29:94:d7:df:07:0b:66:d5:97:4e:34:2a:fe:
4d:27:72:77:06:57:f4:62:8a:3d:fd:15:82:ac:58:12:79:01:
6c:65:91:1e:74:ed:25:56:50:35:9b:84:61:eb:95:55:6a:da:
77:63:16:13:ff:71:2e:5c:82:96:31:b5:e8:4a:ba:23:c9:ed:
d4:f2:3f:60:b7:c7:6a:0d:38:3e:d6:dd:74:56:3c:03:7f:0b:
81:fc:ae:c6:92:f5:80:d7:0e:37:67:e2:42:cf:f5:3c:0e:c5:
f6:70:7c:14:63:68:9a:36:9a:25:6f:96:4b:a0:63:99:ee:9c:
19:0b:c3:71:6e:04:b2:27:2f:b5:a2:96:28:39:30:64:7f:d6:
fe:a2:64:50:4a:7d:ec:55:ea:cc:d3:3b:b1:68:eb:e8:4b:bc:
c0:d9:0c:05:1e:3a:43:57:96:ad:e6:02:d5:e9:d6:fa:8b:28:
82:50:79:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 15:37:14 2026 by rpki-client