
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/582/CE8a9lh7Up9KRlgo5cpKjtrZkt0.roa
File: CE8a9lh7Up9KRlgo5cpKjtrZkt0.roa (raw, json)
Hash identifier: c/cNPcOWaYFpVZBgEXksN9SJCbL8wYSwlBaBtn27vw0=
Subject key identifier: 08:4F:1A:F6:58:7B:52:9F:4A:46:58:28:E5:CA:4A:8E:DA:D9:92:DD
Certificate issuer: /CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Certificate serial: 04
Authority key identifier: A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/CE8a9lh7Up9KRlgo5cpKjtrZkt0.roa
Signing time: Tue 07 Jul 2026 06:47:22 +0000
ROA not before: Tue 07 Jul 2026 06:47:22 +0000
ROA not after: Wed 07 Jul 2027 01:18:23 +0000
asID: 59107
IP address blocks: 103.49.88.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Validity
Not Before: Jul 7 06:47:22 2026 GMT
Not After : Jul 7 01:18:23 2027 GMT
Subject: CN=084F1AF6587B529F4A465828E5CA4A8EDAD992DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:94:bd:4c:08:7e:5d:29:c0:3a:7b:3f:e2:
de:6c:8d:68:48:4e:ee:66:3b:e3:c8:3a:68:89:99:
60:22:0a:02:22:6e:ff:a1:ef:5d:5f:29:e3:10:e3:
a1:75:4f:cc:64:26:d9:85:dd:13:c9:3e:2e:bd:d3:
26:d5:6d:89:d9:c2:3b:61:ec:8e:7e:aa:f7:ee:b7:
b7:c5:31:a4:7c:6a:0e:78:f2:48:1d:57:68:d0:ca:
ee:29:aa:db:e6:ef:a0:ed:1d:05:fd:80:16:6e:39:
c0:a0:7b:cf:d5:ac:c8:15:0a:e3:f5:53:7a:90:8c:
2a:06:06:84:70:24:dc:dc:67:91:a2:cc:ac:bb:9c:
ad:32:1c:9d:d3:ec:22:ab:3f:9e:f4:02:05:0f:70:
08:02:48:31:6a:a4:0d:ef:65:37:e8:d7:49:34:7e:
e8:9f:24:95:5e:48:b0:55:34:a0:0b:b1:8e:bc:b9:
b9:93:06:06:66:6b:32:15:1a:06:b0:7f:a3:37:8f:
8c:40:9e:ca:1e:d4:ed:df:01:ec:b1:a7:30:07:e0:
cd:d4:e3:9b:8f:3a:1b:f4:85:27:cf:46:6f:33:76:
05:77:07:e8:17:fe:ff:5f:2a:aa:01:4d:a7:9d:8d:
c3:72:20:68:cd:35:a4:1b:2d:b6:6a:70:b8:6b:cc:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:1A:F6:58:7B:52:9F:4A:46:58:28:E5:CA:4A:8E:DA:D9:92:DD
X509v3 Authority Key Identifier:
keyid:A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/CE8a9lh7Up9KRlgo5cpKjtrZkt0.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.88.0/22
Signature Algorithm: sha256WithRSAEncryption
92:22:f0:37:59:37:eb:34:7a:b1:b5:3b:4f:4b:1b:a5:4d:e0:
a1:e2:02:b7:bb:04:a9:67:fa:11:d7:19:37:e6:28:81:bb:21:
85:38:21:e9:71:03:19:79:a3:60:13:85:4d:8e:b3:6f:05:60:
03:2e:dc:03:95:44:12:c3:10:82:fe:ca:0a:fd:d3:dc:db:b4:
26:b5:4f:d7:3c:f7:68:b4:b8:1f:e7:6d:fe:e4:e9:d5:18:dd:
f2:80:12:d2:b0:25:d6:5e:7d:02:e8:24:9d:f5:eb:a5:7b:24:
6c:8b:33:0d:03:fa:5f:25:e9:35:c0:3c:f6:dd:96:45:ab:cc:
6b:b8:b9:66:06:68:e5:70:c7:85:df:80:db:84:17:d3:b2:d3:
fa:cc:34:52:c3:d1:1b:16:9a:23:20:79:c3:ca:d3:a1:f1:14:
e5:0e:0d:e0:1f:57:c6:b7:bd:65:26:e3:df:93:d2:f4:61:a3:
30:cc:77:3a:48:7d:01:d4:cc:e9:4d:ca:7e:15:04:79:a5:2c:
fa:23:97:96:e0:49:69:d9:e1:ff:e1:14:52:a9:50:0f:57:4f:
73:64:39:45:89:cb:d5:86:82:77:c0:8f:46:3a:18:dc:a8:e1:
9d:60:7f:f7:4d:74:9d:d6:41:06:67:49:ef:9d:1e:a6:71:aa:
54:7f:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:29:23 2026 by rpki-client