
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/6ikU3pfDVYY4gKOcDnkMPZ_SetA.roa
File: 6ikU3pfDVYY4gKOcDnkMPZ_SetA.roa (raw, json)
Hash identifier: xsfACYf+Bt/ap5OBxDqSmCzxIV0uavDK7raQxulPdz4=
Subject key identifier: EA:29:14:DE:97:C3:55:86:38:80:A3:9C:0E:79:0C:3D:9F:D2:7A:D0
Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial: A2
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/6ikU3pfDVYY4gKOcDnkMPZ_SetA.roa
Signing time: Tue 31 Mar 2026 08:30:47 +0000
ROA not before: Tue 31 Mar 2026 08:30:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 101.203.88.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
Validity
Not Before: Mar 31 08:30:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EA2914DE97C355863880A39C0E790C3D9FD27AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:21:f4:07:33:b1:51:3e:4b:9c:c3:f7:59:7b:
d1:de:cf:39:3d:08:16:d2:a7:56:76:aa:91:09:5b:
2c:3f:a8:b7:09:50:17:e0:82:35:45:9d:71:65:74:
88:e8:e8:d4:4a:ac:47:b2:41:14:5a:51:75:c2:15:
5f:7b:d5:af:e7:30:34:d5:67:7b:ad:de:f6:d3:84:
32:f5:ec:32:54:a5:d9:4c:4b:2d:e5:a2:08:48:06:
4f:59:92:d8:c5:ec:84:65:3a:74:9a:ac:cb:aa:bb:
72:12:53:07:03:56:df:da:2c:8f:e4:c2:6d:d7:a8:
75:ff:79:cb:03:72:17:fa:3c:af:62:2c:5a:28:5a:
be:f8:42:7b:4b:b6:d8:a2:20:9a:b6:1e:70:6b:f8:
c7:b1:33:20:d6:4b:c9:1b:ba:91:72:dc:be:86:9e:
93:32:ae:94:0b:ee:ea:ef:3f:79:25:a1:7a:6b:b1:
b2:24:d3:ba:53:ac:44:4f:24:f2:34:db:d5:cb:dd:
34:2c:1e:cd:b7:9c:6e:c8:36:da:af:a2:bd:fe:0c:
48:bc:27:4c:e2:ad:c6:2d:98:a4:09:fd:49:32:83:
69:a6:34:3f:1f:70:0f:5c:bc:44:58:27:5a:81:7d:
f5:02:aa:90:be:98:7a:e0:97:c5:38:d5:35:e4:d5:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:29:14:DE:97:C3:55:86:38:80:A3:9C:0E:79:0C:3D:9F:D2:7A:D0
X509v3 Authority Key Identifier:
keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/6ikU3pfDVYY4gKOcDnkMPZ_SetA.roa
sbgp-ipAddrBlock: critical
IPv4:
101.203.88.0/22
Signature Algorithm: sha256WithRSAEncryption
63:03:75:7f:e2:64:57:9b:77:02:e6:86:a7:dd:cc:fa:9d:55:
dc:25:13:c1:95:cf:01:7f:02:b8:d2:59:d5:a5:4f:b1:ad:c7:
98:5d:38:79:95:57:c7:c5:d0:50:6b:90:79:b8:36:44:49:69:
c8:c8:f0:96:59:02:c7:8a:87:e9:6e:2f:b9:6d:48:4d:d1:50:
4b:03:e8:99:1f:61:e1:0c:f0:06:70:27:e8:0c:05:19:d8:fc:
de:34:c8:ab:7d:79:b6:e6:db:a1:9a:f9:83:5f:c8:5c:83:02:
65:6f:57:11:ce:47:66:a8:ef:1b:65:4d:5a:6e:d5:42:4c:00:
17:5b:ae:55:d9:ea:a6:fe:11:4e:1f:17:86:84:0d:58:86:06:
dc:62:35:a1:d5:45:0e:64:68:72:4f:2b:c9:7c:32:e9:c4:5a:
3c:81:21:4e:00:f7:d7:d8:1c:2e:10:ea:ff:ca:da:bb:e6:0b:
08:09:a3:51:02:3a:33:59:ae:06:ad:59:55:ee:eb:9e:6a:90:
c8:46:7d:00:b1:95:ae:98:61:95:d9:59:80:4d:6e:e5:67:87:
9d:93:d5:db:a2:26:69:32:64:8c:ac:2f:89:e5:b0:43:88:6a:
d3:d7:b9:65:fd:c7:e4:71:d8:1c:7a:0e:f3:f5:0d:02:cd:0c:
80:d3:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:15 2026 by rpki-client