
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/iNaxyP27mwmObyh-Cua0e9L_FOA.roa
File: iNaxyP27mwmObyh-Cua0e9L_FOA.roa (raw, json)
Hash identifier: LeI+NcxSREG9jVSHNcFwZmk9GxjAoUqTjhbI+aq7QtA=
Subject key identifier: 88:D6:B1:C8:FD:BB:9B:09:8E:6F:28:7E:0A:E6:B4:7B:D2:FF:14:E0
Certificate issuer: /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial: A0
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/iNaxyP27mwmObyh-Cua0e9L_FOA.roa
Signing time: Tue 31 Mar 2026 08:30:46 +0000
ROA not before: Tue 31 Mar 2026 08:30:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 103.203.158.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
Validity
Not Before: Mar 31 08:30:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=88D6B1C8FDBB9B098E6F287E0AE6B47BD2FF14E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6a:e8:55:93:58:3f:a2:63:95:45:79:4c:df:
f7:37:30:c0:bc:ee:04:bf:de:83:1f:3b:3c:5f:29:
22:bf:3a:60:a6:20:c9:d0:90:5c:7a:35:c6:69:1c:
03:80:a1:4f:48:0d:d4:66:b7:24:ea:95:98:55:9b:
af:2c:7d:56:c3:c9:9f:f5:67:88:0e:70:d0:a8:82:
77:93:c1:d9:88:07:df:bf:f8:c3:04:a1:87:9e:0e:
33:f5:82:2f:6b:53:e6:33:ff:48:eb:8e:8a:ce:62:
0d:e3:e6:19:81:0a:81:1e:7d:a1:b4:d2:eb:1a:e0:
d4:5d:e6:5d:12:fe:ba:65:3b:4b:c0:f0:62:53:e6:
ad:e0:c4:60:b3:a4:7b:b5:79:3a:50:7c:49:5a:32:
ab:3e:92:03:b6:fa:af:30:2b:03:a5:2d:f6:47:fc:
4e:42:2d:db:eb:e9:b6:13:f9:85:b6:2d:f8:b1:e4:
00:1a:a6:51:60:c5:be:12:0a:00:69:53:ba:dd:26:
3c:2b:5d:22:09:c0:fb:5d:e4:bb:cd:c3:ca:9b:a8:
79:6c:8e:d9:64:d2:62:fe:90:6c:1f:23:04:bf:b4:
09:be:c5:b9:cb:47:a7:06:26:2d:61:02:89:7d:db:
37:14:83:02:20:04:16:df:bf:57:fd:f6:2b:91:1e:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D6:B1:C8:FD:BB:9B:09:8E:6F:28:7E:0A:E6:B4:7B:D2:FF:14:E0
X509v3 Authority Key Identifier:
keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/iNaxyP27mwmObyh-Cua0e9L_FOA.roa
sbgp-ipAddrBlock: critical
IPv4:
103.203.158.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:6c:64:ad:6a:80:56:2f:b3:e1:96:11:00:3d:f8:89:44:bc:
28:3d:c8:02:15:b3:db:fc:fe:4e:2f:d0:a3:cb:20:43:c3:40:
4d:2e:e1:60:0d:7a:c3:51:f9:ea:10:22:2c:7a:55:e4:fc:49:
b5:20:48:e9:09:f3:58:e4:e2:31:f2:29:24:a4:5d:ac:37:c7:
80:59:a7:28:7e:44:59:6b:26:1c:a3:6e:4c:5a:bc:90:35:79:
10:73:d7:a3:ea:b0:c7:70:72:c5:30:4f:35:3e:2b:7a:34:0a:
76:33:6f:49:2c:23:40:7f:37:57:d3:02:e4:66:c5:58:59:9f:
83:80:e9:7e:aa:dc:06:4c:71:1b:94:d6:bb:3e:31:07:21:02:
99:d2:68:7c:c9:97:71:41:a7:fd:4a:db:7b:94:8d:14:62:a2:
b1:4a:f7:31:7f:d7:82:8e:2d:32:0c:76:cb:e0:92:a4:55:c3:
dc:16:15:6a:d3:31:b8:c1:73:ef:b4:62:ef:28:e0:4d:a4:46:
c3:09:96:03:3c:10:0d:04:e2:26:95:cf:c0:42:a0:f5:da:2c:
3e:8a:4a:30:61:95:88:1b:30:3b:7e:26:8f:d2:55:8a:c4:4b:
bc:ff:f4:00:ca:37:b9:3c:fe:a4:1c:bc:97:1a:b3:d9:bf:7e:
a7:04:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:24 2026 by rpki-client