
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/7X8vtS0NMdNx2KWcUlAukWSxsac.roa
File: 7X8vtS0NMdNx2KWcUlAukWSxsac.roa (raw, json)
Hash identifier: t4GX06qYsP+WDUdiwjFspFsdvd24p5Q4/r7SowGeIXM=
Subject key identifier: ED:7F:2F:B5:2D:0D:31:D3:71:D8:A5:9C:52:50:2E:91:64:B1:B1:A7
Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial: 9E
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/7X8vtS0NMdNx2KWcUlAukWSxsac.roa
Signing time: Tue 31 Mar 2026 07:37:29 +0000
ROA not before: Tue 31 Mar 2026 07:37:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17675
IP address blocks: 203.169.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 03:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Validity
Not Before: Mar 31 07:37:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=ED7F2FB52D0D31D371D8A59C52502E9164B1B1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:0a:d4:ec:c3:45:54:a3:20:07:37:67:1c:
7b:7b:be:ac:c3:af:40:5d:6a:28:cd:31:f8:0c:ff:
05:71:6f:de:0a:b4:8d:62:6e:2e:cf:88:45:b8:63:
3e:99:44:46:fb:54:25:5b:0b:3d:e8:3c:30:52:e6:
97:e3:f6:d2:5b:27:22:aa:8d:4f:1a:ed:68:97:dd:
78:ec:64:81:6b:2a:7b:36:45:99:91:08:c9:6c:eb:
84:84:2a:19:f8:c6:23:f8:7c:2a:83:26:3d:22:d2:
49:6a:4d:73:9e:26:04:26:6d:4a:1c:c7:6e:fa:bb:
30:74:e2:00:d9:0a:85:6f:57:f1:a3:80:2b:d6:ac:
c0:9a:d6:b9:bf:1e:86:81:46:e9:35:53:7b:8a:7f:
f2:ad:84:1c:a2:8c:84:50:0f:52:4f:d3:c7:63:cf:
69:e8:a8:53:12:24:cc:bc:f0:a4:38:77:03:97:58:
7b:4c:2c:f7:d1:61:3e:0d:6b:35:f6:d2:bb:23:f2:
87:96:be:27:e0:aa:be:b8:84:aa:78:18:b6:22:b5:
4e:d6:8a:3e:99:c9:f7:a4:46:b7:41:cb:a5:1e:ee:
e3:3a:67:3a:d8:52:64:e1:8e:d7:a5:92:65:37:e6:
08:8a:95:bc:ba:80:c8:03:65:b5:dd:e8:44:c7:5f:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:2F:B5:2D:0D:31:D3:71:D8:A5:9C:52:50:2E:91:64:B1:B1:A7
X509v3 Authority Key Identifier:
keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/7X8vtS0NMdNx2KWcUlAukWSxsac.roa
sbgp-ipAddrBlock: critical
IPv4:
203.169.8.0/21
Signature Algorithm: sha256WithRSAEncryption
95:09:3e:48:6f:3e:c1:15:26:3b:26:bd:3e:e8:25:98:91:4a:
7e:e9:45:a5:4f:67:cf:60:2f:86:a8:43:af:7c:65:da:f3:35:
04:3f:7c:25:d5:38:6c:d5:97:0e:69:60:aa:6d:2c:0d:5a:87:
66:53:99:d3:ee:62:c9:3f:49:1f:33:dd:7a:4f:a3:d2:9b:75:
84:ec:00:6c:76:9c:82:b1:c0:23:ae:a4:37:60:17:13:9b:57:
37:f2:ce:d2:ae:3d:be:5a:89:15:38:68:06:79:f5:3c:63:7e:
fe:0a:61:e8:83:99:0d:51:1f:3b:25:e5:17:71:4e:e8:fe:9d:
5f:bb:bc:ee:39:97:6a:63:f5:80:1d:27:6b:48:dd:d1:0a:3e:
bc:0c:fa:f8:6a:c9:1f:dd:ab:ca:f0:b0:73:d0:ed:9b:df:a5:
dc:a0:9d:2f:66:ad:63:55:c4:80:b5:1e:25:e3:65:3d:73:b9:
76:dc:45:42:01:ef:8c:36:6b:c4:de:ad:ad:88:88:90:75:66:
14:6d:88:c0:0f:b9:20:1e:f6:2b:9f:9c:b5:c5:81:e6:1a:83:
54:e9:ea:df:73:a3:e7:df:d5:e4:bb:3c:9c:e8:b9:cc:aa:c9:
4d:13:44:3c:fa:7b:39:46:d3:de:1d:34:dc:28:7b:f9:e6:65:
1c:b7:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 05:10:41 2026 by rpki-client