
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/HIkobqk4_TFqq-Zd6P6EvAFDJHk.roa
File: HIkobqk4_TFqq-Zd6P6EvAFDJHk.roa (raw, json)
Hash identifier: zGpbT27wHdGNy7ubsK9Hn7g6t4FhueEpWQ8hxlTtjU4=
Subject key identifier: 1C:89:28:6E:A9:38:FD:31:6A:AB:E6:5D:E8:FE:84:BC:01:43:24:79
Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial: A4
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/HIkobqk4_TFqq-Zd6P6EvAFDJHk.roa
Signing time: Tue 31 Mar 2026 07:37:33 +0000
ROA not before: Tue 31 Mar 2026 07:37:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24295
IP address blocks: 203.169.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 23:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Validity
Not Before: Mar 31 07:37:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1C89286EA938FD316AABE65DE8FE84BC01432479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:16:97:8e:7a:ab:6b:80:7d:21:4e:13:5b:
a9:d1:05:85:27:c4:3a:de:7a:9b:5b:7b:cb:be:84:
d7:7b:15:41:2f:5a:5b:44:d8:bc:b6:ed:5c:ec:17:
c9:f5:be:9e:7b:66:91:26:57:5c:1f:4e:9e:f9:34:
3f:28:5c:f1:16:25:fe:fd:0f:00:22:3d:71:da:b2:
b2:54:f6:e0:02:c2:d3:d8:8c:a4:44:93:c2:33:f0:
db:6c:e7:68:13:fb:9c:9d:1b:e7:3e:30:f3:16:7f:
39:ec:98:a1:1b:f7:c9:b4:0f:5e:62:d3:9c:26:b8:
30:5a:c4:1d:b8:6e:2b:30:99:ed:f6:89:7b:08:a3:
23:f9:6c:74:31:ff:cc:4c:ff:72:d7:7d:33:58:6c:
e9:ff:32:cb:9a:a6:8e:7f:fb:fa:9e:0c:69:6f:b7:
b8:f1:f7:c4:8c:27:6c:b9:31:9b:d6:ad:94:5a:42:
02:2c:65:cf:67:a3:d6:c6:16:a5:1c:3d:69:7b:ef:
aa:b6:35:7c:05:07:23:9c:09:46:ac:55:41:3a:cf:
a0:91:f4:33:30:92:cd:13:c7:2c:cc:c0:86:09:29:
c9:d9:7e:96:14:2e:19:6c:44:b6:ec:fa:1d:2b:a2:
23:ca:de:70:cb:0d:48:37:25:00:4b:1c:6d:5b:a2:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:28:6E:A9:38:FD:31:6A:AB:E6:5D:E8:FE:84:BC:01:43:24:79
X509v3 Authority Key Identifier:
keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/HIkobqk4_TFqq-Zd6P6EvAFDJHk.roa
sbgp-ipAddrBlock: critical
IPv4:
203.169.14.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ed:2f:d3:ea:7a:24:be:94:74:da:24:b0:9c:b6:f9:b7:2b:
8d:fa:da:d5:67:a6:10:3d:77:67:65:06:de:ce:27:c8:17:cd:
62:7f:88:8e:38:0b:51:7a:00:f6:7e:d9:1b:5d:6c:32:e1:cf:
21:2a:ed:89:f6:34:b7:a9:46:b5:ed:f0:e5:35:85:03:de:7a:
d4:6f:8b:6c:d6:59:0e:11:04:4d:c0:99:c1:97:c7:10:62:2c:
1a:74:28:06:32:d7:8b:4d:f9:46:64:70:22:96:0f:b3:f7:0b:
e4:4e:fa:22:bd:ea:50:c5:20:f7:ac:a3:79:60:bd:08:12:7e:
c4:ec:90:3c:d6:c2:42:ea:8c:9d:df:2d:09:2e:db:8a:af:d7:
eb:32:e9:59:69:51:cb:72:0b:21:f9:ff:4d:0b:6f:37:ea:a1:
d6:e0:53:fa:20:48:c4:13:2f:88:31:ab:fb:0d:d5:08:9d:d9:
a9:3a:3a:07:ac:dd:81:8b:ae:a9:d2:cb:0c:9c:68:6c:0d:cc:
62:9c:ba:85:76:a7:b7:df:42:09:35:69:7a:e0:b5:62:d7:54:
82:d4:e2:74:a5:57:23:d2:58:69:c8:c9:a3:1f:ec:63:67:26:
37:81:b5:f1:55:bb:74:23:24:49:10:3c:94:ea:1b:b5:f3:75:
77:2c:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 02:20:33 2026 by rpki-client