
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/-tpMObVJK7UZdWzYdZD7xWfve8Y.roa
File: -tpMObVJK7UZdWzYdZD7xWfve8Y.roa (raw, json)
Hash identifier: w6Vn6DWUVPSYF67nIoKMAL6yP2hpkjvCjGD5+0MeCIk=
Subject key identifier: FA:DA:4C:39:B5:49:2B:B5:19:75:6C:D8:75:90:FB:C5:67:EF:7B:C6
Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial: 7F
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/-tpMObVJK7UZdWzYdZD7xWfve8Y.roa
Signing time: Tue 31 Mar 2026 07:32:29 +0000
ROA not before: Tue 31 Mar 2026 07:32:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2500
IP address blocks: 203.178.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127 (0x7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Validity
Not Before: Mar 31 07:32:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FADA4C39B5492BB519756CD87590FBC567EF7BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2f:5a:f7:2f:cb:b4:7a:b5:fc:c6:01:b6:c8:
3e:eb:25:f6:0d:a2:d7:06:b9:fc:82:2e:a6:d6:d2:
d8:d9:f7:cc:8a:94:eb:73:ca:62:2f:26:a7:56:62:
bc:41:59:6f:93:30:ae:91:5f:d7:3e:f1:98:95:54:
35:a6:80:34:04:03:24:76:60:bb:d2:6d:5d:f3:ec:
c9:34:93:12:82:bd:fd:e8:54:e1:04:84:d9:6f:b6:
c1:74:48:f6:f3:0b:64:40:70:f7:40:a2:3c:6e:b4:
be:7f:01:3a:5b:f0:78:46:4c:35:cd:a8:8b:65:47:
6c:a9:28:b8:d6:43:de:00:ee:8e:6b:9e:1b:30:41:
37:37:a7:7c:9d:9d:31:09:84:bf:2b:34:7e:a7:69:
4e:97:7a:40:d2:ea:01:26:fa:c8:86:a6:4f:2b:11:
df:5a:6d:26:b0:c6:43:e2:57:2d:be:67:4b:b9:15:
a4:d4:9e:d7:3c:82:7c:9c:6a:3e:2f:b3:d1:e2:7e:
c7:d9:3d:7b:f1:f3:a6:fd:6c:03:1a:5e:35:73:d5:
85:b3:f5:87:a7:77:d7:fc:3a:fd:a2:7c:5d:57:29:
0b:8f:ed:d0:58:14:21:63:ca:e9:ab:ce:e6:74:80:
f0:3b:81:4c:8e:62:21:43:31:44:cd:67:f5:1b:1a:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:4C:39:B5:49:2B:B5:19:75:6C:D8:75:90:FB:C5:67:EF:7B:C6
X509v3 Authority Key Identifier:
keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/-tpMObVJK7UZdWzYdZD7xWfve8Y.roa
sbgp-ipAddrBlock: critical
IPv4:
203.178.136.0/21
Signature Algorithm: sha256WithRSAEncryption
65:69:ab:e9:9d:f9:8f:31:ad:de:90:7a:2e:2b:11:a9:4f:d5:
0c:9e:b7:7e:cd:37:f3:97:ed:d2:39:8c:d4:f5:54:b2:c1:5a:
24:f1:26:68:a3:7c:c7:f1:7d:bd:3c:dc:20:3a:80:ae:c6:94:
9c:59:df:3d:25:28:9f:a2:ae:83:bd:16:9f:17:72:25:5e:7c:
c6:28:3e:8a:eb:5d:ef:72:da:71:b8:6b:e6:93:1b:73:74:6c:
4d:57:62:62:65:26:f2:bd:b8:90:3d:ef:50:ea:ad:7a:2f:61:
d3:37:b3:6c:ad:a2:b7:df:bd:a1:f2:a8:82:da:a7:97:bd:ff:
cb:ab:ba:7c:88:98:69:e5:96:e3:4b:2b:d7:ed:35:68:39:1d:
d0:a9:30:91:44:9d:86:0a:64:8f:6a:c8:12:67:c3:30:e2:84:
9b:13:58:e4:fc:d9:ac:f3:d5:f9:21:2f:35:ce:50:05:f5:db:
11:a6:9e:37:36:e1:35:b2:5b:94:8f:1d:f8:26:8b:4c:18:63:
e7:a2:94:6c:eb:8b:aa:20:5e:f4:c6:2c:17:44:e5:31:29:64:
a9:85:2f:ca:44:91:e0:d1:80:ff:45:1d:e7:b2:a7:76:e5:30:
a0:c2:bc:ac:12:d5:43:de:d1:c6:6b:b8:02:f2:42:6b:bf:ca:
4c:a4:fa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:40:47 2026 by rpki-client