
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/Q4vmoO-RbNyOGCIUdeOzDkLdoTs.roa
File: Q4vmoO-RbNyOGCIUdeOzDkLdoTs.roa (raw, json)
Hash identifier: UD6Rc9uCfD98sp72vRN3mb/+Z18tzhkETsPZJeUjSNo=
Subject key identifier: 43:8B:E6:A0:EF:91:6C:DC:8E:18:22:14:75:E3:B3:0E:42:DD:A1:3B
Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial: 7B
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/Q4vmoO-RbNyOGCIUdeOzDkLdoTs.roa
Signing time: Tue 31 Mar 2026 07:32:27 +0000
ROA not before: Tue 31 Mar 2026 07:32:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2500
IP address blocks: 203.178.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Validity
Not Before: Mar 31 07:32:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=438BE6A0EF916CDC8E18221475E3B30E42DDA13B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:aa:30:2d:3b:3c:8b:15:99:f5:4f:32:15:
c4:2a:44:8d:7a:88:d4:6d:3d:7c:8a:d5:c6:42:ab:
36:cd:c1:c4:7f:ef:4b:d2:77:f1:2c:33:d2:5a:45:
f1:d7:1a:45:f9:98:62:0f:3c:85:9b:c5:bf:ef:ff:
71:16:85:ec:25:55:1d:d6:55:c2:0f:67:ce:bb:61:
e5:8b:01:c9:42:34:e0:74:76:6d:1b:4a:b3:7a:c9:
50:c6:50:18:b9:55:02:32:53:f6:5a:10:22:7e:1c:
71:d2:fa:f7:fe:97:c2:30:54:0d:b4:ca:bd:c1:37:
3f:64:68:30:2c:e0:3b:53:1b:4d:4c:5d:06:84:21:
4a:8b:e1:40:52:55:e0:65:bd:4a:ac:70:26:87:ce:
df:8d:72:b0:c9:b4:8f:70:bf:20:89:04:13:d9:8c:
29:ac:19:83:05:7c:41:ca:46:4f:21:55:6a:c9:2b:
53:7c:fe:0e:dc:d1:e6:06:5b:55:73:f1:09:08:34:
97:8a:8d:ca:0f:bf:7d:49:8a:35:dc:e2:7b:d9:cf:
2e:82:0b:e8:67:0f:98:86:a1:0f:51:64:d5:16:09:
13:7f:e7:7a:9a:56:00:dc:25:61:79:2b:c7:8a:6e:
7c:6f:c5:a4:40:03:2d:06:b6:bc:58:d7:37:91:c6:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:E6:A0:EF:91:6C:DC:8E:18:22:14:75:E3:B3:0E:42:DD:A1:3B
X509v3 Authority Key Identifier:
keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/Q4vmoO-RbNyOGCIUdeOzDkLdoTs.roa
sbgp-ipAddrBlock: critical
IPv4:
203.178.128.0/17
Signature Algorithm: sha256WithRSAEncryption
28:cb:67:13:27:0b:b0:4a:6e:1a:f5:18:8a:e9:9a:b2:8f:ff:
2d:78:40:56:e3:43:99:9d:da:13:fd:6c:22:98:c9:d2:41:7d:
c3:79:07:fb:25:a9:95:9c:79:78:22:a2:f1:0f:3a:b4:8f:21:
bd:e6:69:26:16:88:29:40:4b:d3:52:8c:dc:cb:2f:c7:2c:aa:
f6:5f:ee:e5:75:68:e1:85:aa:d5:6c:cc:ab:8a:c7:9a:48:11:
18:cf:d3:3c:d7:b0:de:7a:a0:c6:87:b5:0c:0b:9a:20:a2:a2:
9c:5e:c3:5b:db:49:7f:41:8f:64:dd:68:08:0b:f0:7f:23:6d:
07:44:2a:a9:22:d5:3b:2b:8f:32:fa:a5:31:92:cb:f3:39:50:
69:76:65:54:19:13:22:2a:47:fc:d5:5d:83:01:a5:77:a5:88:
ad:ae:80:d8:69:74:b3:62:7d:64:b6:73:df:c7:de:0c:8d:2b:
56:3b:b8:1b:26:70:dd:64:ef:39:94:25:e3:85:17:68:3b:9d:
5a:80:79:af:5a:8a:38:e3:74:50:96:cc:05:d4:75:c2:c0:ab:
c9:03:2d:cd:45:8d:fa:b9:e2:66:84:d6:73:88:3b:9e:f2:0f:
62:af:41:02:c0:46:3f:a3:11:76:71:1e:81:b9:18:60:4c:6c:
46:b8:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:40:47 2026 by rpki-client