
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/kTMEnmUtPJYTvglEod8vtGOPIsw.roa
File: kTMEnmUtPJYTvglEod8vtGOPIsw.roa (raw, json)
Hash identifier: AS2ngvOX5r127xh79QlRtVG+pxbOJbMoTZQQM6qQN/w=
Subject key identifier: 91:33:04:9E:65:2D:3C:96:13:BE:09:44:A1:DF:2F:B4:63:8F:22:CC
Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial: 7C
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/kTMEnmUtPJYTvglEod8vtGOPIsw.roa
Signing time: Tue 31 Mar 2026 07:32:27 +0000
ROA not before: Tue 31 Mar 2026 07:32:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4717
IP address blocks: 202.249.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Validity
Not Before: Mar 31 07:32:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9133049E652D3C9613BE0944A1DF2FB4638F22CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:d4:c5:5a:7b:18:2e:11:54:45:2c:27:de:
74:6e:9d:2a:89:89:e3:89:5a:f0:41:c5:82:53:16:
b2:56:dc:8f:4c:73:4b:92:3b:84:7c:ab:51:9d:b1:
06:6b:d9:93:47:ab:c8:83:96:79:19:0a:d4:5f:23:
22:f0:4c:20:ab:66:96:dc:a2:8f:3f:35:4c:9f:28:
35:73:28:0c:3d:71:03:d7:7b:4a:72:fa:95:84:9f:
26:1d:de:57:94:4e:54:35:60:37:99:9f:44:15:ed:
11:25:1f:83:13:6f:08:db:a1:cb:eb:65:a4:d6:54:
b8:1a:b6:46:03:f2:97:e0:11:14:ca:7f:be:97:75:
a1:c9:13:a4:a8:80:2a:d1:7c:61:a2:ed:72:a3:63:
e1:87:54:84:1f:55:5f:da:ad:1e:b1:fd:87:52:4c:
32:d0:57:18:31:3a:ff:17:87:31:ca:46:2c:e0:00:
0c:1d:24:42:6f:d3:7b:33:a7:1a:a7:da:7d:11:06:
e2:12:71:f1:7d:44:00:74:99:34:b7:b1:81:31:d2:
d8:6c:6b:9f:23:6a:70:9a:7e:f5:79:50:e4:1b:29:
ab:e9:d2:72:a2:51:70:92:17:30:4f:40:a3:98:96:
8d:6f:62:e1:5c:21:8e:ff:52:29:06:f2:c0:7f:96:
ce:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:04:9E:65:2D:3C:96:13:BE:09:44:A1:DF:2F:B4:63:8F:22:CC
X509v3 Authority Key Identifier:
keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/kTMEnmUtPJYTvglEod8vtGOPIsw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.249.47.0/24
Signature Algorithm: sha256WithRSAEncryption
16:9c:67:ea:f3:4a:82:90:2b:f0:9a:b0:d6:c1:1f:dc:9a:31:
08:3e:33:9f:16:09:17:ec:b6:ca:19:e7:48:69:68:f4:9f:68:
67:77:cf:69:3e:db:84:2b:1f:72:6f:2c:8d:fa:a0:c6:b1:02:
b9:ee:58:ff:2a:03:a1:03:68:1d:c0:6c:bc:f2:22:20:04:7e:
4d:bb:d2:5e:1b:e7:f2:8b:b3:54:96:fd:39:a8:03:a5:ec:a6:
25:6e:f5:c1:ee:44:50:df:11:dc:02:53:ee:91:7e:a9:8e:06:
10:91:46:26:bf:0a:35:b0:33:5a:f2:38:3e:6d:a3:86:0a:f8:
2f:98:31:c8:62:38:e2:74:cc:c6:97:cd:34:ae:f6:20:6c:b3:
39:f5:94:76:8a:3e:8a:2a:f6:39:cc:44:93:c5:7d:c0:33:63:
69:45:05:8a:bd:0e:7d:1c:b1:c6:71:5a:6f:3f:a9:e2:0e:aa:
cb:b7:2a:78:1d:c1:75:5d:8f:db:8d:4e:5b:7a:4f:29:e8:29:
c5:d4:71:f1:05:46:e8:7a:a9:02:8b:99:9d:a8:4a:c3:41:be:
ce:c4:7d:fa:fb:dd:33:a6:93:93:04:f8:55:59:a4:e9:ed:71:
43:24:52:d0:c0:e5:f6:e4:b9:1c:81:a8:b5:d2:69:75:aa:92:
04:fa:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:08:17 2026 by rpki-client