
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hb45fJS90GQciuI-FI76mK6ikcM.roa
File: Hb45fJS90GQciuI-FI76mK6ikcM.roa (raw, json)
Hash identifier: sXyM11HqAkhGRJkZClpuC6mLybCRJJp93uebu7Q6/Ro=
Subject key identifier: 1D:BE:39:7C:94:BD:D0:64:1C:8A:E2:3E:14:8E:FA:98:AE:A2:91:C3
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0292
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hb45fJS90GQciuI-FI76mK6ikcM.roa
Signing time: Tue 31 Mar 2026 07:34:21 +0000
ROA not before: Tue 31 Mar 2026 07:34:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1DBE397C94BDD0641C8AE23E148EFA98AEA291C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:01:5c:1d:ac:85:d5:97:08:c5:50:10:68:
ef:c7:2f:31:a8:29:a7:41:16:b6:c5:e2:53:e1:88:
40:0c:c0:e6:08:8c:66:c6:05:35:41:1e:fb:a2:d5:
27:cc:71:2c:1b:c8:dc:cf:68:e2:0d:5b:ec:d6:2c:
2c:5a:67:5f:9c:3a:c2:3e:30:c1:b7:88:1b:83:99:
de:85:b7:78:94:9a:97:78:55:e2:39:14:71:b7:8a:
33:3a:f9:b4:82:23:48:2a:c1:20:59:a2:09:6c:9c:
45:9d:f6:41:3e:73:2a:be:b6:91:3a:40:82:52:b5:
9c:44:95:36:99:95:f2:88:a6:4e:23:ed:6a:08:16:
db:f5:ee:5c:9c:10:0a:82:df:61:1f:77:44:7b:c4:
08:1f:e0:b4:43:70:69:e8:e6:59:17:8c:a1:8d:17:
a3:85:02:f8:d5:0b:d8:e1:6f:9f:9d:65:95:1f:fe:
bd:4b:4b:9c:cd:7b:ba:68:18:f2:9a:ee:4e:93:c5:
b4:30:3a:53:41:31:89:d4:08:06:23:e0:2c:b1:e6:
dd:0a:6c:3c:18:ca:43:cc:b2:2c:cb:01:2c:07:d9:
ad:ac:ff:4a:3c:6c:65:74:c0:cd:90:6c:70:9c:cf:
0c:b6:78:f6:1a:f5:0c:b0:10:f4:a1:86:70:d6:85:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BE:39:7C:94:BD:D0:64:1C:8A:E2:3E:14:8E:FA:98:AE:A2:91:C3
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hb45fJS90GQciuI-FI76mK6ikcM.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.78.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c9:c4:28:c0:f9:81:3f:02:85:86:50:78:9e:0d:34:66:26:
8a:56:6c:25:bc:4c:9b:9f:c5:e6:53:db:f4:d6:6a:9f:2e:0c:
95:d7:50:c5:62:7f:9c:57:fd:88:7a:c9:fa:4f:5d:58:8b:67:
7d:88:19:70:87:93:7d:5e:28:ca:71:de:5b:34:a0:3c:0f:52:
33:bb:71:1b:63:1d:87:b9:93:ff:54:2c:5b:57:d6:cc:8b:10:
71:cd:bd:a7:93:57:8a:5e:27:35:85:b9:df:e9:7f:25:a1:7e:
be:2f:88:5f:c8:9d:f9:a5:b2:ba:4b:62:e9:66:21:2f:5e:19:
18:14:29:37:08:b7:05:95:43:71:0f:3d:19:de:9f:74:82:a8:
9c:a3:20:2d:64:a4:73:77:39:6a:88:2b:45:a6:ec:ce:c1:c5:
b4:34:e0:89:b9:b0:61:b5:06:49:27:90:5d:c0:03:ed:bf:ec:
e9:5e:36:e0:d9:38:8b:76:c0:44:69:39:3a:2b:71:8c:6f:77:
5f:a2:6f:14:63:68:e8:f3:0a:98:c4:86:bd:18:91:95:d1:59:
cb:fa:e7:c9:40:60:f5:e1:a0:a0:a9:a4:a9:74:f7:62:3e:ca:
39:1a:94:0f:b6:34:d6:f8:e6:92:cf:3f:9f:f4:80:c3:9c:8e:
4b:a6:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:42 2026 by rpki-client