
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IhYFTD2QuapIzdzvilOuVe7g1dw.roa
File: IhYFTD2QuapIzdzvilOuVe7g1dw.roa (raw, json)
Hash identifier: Tj+QQ335/3gAgb5hwXkc+nrH9rmTLJ5vjES+5xJbKxw=
Subject key identifier: 22:16:05:4C:3D:90:B9:AA:48:CD:DC:EF:8A:53:AE:55:EE:E0:D5:DC
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 02A0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IhYFTD2QuapIzdzvilOuVe7g1dw.roa
Signing time: Tue 31 Mar 2026 07:34:28 +0000
ROA not before: Tue 31 Mar 2026 07:34:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9371
IP address blocks: 49.212.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2216054C3D90B9AA48CDDCEF8A53AE55EEE0D5DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:e1:d1:6e:94:20:e2:c8:d4:46:b6:6e:07:
a5:8e:5b:86:d9:bc:14:d4:b4:63:e6:c0:a3:86:3b:
d7:97:71:7d:50:35:6e:71:9f:9a:03:5f:08:5b:05:
22:01:cc:3a:e1:45:bc:6a:40:75:fe:6a:15:27:56:
86:91:32:59:4d:d3:71:7a:af:eb:de:d4:2f:d0:c7:
5f:bb:26:1e:11:d5:de:bf:72:31:79:1f:b2:c1:ed:
3c:6f:05:b8:97:fc:5f:1c:1b:d1:fa:84:eb:7b:f7:
b7:e1:d4:36:5c:d4:5b:29:71:44:d1:8a:9e:57:28:
62:ae:ec:a2:57:bf:42:b9:b1:96:a5:9b:69:38:c2:
fc:63:7f:06:9d:58:4f:67:44:d6:f6:54:89:1e:ed:
ee:d6:4f:b6:23:fb:38:74:db:46:b6:7a:87:ed:64:
ff:0b:90:da:e0:65:32:e6:2f:e9:3d:ce:f9:e7:25:
61:bc:d9:15:2f:8a:cb:23:7b:33:22:81:d8:8e:d0:
78:df:b6:71:30:e0:49:a1:f5:a8:8e:a9:88:a7:64:
77:60:63:d5:fb:d0:7f:83:d1:41:e3:ee:bd:01:9f:
5a:ba:20:1c:9c:61:20:ad:55:e4:4d:c7:21:dc:2a:
d6:08:40:b5:78:ff:d0:ca:c3:88:70:3b:51:c4:3a:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:05:4C:3D:90:B9:AA:48:CD:DC:EF:8A:53:AE:55:EE:E0:D5:DC
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IhYFTD2QuapIzdzvilOuVe7g1dw.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bb:74:a2:96:f3:82:c2:65:df:be:7a:5f:24:87:d2:93:c6:1b:
10:de:f6:41:2b:68:1b:a6:3f:71:b9:0a:01:b1:cd:4f:ab:b0:
1b:20:62:27:6c:08:d9:84:ce:41:76:bb:33:f5:40:fd:3e:8c:
49:46:db:c4:4d:ee:0d:9c:0a:d4:ca:dd:b1:73:14:31:59:8f:
89:c8:c8:ee:41:0f:a9:ee:11:c1:7a:f4:72:33:ae:93:bb:5f:
48:34:c6:80:fa:f3:00:2f:c2:b1:e5:c6:94:d7:0a:ce:9f:ff:
c1:f5:a3:54:28:51:6a:94:60:ea:c7:8b:ba:3b:d6:6c:9e:48:
f1:ab:dd:40:7c:f0:3e:cd:7e:c1:c1:3a:96:f7:f8:a2:10:5e:
5f:32:61:e7:dd:0e:79:20:27:4c:3a:04:a8:96:f0:76:b9:20:
09:ad:db:a4:d8:9c:a1:60:df:de:74:84:f7:82:f7:a2:0e:9f:
70:c9:f0:c2:b6:85:a3:b3:a8:54:4b:d4:2c:c6:7f:96:e5:f1:
17:fd:f3:cf:3c:c9:5b:16:ae:3a:28:03:97:0a:e8:d0:23:1e:
41:dc:c2:1d:94:bb:fc:ab:63:1c:a3:29:68:3f:44:9e:13:ad:
cd:e8:10:cd:a1:df:72:bd:d2:22:c2:8a:9a:4a:81:95:37:ca:
46:80:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:34 2026 by rpki-client