
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/R2FIHsrEGdkm2QYFIGdkTF9S0u8.roa
File: R2FIHsrEGdkm2QYFIGdkTF9S0u8.roa (raw, json)
Hash identifier: hPpGyxz1O8aZoWaJ/Ni6z+BVXhu0yEPpzbqcBf6kxmM=
Subject key identifier: 47:61:48:1E:CA:C4:19:D9:26:D9:06:05:20:67:64:4C:5F:52:D2:EF
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 02CD
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/R2FIHsrEGdkm2QYFIGdkTF9S0u8.roa
Signing time: Tue 31 Mar 2026 07:34:49 +0000
ROA not before: Tue 31 Mar 2026 07:34:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4761481ECAC419D926D906052067644C5F52D2EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:49:bc:86:8a:a8:e2:89:1a:8f:f5:f9:ce:
d7:07:05:89:28:79:21:b6:f5:4e:fe:1d:d0:3a:af:
b4:89:5a:cc:ba:bf:95:08:68:e7:86:dd:13:41:19:
a5:e7:63:0b:0d:4c:dd:ad:3f:71:8c:7f:78:1f:00:
68:4c:d9:a9:3e:b9:4e:21:5e:2d:b1:a5:d6:3e:de:
a5:e6:94:7d:ee:d9:97:d3:3d:22:ca:36:b2:16:7f:
56:6b:a7:b0:dc:e6:8a:b7:3c:39:d8:00:35:bc:6e:
d1:59:92:19:70:c2:81:5c:04:56:a1:60:fb:14:83:
82:9c:3b:f1:8c:f9:da:89:37:15:c4:42:4e:ed:6e:
f2:28:5d:07:2f:cd:fc:04:4f:e9:a8:34:44:14:e5:
d4:54:af:f4:fd:3a:92:09:8a:0b:a3:d9:af:86:17:
cb:7c:46:80:02:9f:0f:a6:ea:1f:de:31:63:b5:1c:
58:34:b5:c0:69:31:b8:cb:55:dc:a2:96:e5:e0:bc:
71:fb:d4:a9:45:30:08:28:4e:ba:61:42:ef:53:33:
93:c6:01:72:b6:d2:0f:7c:56:f7:92:6a:12:66:f3:
68:16:82:fb:41:79:7e:81:5e:c3:26:4c:9f:ec:86:
06:a6:c4:ca:51:dc:63:a1:35:3a:4c:89:1c:15:66:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:61:48:1E:CA:C4:19:D9:26:D9:06:05:20:67:64:4C:5F:52:D2:EF
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/R2FIHsrEGdkm2QYFIGdkTF9S0u8.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:eb:97:c6:90:bf:9b:30:70:b7:6e:19:db:fa:a4:7b:d9:74:
21:62:11:7b:ce:42:ef:9b:ed:77:a7:0f:74:b5:78:8c:55:0c:
2b:4c:4a:7b:03:2d:ed:3e:3b:39:36:a6:f2:21:50:b0:5f:0c:
13:61:36:01:8c:c1:9c:a3:b0:99:15:d9:4f:98:56:78:b5:23:
37:2d:e3:8d:c7:c9:55:ee:a0:27:7e:7b:c0:e9:3c:9d:53:01:
65:d1:19:2a:81:c3:79:a3:32:e1:c6:14:77:48:03:46:75:17:
7e:d3:89:ee:40:70:70:9a:b4:2e:7e:4d:9e:7b:19:fe:cd:1e:
c4:0a:13:ab:cf:a1:a3:74:b1:07:f6:c1:21:e1:0c:57:57:23:
24:1c:ff:5a:79:f2:84:7e:46:70:98:75:f3:6f:db:bf:79:16:
0a:3a:bc:cc:c1:56:16:86:05:13:a0:f5:7b:b4:81:b8:f4:d0:
97:1c:e9:9f:96:3c:ae:b2:c0:3e:a5:a1:49:09:e8:a9:10:a5:
e4:54:25:81:00:e6:c7:99:53:58:b6:06:37:6a:7d:24:15:c5:
ac:f2:e4:b5:52:09:cb:24:59:ed:e8:ea:93:43:ea:0f:2c:f8:
42:ae:e4:05:2a:e1:22:66:02:74:d5:73:46:5d:cc:45:40:7c:
d6:39:cf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:50 2026 by rpki-client