
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sMdGKHyqrbz4RGpdoUHPfu9G6qI.roa
File: sMdGKHyqrbz4RGpdoUHPfu9G6qI.roa (raw, json)
Hash identifier: uRfVIgVkFkysNcK8lr2JcYG7Sy+w5x0X4krVpcr9/HU=
Subject key identifier: B0:C7:46:28:7C:AA:AD:BC:F8:44:6A:5D:A1:41:CF:7E:EF:46:EA:A2
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 02D0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sMdGKHyqrbz4RGpdoUHPfu9G6qI.roa
Signing time: Tue 31 Mar 2026 07:34:51 +0000
ROA not before: Tue 31 Mar 2026 07:34:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 49.212.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B0C746287CAAADBCF8446A5DA141CF7EEF46EAA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:10:70:c0:fc:ce:54:7d:3a:ac:75:52:7e:
06:82:ba:45:1a:c2:8c:bf:04:24:03:8f:b1:e8:25:
19:f2:2d:86:91:d9:fb:d2:5b:e1:04:4d:a3:25:74:
74:06:c0:8e:48:73:2f:65:cd:01:81:59:63:07:24:
dc:f6:3a:22:93:e5:28:01:7c:38:14:10:aa:47:0a:
5a:c5:f2:6f:11:65:f6:67:3d:da:a3:48:3a:52:d4:
24:bb:a2:14:47:6d:11:84:a4:31:59:98:1c:d9:a8:
14:c0:62:1b:53:2d:82:2a:5c:10:26:de:58:6f:42:
62:82:da:e0:07:0d:ca:b7:62:7f:51:87:d9:da:ce:
41:98:e7:78:0f:33:4b:c4:60:ad:fc:34:5d:c3:02:
db:72:2e:de:74:45:c1:02:68:60:7e:86:e0:84:e7:
a1:55:ef:5c:13:83:2c:80:2a:86:5c:1c:70:ec:a3:
24:5b:32:48:97:df:81:18:e4:dc:d5:5b:83:b5:4e:
6f:90:b6:27:33:2f:07:d8:17:ce:9f:be:95:7a:c3:
f4:55:85:c1:1c:f3:8f:cf:fd:13:94:77:1c:bc:98:
08:52:ef:18:a5:01:79:aa:d0:b3:66:98:32:81:5b:
84:01:30:a0:d2:da:d7:e2:33:05:63:6a:b7:e7:02:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C7:46:28:7C:AA:AD:BC:F8:44:6A:5D:A1:41:CF:7E:EF:46:EA:A2
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sMdGKHyqrbz4RGpdoUHPfu9G6qI.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.229.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ed:8f:56:f9:ad:5e:37:e5:62:d3:df:b1:af:64:8e:67:19:
b9:eb:77:c2:5b:7c:a5:6c:bc:5d:70:5b:f3:d9:e8:97:29:e6:
ca:dc:92:64:8b:af:7f:25:7d:82:1e:db:34:cc:cc:f4:54:cb:
4b:ba:b0:51:67:91:e2:6a:f9:57:67:c2:1a:15:07:e8:6b:3a:
31:c4:a0:af:5c:89:e2:0b:ff:fe:90:1d:17:28:e0:d1:89:3e:
f3:7b:d1:d3:93:c8:62:cd:b6:0e:f8:76:28:1f:8b:67:17:4c:
ad:d1:5f:77:39:41:56:78:20:5d:39:87:ae:f5:94:fa:c4:e6:
04:7c:d9:3c:48:38:35:23:a3:33:18:5f:b9:9b:d0:1a:47:38:
0c:80:41:f5:bc:d4:f1:f9:65:7c:59:58:34:cb:04:cb:e5:3c:
96:fc:58:9b:ee:91:2f:6a:e5:9c:c3:93:78:d5:1c:f5:ea:f6:
f5:ed:53:14:fd:94:9e:70:1c:58:fc:83:45:5c:4d:8d:82:1d:
9a:8e:ae:26:34:55:7a:a7:3b:7d:f1:dd:9d:c3:63:a6:b5:4b:
fe:0e:67:59:f3:6c:18:bb:6a:e5:59:a9:f6:80:72:f8:f0:d2:
04:00:e5:95:24:ae:63:41:85:98:1e:b6:c6:55:d2:bb:d1:d3:
2b:0f:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:05 2026 by rpki-client