
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/kr70GHZ0ixusZ77bpLf8zVxFrO4.roa
File: kr70GHZ0ixusZ77bpLf8zVxFrO4.roa (raw, json)
Hash identifier: AF4Dd5ny70gb4kFw+QLnT+M0KGuIaON+g7Fas3QBDO0=
Subject key identifier: 92:BE:F4:18:76:74:8B:1B:AC:67:BE:DB:A4:B7:FC:CD:5C:45:AC:EE
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 74
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/kr70GHZ0ixusZ77bpLf8zVxFrO4.roa
Signing time: Tue 31 Mar 2026 07:37:45 +0000
ROA not before: Tue 31 Mar 2026 07:37:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17675
IP address blocks: 103.28.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116 (0x74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Mar 31 07:37:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=92BEF41876748B1BAC67BEDBA4B7FCCD5C45ACEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:6f:7e:36:d9:19:6f:d9:a4:ed:fe:26:4d:
ed:0d:1a:16:e3:b8:b1:2c:3b:f0:7d:7b:27:b7:b9:
66:c1:b9:02:e6:31:ab:ba:00:93:9d:b3:d7:19:c5:
34:1b:25:4a:b7:eb:1e:85:95:4a:69:33:94:62:9b:
0a:68:9b:9d:fe:0c:ba:3a:49:0e:5a:fa:aa:c1:8d:
c4:6d:f7:06:bc:0c:0a:bb:31:ea:bb:02:ce:3b:b9:
63:e0:9d:3e:20:fe:08:72:39:61:26:7b:e1:a0:bd:
e5:71:d4:57:81:ad:80:4f:13:07:c8:f7:89:16:2b:
e9:2b:df:b0:d2:10:29:91:cd:78:8d:ed:95:b8:6f:
90:ec:d7:dc:f5:e7:3c:62:86:ef:8c:f8:18:3b:08:
6e:a1:32:d7:87:73:c9:de:48:c5:73:c1:6a:c1:d1:
32:cb:33:5e:a3:60:e6:ff:c2:00:b0:e1:82:ae:d4:
a6:37:d2:a6:a9:d0:5d:1d:21:74:40:91:6e:1a:e3:
df:3a:fd:42:a6:89:fc:b9:42:ac:71:fa:4d:0f:b5:
eb:19:d2:14:b3:db:2e:f7:db:ad:7b:c3:6c:1d:b3:
7c:3a:f1:98:03:53:c8:08:b1:66:f2:b5:1d:a7:0c:
27:23:31:71:b6:3a:17:5d:d2:df:42:8e:96:51:2f:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:F4:18:76:74:8B:1B:AC:67:BE:DB:A4:B7:FC:CD:5C:45:AC:EE
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/kr70GHZ0ixusZ77bpLf8zVxFrO4.roa
sbgp-ipAddrBlock: critical
IPv4:
103.28.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:75:c4:07:59:5b:5a:85:8e:ec:8a:77:04:39:49:8c:a3:60:
b4:ad:36:77:bf:b8:6b:f5:66:dd:c8:3b:ff:c1:cd:5b:42:3b:
56:50:f8:f3:ef:5b:d0:d8:69:5f:66:0f:9f:6b:4a:d9:18:f6:
57:21:30:ba:0b:76:fd:dd:7d:c1:a0:0d:0e:cf:57:01:6c:34:
98:ea:f6:87:7e:d5:fd:75:2a:69:6d:77:55:f4:d2:1c:0b:af:
bf:96:d0:ab:6d:ea:c4:bd:1b:7e:bc:2c:f5:59:ea:8e:01:c7:
78:b7:98:70:ad:12:7b:2e:c9:25:c3:6b:7d:c4:68:c1:17:ce:
cc:a4:9d:4c:4d:e9:88:4c:1c:cd:18:6b:8b:6c:0b:9c:da:24:
95:08:de:ae:82:88:3f:95:9d:70:c4:58:9e:15:4a:9e:3c:f1:
4f:47:c5:5e:47:d2:28:ba:ba:c7:2c:db:c6:c6:85:bf:41:49:
05:04:12:98:30:a4:c9:0e:57:56:bc:e1:62:b4:3e:65:18:67:
98:cb:fa:ee:f0:4f:dd:08:be:89:15:58:21:fa:79:03:85:8e:
7a:e8:2b:6f:f7:23:3b:d0:2b:85:b5:a8:fb:b2:c1:ab:a1:0b:
5e:8b:ef:1c:91:bb:f6:79:8d:30:82:c4:c1:b8:c1:90:ee:6e:
ed:a2:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:52 2026 by rpki-client