
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/SmANob6uzB2khks6N-zOuLH-2oQ.roa
File: SmANob6uzB2khks6N-zOuLH-2oQ.roa (raw, json)
Hash identifier: iuYkJjgBc0EYp+4+fQT0P/vsO7iMBExnmMc7DjPdZEY=
Subject key identifier: 4A:60:0D:A1:BE:AE:CC:1D:A4:86:4B:3A:37:EC:CE:B8:B1:FE:DA:84
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 61
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/SmANob6uzB2khks6N-zOuLH-2oQ.roa
Signing time: Sun 01 Feb 2026 01:35:47 +0000
ROA not before: Sun 01 Feb 2026 01:35:47 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 17698
IP address blocks: 49.128.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Feb 1 01:35:47 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=4A600DA1BEAECC1DA4864B3A37ECCEB8B1FEDA84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:ad:7f:0c:0b:90:06:b2:43:1a:76:9a:a5:
8c:7f:eb:87:e8:e0:2c:7e:aa:d0:5f:23:70:31:b0:
4d:0a:dd:f5:2b:b5:de:74:1a:62:d6:e1:8b:e7:8d:
0e:10:32:bc:52:3b:0b:2e:de:6c:d1:a8:da:a3:89:
54:3d:48:d5:f4:32:0b:a0:0e:9e:2f:3a:e2:56:9a:
76:18:4d:0d:01:ff:2a:54:06:64:a8:fd:58:81:28:
8c:6a:93:35:40:08:63:f9:a3:ce:17:db:9b:f0:b2:
df:48:28:1a:6f:98:af:b4:16:95:56:75:7a:fa:e7:
ff:0a:e5:77:3d:11:fb:1f:ec:f5:81:a9:ff:ae:bc:
d8:40:a5:9f:82:3f:27:fb:18:7a:75:90:6e:18:25:
53:92:a1:78:f6:34:24:0d:51:64:0b:1f:c7:56:18:
31:92:7d:37:69:a4:99:5f:c9:8e:c8:45:d2:4e:95:
56:75:88:91:f8:40:56:79:74:b2:ed:6a:5a:81:bd:
7d:e1:99:67:0b:19:09:65:97:a5:9b:72:3c:f0:d8:
8f:14:3b:34:76:e4:79:53:9a:27:00:ac:27:08:66:
76:12:50:cd:3d:de:d3:b6:60:6e:36:91:34:89:4b:
fc:2d:93:86:c2:07:c9:71:7f:86:9c:46:22:1c:d6:
ec:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:0D:A1:BE:AE:CC:1D:A4:86:4B:3A:37:EC:CE:B8:B1:FE:DA:84
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/SmANob6uzB2khks6N-zOuLH-2oQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.16.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:dd:8b:c2:16:f1:17:ba:12:93:08:90:50:a3:23:be:04:fd:
2d:78:41:5a:fb:10:2d:94:0d:77:38:ae:7f:d0:57:8e:cf:01:
c7:2e:87:0d:a1:e9:0d:f2:14:57:d6:51:3c:f6:d3:6c:34:63:
5e:00:ef:33:f0:e4:88:31:9f:e9:fe:d7:09:ce:19:72:0f:97:
5b:d8:58:cc:97:7b:ef:6e:6d:b5:4c:ea:02:cf:52:4d:93:63:
70:cd:e0:a4:32:42:98:11:49:75:9e:3e:85:be:6f:35:04:40:
ff:98:8d:d7:f1:97:f6:53:0d:c1:35:63:45:79:87:bb:18:01:
c2:9e:72:6c:9d:5e:ab:dc:b4:d7:1c:00:e6:26:5f:67:71:78:
25:4a:ab:d7:9f:66:f9:10:eb:19:44:2a:67:24:75:e5:c0:cf:
43:6b:2d:aa:66:b8:56:e2:ed:9d:19:34:67:d1:8d:47:2d:d8:
eb:5d:9b:2f:2f:73:2b:37:ba:b1:ca:c3:79:54:2e:66:d0:33:
d3:b9:23:c3:63:51:b4:51:cf:37:68:65:95:c2:fc:ee:df:5e:
e1:76:a1:30:52:26:df:40:8f:bd:7a:8e:c6:51:d5:88:de:52:
9e:5b:52:ac:b8:fc:9e:ad:4a:63:a6:c8:a1:6b:41:7d:42:89:
bc:6c:20:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:59:00 2026 by rpki-client