
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/fQj8GkNVs5iB4IQqU51MiEmhCs0.roa
File: fQj8GkNVs5iB4IQqU51MiEmhCs0.roa (raw, json)
Hash identifier: hbiUPAKwnVtganm/lkU+HcbK9V6C9ew99iH7XfbSTGo=
Subject key identifier: 7D:08:FC:1A:43:55:B3:98:81:E0:84:2A:53:9D:4C:88:49:A1:0A:CD
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 64
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/fQj8GkNVs5iB4IQqU51MiEmhCs0.roa
Signing time: Sun 01 Feb 2026 01:35:49 +0000
ROA not before: Sun 01 Feb 2026 01:35:49 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 17698
IP address blocks: 116.58.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Feb 1 01:35:49 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=7D08FC1A4355B39881E0842A539D4C8849A10ACD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:fa:de:6f:00:c6:21:a7:0c:60:3f:51:99:
20:c2:4b:b1:47:ab:47:d5:c2:d1:3a:44:32:25:80:
52:47:42:86:f6:c3:a3:72:b6:fd:27:20:53:95:00:
33:b5:a7:63:e0:4c:38:e9:21:33:12:b9:ab:c7:b5:
3d:89:d5:da:84:56:9c:72:cd:96:05:36:17:c6:2e:
e4:1d:26:c0:cf:64:0f:c9:58:e1:76:59:86:74:75:
52:d6:d0:74:1e:a6:51:45:4e:fd:5f:1e:97:5d:1c:
5b:52:8e:22:8a:95:43:ef:05:22:99:e4:cd:01:af:
4f:5a:79:45:dd:51:50:a4:ac:71:41:2f:62:af:db:
86:90:8f:36:54:11:66:07:40:42:ae:e4:59:fe:61:
76:39:0b:b6:e9:95:e1:a2:9c:7b:56:4f:11:47:b5:
84:6c:d2:ce:9a:cb:68:34:d3:f8:9f:4d:ec:4b:52:
74:16:0e:f2:6b:69:b9:a9:11:ff:79:56:3d:a4:25:
77:57:8a:fb:c5:54:b1:ae:3b:43:f9:16:c9:db:de:
5f:08:d5:d0:92:e2:00:b8:bf:84:9b:4e:69:96:b3:
a0:02:fa:3c:ed:87:63:7e:9d:d4:b3:8f:51:a0:8a:
2e:7f:dd:bd:2a:8d:f2:b1:c6:8d:e0:8d:9f:17:cb:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:08:FC:1A:43:55:B3:98:81:E0:84:2A:53:9D:4C:88:49:A1:0A:CD
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/fQj8GkNVs5iB4IQqU51MiEmhCs0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.58.144.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:89:ae:0f:19:47:be:b2:ba:5c:c0:94:67:f5:e1:5f:dc:ec:
9e:88:8c:f9:ab:23:2c:38:92:c0:75:e1:de:a8:1f:a3:e7:5d:
31:a3:dc:c7:75:01:8a:37:7d:b9:29:d4:e3:b9:d2:ad:31:21:
6e:10:74:fc:68:72:a2:2d:65:38:5b:9a:81:de:bb:ff:a0:6d:
0c:c7:6b:46:90:38:3f:c4:43:fb:a0:cc:b0:5f:bc:71:61:5b:
91:be:c0:b4:d0:ca:0a:21:5f:8b:95:00:64:46:f9:b3:a0:11:
93:0b:0d:9b:9c:17:45:02:24:64:e8:16:b1:d0:5d:9d:31:8a:
2e:06:15:b0:fe:af:25:ac:83:6b:bc:bd:f9:96:8e:a0:82:27:
4e:50:7d:d9:9d:aa:83:f8:11:c3:0e:d3:06:72:ee:64:d6:38:
dd:b7:57:ae:33:7f:2c:ea:32:a8:64:1f:d5:ac:54:62:63:98:
5c:a2:4b:4c:a1:73:01:c1:a0:c0:3f:87:79:8d:20:3d:f8:58:
cf:82:a1:88:f0:16:97:f5:0a:38:78:33:2f:62:32:04:9f:89:
97:8d:34:19:98:ef:64:0c:35:33:90:96:2b:9e:df:9c:f1:bb:
50:15:88:04:04:2b:c7:da:1b:f5:83:91:27:b8:95:2d:1f:1f:
cf:5b:af:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:55:14 2026 by rpki-client