
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/C_GH7njl41CnNuSVhiKjc63ogBA.roa
File: C_GH7njl41CnNuSVhiKjc63ogBA.roa (raw, json)
Hash identifier: E8CHCkQhC9BDMH5w8zD9s7Jna9uKTqUtirYBYYE73xk=
Subject key identifier: 0B:F1:87:EE:78:E5:E3:50:A7:36:E4:95:86:22:A3:73:AD:E8:80:10
Certificate issuer: /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
Certificate serial: 24
Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/C_GH7njl41CnNuSVhiKjc63ogBA.roa
Signing time: Tue 31 Mar 2026 08:42:16 +0000
ROA not before: Tue 31 Mar 2026 08:42:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9593
IP address blocks: 138.101.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
Validity
Not Before: Mar 31 08:42:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0BF187EE78E5E350A736E4958622A373ADE88010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:e0:9a:86:51:12:2e:0f:d2:9b:57:f7:3e:
42:1b:a9:5b:b9:23:34:40:ff:1e:da:9f:42:0b:61:
61:1f:13:66:30:fe:f3:05:e4:05:29:4a:f3:0a:3c:
62:49:9e:b2:3b:6e:c7:2d:d4:e8:dc:33:bc:02:93:
56:25:7f:fd:72:f1:78:bb:c8:80:a7:c8:e4:b3:2a:
cf:4b:7a:75:06:61:83:b0:bc:94:ac:6b:3f:f5:e9:
f3:33:2a:77:3b:ae:d0:d5:70:b9:d5:c7:46:82:94:
f8:d3:5b:14:0e:37:f8:38:34:4c:f5:26:36:99:d1:
20:02:2d:a0:b2:29:86:89:4a:a9:09:f0:4a:b7:41:
f6:84:48:c5:3e:5e:e1:0f:14:b6:97:4e:3a:63:13:
dc:d8:e5:8f:73:87:00:1a:fe:b6:ae:64:02:0b:0f:
ed:61:3c:08:85:24:28:72:38:34:6b:68:e2:d7:62:
fb:80:fd:c0:09:4b:05:59:ec:a9:37:6d:be:c5:51:
20:5b:7d:18:eb:28:67:a9:49:83:57:0f:11:b8:6b:
a6:35:58:bc:bb:24:10:a2:90:f2:72:d5:79:4b:cc:
61:c8:49:24:0f:7a:88:c8:f7:76:64:6a:d9:04:3e:
d3:8c:4d:37:b8:d9:1c:85:dd:17:fa:3f:79:58:37:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F1:87:EE:78:E5:E3:50:A7:36:E4:95:86:22:A3:73:AD:E8:80:10
X509v3 Authority Key Identifier:
keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/C_GH7njl41CnNuSVhiKjc63ogBA.roa
sbgp-ipAddrBlock: critical
IPv4:
138.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:0a:66:67:93:3c:96:33:b8:98:04:26:60:67:99:d4:41:ed:
61:99:16:6f:75:03:67:95:9b:db:28:5e:62:67:95:ae:ef:72:
d0:32:e3:8b:c8:e9:f9:dc:e1:53:3b:de:bb:58:65:3f:c0:e5:
10:b2:9b:8d:af:3d:1c:7b:91:cb:d2:25:b4:90:8e:c7:2c:43:
52:c9:ae:e0:bc:a5:ad:5f:00:78:7d:2f:96:d8:8b:bd:82:38:
4d:92:8f:ae:25:57:6a:c4:09:bd:a2:e9:81:61:fd:1f:df:e7:
b0:63:44:ec:92:b1:fc:ca:08:98:c3:b8:c7:54:a8:69:a9:d3:
9b:9b:61:b8:4b:73:47:c0:0c:0a:e2:0d:99:31:35:8e:f9:35:
d9:3b:25:86:86:eb:8d:73:2f:e7:bf:36:4b:84:07:f5:30:2d:
89:70:cf:08:52:e8:60:4b:0d:e8:82:6e:6c:e2:32:8c:ca:fc:
c5:ad:d1:0d:fd:6d:14:4f:19:37:35:56:a4:25:38:90:63:79:
de:00:66:de:22:ea:4c:c8:7e:10:ea:8a:92:51:7e:42:76:44:
35:4a:eb:85:06:4b:21:c0:05:10:c8:bf:5b:79:68:41:e8:ef:
91:4a:5f:5e:58:10:36:15:06:b9:d9:1f:5e:8f:40:f7:fb:62:
69:d2:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:28 2026 by rpki-client