
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/GhbBdBH5VoNIw7QL44rXVNDHjWY.roa
File: GhbBdBH5VoNIw7QL44rXVNDHjWY.roa (raw, json)
Hash identifier: h/IXqbUr2uuVKuLPjB58qfb3oIjAtGj1pwzu3Dy14JE=
Subject key identifier: 1A:16:C1:74:11:F9:56:83:48:C3:B4:0B:E3:8A:D7:54:D0:C7:8D:66
Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial: 8E
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/GhbBdBH5VoNIw7QL44rXVNDHjWY.roa
Signing time: Tue 31 Mar 2026 07:29:30 +0000
ROA not before: Tue 31 Mar 2026 07:29:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55391
IP address blocks: 217.178.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Validity
Not Before: Mar 31 07:29:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1A16C17411F9568348C3B40BE38AD754D0C78D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:50:d4:8f:d9:49:8a:31:e0:3b:89:71:47:
ea:97:ba:6b:c8:9e:df:6e:3d:e7:c4:1f:52:c2:1c:
8e:67:ce:61:3a:56:03:9e:ab:bf:7d:4d:84:6a:a0:
30:f4:0a:da:9b:54:9b:88:90:d0:ad:14:8f:df:fc:
4d:53:7d:9e:41:cb:4c:77:d3:7c:39:e6:11:f9:c0:
09:53:34:0b:c3:5c:8e:6c:9e:9b:b1:32:08:8c:75:
08:05:bd:12:f1:fb:ce:7a:14:24:e9:e9:c9:07:a4:
12:c1:36:e9:98:b5:cd:66:49:79:37:11:a4:93:26:
9f:8a:5b:fb:39:40:d8:5e:7f:3e:79:eb:22:12:c0:
66:8f:cf:fd:36:1f:05:dd:f9:ba:75:d0:5d:56:80:
65:30:bb:c8:f9:85:a3:b7:be:30:0e:43:03:94:55:
0f:3b:1f:f9:a0:7d:f6:0b:a8:b0:c7:74:15:b1:de:
ee:56:df:85:25:9d:54:e3:88:41:a3:3a:c8:93:b3:
26:9f:8b:9b:f3:12:87:97:bd:56:56:5b:8d:6a:e4:
fa:bb:6a:cc:9d:78:3f:15:bd:82:87:1b:50:43:76:
9e:96:b9:26:af:4a:20:0e:fd:63:d4:9e:3e:4d:61:
e7:f6:66:77:be:83:86:eb:52:ba:98:55:7d:f0:b9:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:16:C1:74:11:F9:56:83:48:C3:B4:0B:E3:8A:D7:54:D0:C7:8D:66
X509v3 Authority Key Identifier:
keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/GhbBdBH5VoNIw7QL44rXVNDHjWY.roa
sbgp-ipAddrBlock: critical
IPv4:
217.178.128.0/17
Signature Algorithm: sha256WithRSAEncryption
82:09:98:da:16:3d:3c:55:57:c0:03:24:c4:67:b5:76:7d:01:
31:da:60:73:63:ad:c6:90:66:3c:58:b7:d6:62:05:6b:01:90:
61:fe:4c:5b:b8:7c:6c:0d:c5:e1:64:1e:06:96:a2:75:18:91:
94:0e:0e:d9:15:a5:bd:bf:57:54:98:c1:b6:13:0a:0c:fe:f3:
05:20:c6:1c:34:b5:97:28:ec:20:81:65:cb:8f:81:d7:8a:8c:
66:8b:c7:57:e9:d3:e9:df:3a:9d:65:ba:17:af:f0:5f:70:55:
77:20:21:b9:a4:1e:11:31:d3:65:7c:8d:a8:3f:98:be:6c:4d:
ba:51:51:3d:f7:2a:77:e3:31:a4:cd:06:f8:61:e2:7a:44:d8:
9f:09:fe:c0:b7:86:f9:19:37:91:0f:33:73:82:3a:9f:18:3a:
07:b3:25:9a:ff:7f:8d:ed:7e:42:59:38:80:25:60:ce:e2:cf:
b8:1e:c7:32:65:7a:a4:38:1c:99:6a:58:dd:e8:b7:a9:d7:1b:
5d:e7:d6:68:41:93:82:bf:72:7e:0d:cb:fc:e0:5f:6e:ea:08:
03:a1:73:15:04:53:38:47:38:f5:25:da:11:64:68:2d:a6:03:
7c:9d:ea:3c:fd:a6:8e:86:13:59:2b:cc:b6:fd:e4:cf:0d:85:
4e:e0:a3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:40 2026 by rpki-client