
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/4FmkPkiKKsnNx_eyRm_fDbfxBng.roa
File: 4FmkPkiKKsnNx_eyRm_fDbfxBng.roa (raw, json)
Hash identifier: 6LEoH0Qcjr+fbMtoWr+di086iQf/DfBU6xOUnAl0jfU=
Subject key identifier: E0:59:A4:3E:48:8A:2A:C9:CD:C7:F7:B2:46:6F:DF:0D:B7:F1:06:78
Certificate issuer: /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial: 8E
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/4FmkPkiKKsnNx_eyRm_fDbfxBng.roa
Signing time: Tue 31 Mar 2026 07:29:11 +0000
ROA not before: Tue 31 Mar 2026 07:29:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7667
IP address blocks: 202.255.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Validity
Not Before: Mar 31 07:29:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E059A43E488A2AC9CDC7F7B2466FDF0DB7F10678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:ee:fc:94:d0:80:b6:77:f3:7d:49:81:32:
b2:04:44:99:f2:87:be:fc:ba:f8:f4:22:b7:2f:08:
06:97:df:89:ef:09:cc:2f:a7:cd:7b:a1:55:1a:34:
15:c2:82:37:e2:b7:42:1d:a8:4a:01:21:95:cd:74:
5b:f0:3f:89:63:18:3d:3f:54:4d:a6:20:d9:b0:77:
17:b1:d7:d5:7b:46:01:90:f0:68:dc:79:58:80:27:
2b:80:b4:6f:e6:e1:ce:dc:16:09:1a:5a:6b:99:f3:
73:6e:e4:c7:55:76:d2:a6:b6:79:3d:0d:b4:ea:20:
ca:fa:06:b9:8a:fe:74:de:70:1c:e9:85:6f:62:1c:
bb:db:d9:d2:70:30:e4:46:72:82:7c:64:a7:8b:76:
50:4f:90:cf:5b:f0:e9:60:8e:48:f9:7d:48:97:7b:
30:c6:4f:e4:39:ab:64:4b:1d:06:34:c3:72:e3:2f:
49:fb:b4:f5:16:a3:bd:40:89:91:73:89:67:4e:ac:
f0:bb:6c:b4:8b:95:f4:de:41:ba:7f:b5:46:9a:38:
90:5a:1e:6c:48:bb:07:43:ca:f4:0d:04:4e:51:70:
cc:33:f3:05:ed:1c:58:b1:37:42:09:65:2f:5a:85:
c3:a0:71:67:32:f5:50:63:12:9c:05:42:a2:dc:f7:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:59:A4:3E:48:8A:2A:C9:CD:C7:F7:B2:46:6F:DF:0D:B7:F1:06:78
X509v3 Authority Key Identifier:
keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/4FmkPkiKKsnNx_eyRm_fDbfxBng.roa
sbgp-ipAddrBlock: critical
IPv4:
202.255.45.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:fb:33:8c:f6:65:a5:c1:27:2e:a2:70:70:a2:8e:31:16:38:
e2:60:1c:06:01:34:9f:5a:57:1c:52:35:59:e1:20:5f:06:7c:
37:59:89:b1:86:37:b9:00:cb:38:f2:15:78:8f:31:f4:9d:0f:
b4:9a:5f:a0:ac:14:24:cf:bd:5a:a5:67:36:01:40:a3:a4:d6:
2c:a6:c5:06:f0:cb:1d:39:2e:20:b1:6a:3d:7f:44:22:4f:72:
76:a7:5a:63:3a:2d:0c:d4:46:e7:1b:7b:0f:ec:0a:b9:00:0f:
21:be:7a:2e:d0:1d:e2:8e:36:be:75:c9:ce:44:fe:bb:5e:08:
94:34:a9:88:40:b4:d9:1b:52:ed:75:e4:6e:34:d3:0e:fc:cf:
bf:f3:23:83:df:e7:9a:b4:9d:53:57:24:ac:1d:ef:69:10:24:
50:61:a0:ce:fa:fa:f6:2d:e0:c5:a3:5c:a1:9b:d3:3d:1a:06:
f8:fd:94:e0:31:9b:cd:22:41:a1:5a:a8:f4:b7:c2:b2:cf:5c:
22:bd:2a:6f:3f:90:94:e3:0c:91:07:80:d5:3c:d1:02:78:f5:
ef:52:4a:c1:3f:6f:fa:ce:be:03:39:a6:9f:35:8b:a2:53:b1:
4e:c6:0a:6a:c5:7d:7d:6b:3c:fe:50:37:14:e7:c6:bc:b0:2f:
93:2c:b0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:29 2026 by rpki-client