
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/2drO1Z2SrgoLMqnncCcYIuySgJc.roa
File: 2drO1Z2SrgoLMqnncCcYIuySgJc.roa (raw, json)
Hash identifier: wiZHUkoUQcHGufxCfVqmxOKcby3563m71geiIH6b9CE=
Subject key identifier: D9:DA:CE:D5:9D:92:AE:0A:0B:32:A9:E7:70:27:18:22:EC:92:80:97
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: FC
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/2drO1Z2SrgoLMqnncCcYIuySgJc.roa
Signing time: Tue 31 Mar 2026 07:31:15 +0000
ROA not before: Tue 31 Mar 2026 07:31:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18126
IP address blocks: 218.216.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Mar 31 07:31:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D9DACED59D92AE0A0B32A9E770271822EC928097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:2f:fd:ee:0d:5b:a4:78:51:b3:81:77:7d:
b6:68:05:97:9f:fe:15:68:f2:17:73:ea:82:2c:4b:
ff:b7:6e:52:e6:bd:43:05:34:50:92:fc:60:65:5c:
6c:0f:c1:6d:bf:03:a7:65:7d:91:13:f3:f5:d5:b9:
4f:02:60:a0:6c:05:e6:fe:1e:7c:1a:d7:3e:07:e5:
82:c1:ce:0b:1a:e1:60:f4:ff:e9:d4:a2:96:40:2f:
c3:f0:a0:04:68:7c:3b:70:a8:bb:25:b9:19:41:e3:
6e:11:0c:0b:fd:e5:da:49:0b:01:fd:3a:bb:15:64:
51:74:a6:06:cd:fe:b3:44:d4:05:a0:18:f1:18:71:
5f:f5:b2:b7:37:9a:d7:b3:e1:7d:d0:7c:cf:ab:05:
99:51:d3:41:a0:6f:97:53:de:08:7b:4d:2b:99:aa:
1e:bf:cc:ff:12:b4:6e:c1:e8:ba:e5:f9:7c:18:06:
f0:dd:03:a2:ed:e2:09:64:13:2f:ec:e1:ad:99:fb:
7c:6c:9f:9f:26:59:a9:7b:30:24:a1:64:db:23:03:
dd:b9:36:47:6f:25:38:17:7a:df:5a:fc:f8:0c:3d:
e6:1c:fa:11:d9:97:77:98:de:58:cd:2f:6d:01:d6:
9a:33:70:b6:7a:c8:3b:28:c0:c7:c8:9a:71:87:14:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DA:CE:D5:9D:92:AE:0A:0B:32:A9:E7:70:27:18:22:EC:92:80:97
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/2drO1Z2SrgoLMqnncCcYIuySgJc.roa
sbgp-ipAddrBlock: critical
IPv4:
218.216.176.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:0d:0e:3a:7a:86:03:8a:9f:a1:bb:de:d5:8e:e1:90:74:43:
57:89:0e:47:e5:2e:96:f8:2f:ee:65:ef:0c:28:1c:f0:72:7c:
9d:ac:bc:1d:ec:20:b1:21:dd:ab:fb:5a:53:d0:c1:cb:80:13:
a7:b8:dd:a1:a9:46:4e:2a:66:55:e1:80:f0:08:f4:9c:63:21:
ff:a6:e2:9e:3f:b4:65:56:ae:b6:99:f1:6a:59:20:90:1e:57:
fb:c0:1d:31:e9:b5:f0:d6:7e:37:dc:fc:48:bd:fa:c4:b8:ca:
6f:bd:fd:b0:62:dc:9e:4d:e4:bb:e2:ac:8d:f3:6b:ac:3a:a7:
1a:55:64:4c:bf:8d:83:a7:51:3d:49:7c:0d:ac:61:6b:0b:7a:
42:25:2f:9a:8c:c0:3f:7b:9e:c8:f2:e1:e0:b5:db:ed:9d:b9:
ec:38:34:12:48:50:3d:dc:f9:29:4f:32:2a:c9:40:59:5d:27:
1d:01:f7:9e:7a:9b:95:e8:49:b4:d6:69:42:77:df:1e:64:e6:
e4:1c:09:0d:03:e9:7b:f0:8e:bc:83:59:98:fc:90:da:35:c5:
f8:38:a9:82:00:a8:9f:63:18:ab:8a:84:a4:f1:80:12:6d:10:
9c:84:c4:d1:37:88:2a:9a:d4:da:b6:19:ef:fa:41:e3:92:9f:
bf:d3:ac:71
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz
MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yNjAzMzEw
NzMxMTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ5REFDRUQ1OUQ5MkFF
MEEwQjMyQTlFNzcwMjcxODIyRUM5MjgwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCVC/97g1bpHhRs4F3fbZoBZef/hVo8hdz6oIsS/+3blLmvUMF
NFCS/GBlXGwPwW2/A6dlfZET8/XVuU8CYKBsBeb+Hnwa1z4H5YLBzgsa4WD0/+nU
opZAL8PwoARofDtwqLsluRlB424RDAv95dpJCwH9OrsVZFF0pgbN/rNE1AWgGPEY
cV/1src3mtez4X3QfM+rBZlR00Ggb5dT3gh7TSuZqh6/zP8StG7B6Lrl+XwYBvDd
A6Lt4glkEy/s4a2Z+3xsn58mWal7MCShZNsjA925NkdvJTgXet9a/PgMPeYc+hHZ
l3eY3ljNL20B1pozcLZ6yDsowMfImnGHFHA7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU2drO1Z2SrgoLMqnncCcYIuySgJcwHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA
yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP
RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTczLzJkck8xWjJTcmdvTE1xbm5jQ2NZSXV5U2dKYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATa2LAwDQYJKoZIhvcNAQELBQADggEB
AHwNDjp6hgOKn6G73tWO4ZB0Q1eJDkflLpb4L+5l7wwoHPByfJ2svB3sILEh3av7
WlPQwcuAE6e43aGpRk4qZlXhgPAI9JxjIf+m4p4/tGVWrraZ8WpZIJAeV/vAHTHp
tfDWfjfc/Ei9+sS4ym+9/bBi3J5N5LvirI3za6w6pxpVZEy/jYOnUT1JfA2sYWsL
ekIlL5qMwD97nsjy4eC12+2duew4NBJIUD3c+SlPMirJQFldJx0B9556m5XoSbTW
aUJ33x5k5uQcCQ0D6XvwjryDWZj8kNo1xfg4qYIAqJ9jGKuKhKTxgBJtEJyExNE3
iCqa1Nq2Ge/6QeOSn7/TrHE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:56 2026 by rpki-client