
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/PhmfQevVT8fJOneBUPbPW2RhrVc.roa
File: PhmfQevVT8fJOneBUPbPW2RhrVc.roa (raw, json)
Hash identifier: XPIio0c1h9ossQ5YEOT4vjq0lRi8/O0DPW1ysk91Y6c=
Subject key identifier: 3E:19:9F:41:EB:D5:4F:C7:C9:3A:77:81:50:F6:CF:5B:64:61:AD:57
Certificate issuer: /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial: F5
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/PhmfQevVT8fJOneBUPbPW2RhrVc.roa
Signing time: Tue 31 Mar 2026 07:31:11 +0000
ROA not before: Tue 31 Mar 2026 07:31:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18126
IP address blocks: 203.129.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Validity
Not Before: Mar 31 07:31:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3E199F41EBD54FC7C93A778150F6CF5B6461AD57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:b2:50:e5:fe:7c:da:bd:54:4a:8c:32:d3:
f8:0c:74:b7:00:de:86:93:7c:cb:43:c1:12:6b:80:
98:df:f7:dc:f0:95:ba:01:15:14:2f:3b:d8:30:03:
ca:ac:4f:ac:5e:97:dc:62:5a:55:c8:15:4e:f7:66:
8e:67:79:2f:73:04:33:d0:da:f0:f0:7c:15:f3:c3:
18:0e:89:a4:07:94:30:47:3b:b1:cd:b2:10:86:b2:
c2:c3:cf:34:6c:79:eb:a0:3e:bb:60:42:34:3c:70:
cc:8b:11:69:c6:ef:23:e6:78:90:05:0a:3f:12:ac:
02:fa:d7:83:77:c7:d6:f8:b7:3a:dc:86:fe:9f:b0:
dd:17:08:bd:86:79:a8:89:23:94:77:16:99:e0:97:
ba:33:f4:61:c8:9d:a7:58:73:ea:3d:95:26:ce:95:
73:a2:c6:dc:81:f2:67:ff:c2:1b:0d:58:b6:34:f1:
e5:2d:67:f2:e8:9d:df:f7:2f:96:be:6d:6d:ff:0f:
e4:a6:cc:87:e9:22:f1:9a:01:2c:75:39:00:e1:ae:
d6:8d:2c:d0:a8:5f:b8:4b:6d:7b:03:9c:ab:39:80:
63:f8:5e:80:ca:1d:3f:be:cf:77:fe:31:9f:5a:90:
b7:10:5d:93:77:18:80:16:14:0a:16:75:46:9e:b4:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:9F:41:EB:D5:4F:C7:C9:3A:77:81:50:F6:CF:5B:64:61:AD:57
X509v3 Authority Key Identifier:
keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/PhmfQevVT8fJOneBUPbPW2RhrVc.roa
sbgp-ipAddrBlock: critical
IPv4:
203.129.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:ba:2f:3b:fa:8e:8f:dc:85:ec:57:2e:93:2e:9f:dd:49:e1:
d9:9a:e7:c8:f5:65:1a:23:8b:be:56:a0:56:d9:ef:bb:69:42:
91:ff:86:38:00:38:11:b0:cc:11:b5:e0:a9:ed:70:e7:cc:e7:
05:34:b6:f3:f1:f0:67:0a:9b:f8:3b:20:56:f1:35:2a:c8:3b:
72:83:74:ad:f9:7d:52:2d:b1:fc:14:45:71:50:5a:09:51:b2:
0e:df:f7:9a:2a:8b:9b:47:6d:02:e0:8d:fe:38:fb:52:68:f4:
23:aa:fa:10:a5:a9:ca:04:65:d1:b1:f5:05:56:d1:dd:9d:a0:
9c:e1:ed:10:15:d5:69:20:02:a1:54:0c:b1:05:c9:67:54:f8:
a9:db:53:e0:e3:23:5d:75:44:4d:ad:8c:20:4b:ed:07:bc:85:
eb:ed:f2:00:74:2b:b8:e4:c4:42:e9:02:10:7d:51:51:eb:06:
e6:5a:ff:20:f2:9d:60:28:67:1c:4c:22:d5:d9:22:0e:07:cc:
9c:93:25:c5:0f:5d:b2:24:ea:bb:c8:52:d0:c5:31:92:05:41:
3f:0b:97:a6:7c:34:a6:c1:ee:5d:30:00:7f:86:bb:80:46:cc:
a8:06:aa:8f:6d:3e:1f:69:a6:09:96:01:e0:a0:ec:91:48:30:
57:48:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:22:23 2026 by rpki-client