
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0QWzHZ-7zkqYp02mZvRh9ejvzb0.roa
File: 0QWzHZ-7zkqYp02mZvRh9ejvzb0.roa (raw, json)
Hash identifier: mhu3Ms5BRlOzGgiqGfzjOezBtlFaeobI126YqmNuPjc=
Subject key identifier: D1:05:B3:1D:9F:BB:CE:4A:98:A7:4D:A6:66:F4:61:F5:E8:EF:CD:BD
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: AD
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0QWzHZ-7zkqYp02mZvRh9ejvzb0.roa
Signing time: Tue 31 Mar 2026 07:52:35 +0000
ROA not before: Tue 31 Mar 2026 07:52:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 15830
IP address blocks: 202.143.64.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Mar 31 07:52:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D105B31D9FBBCE4A98A74DA666F461F5E8EFCDBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:5a:dc:38:24:a9:9c:2d:0b:75:0f:e8:5a:
eb:ea:dc:6d:bc:fd:fd:31:35:77:93:71:e4:86:d5:
6c:4a:3e:ec:e8:c6:64:c5:db:0a:dc:85:85:a1:cc:
e3:e6:eb:9d:97:c1:bf:e1:12:bc:25:1b:3d:95:11:
6d:69:35:c4:a2:a0:bb:3f:f2:fa:a0:eb:d1:a5:65:
47:c4:7d:6c:65:72:86:fc:33:f5:d7:cf:92:b9:7f:
42:a9:a1:04:ff:16:ba:f4:91:ad:52:20:d4:07:05:
27:74:6c:21:2e:9c:9f:f1:b1:c9:b1:f4:0e:0d:40:
2d:0a:c1:db:33:d8:2c:4a:71:68:c4:e6:28:6b:44:
c3:3c:6d:4d:73:c8:8f:93:07:a0:78:a1:d9:53:f0:
1b:24:5b:2e:c0:88:41:63:04:ab:22:c5:d2:30:f6:
ec:3a:a3:0b:02:84:99:0d:78:b5:93:b5:7f:81:9b:
ff:92:0a:b4:6f:be:5a:c9:1e:93:13:d0:04:05:b7:
98:1b:e2:80:7e:d8:cd:f6:32:86:52:01:77:3c:10:
c1:fc:e8:d4:85:7d:1c:51:29:17:df:b5:fd:0c:9e:
81:c3:ce:4a:db:86:58:9c:4e:ab:56:46:10:12:aa:
ba:cf:d9:0c:ee:d2:40:a3:3d:77:6c:be:cd:67:a5:
fe:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:05:B3:1D:9F:BB:CE:4A:98:A7:4D:A6:66:F4:61:F5:E8:EF:CD:BD
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/0QWzHZ-7zkqYp02mZvRh9ejvzb0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.143.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:11:0d:64:56:c0:0f:38:a3:74:22:2b:75:c8:7c:f4:ff:e1:
e9:4e:95:b8:67:48:89:23:2a:23:29:2f:79:8b:01:7c:94:43:
f5:84:52:80:c9:8a:e0:d3:1b:cf:e4:7f:b9:34:a2:c3:8e:a8:
e5:ea:fb:45:be:b7:fa:7e:9d:b4:67:77:67:9a:06:0b:4a:22:
1c:65:f2:42:30:71:20:0c:96:be:ef:83:b0:9f:7b:73:e3:d0:
13:93:d9:58:59:b8:23:a0:51:f1:43:fd:ae:82:eb:00:a3:e0:
49:e9:b9:22:7e:c9:ec:06:62:89:dd:01:e6:ba:15:7e:c9:ea:
42:59:67:be:c2:c1:9d:3a:f6:72:39:62:ac:26:bd:af:22:85:
13:1c:77:8d:b3:29:b5:98:c2:f5:8d:17:42:c1:08:bb:d1:3a:
95:5c:77:2d:c6:80:5f:1e:f8:eb:02:68:23:d8:de:bc:27:2b:
f4:be:97:e8:24:9f:96:03:fc:a8:aa:7c:f1:52:44:2b:d7:3c:
93:a0:c1:04:6c:e0:20:6b:c9:7a:d1:32:62:6e:2f:31:f8:4c:
d8:81:a5:02:88:6e:78:85:10:f2:3a:1d:c2:f4:61:9b:1b:4b:
39:89:fa:7e:77:ac:6b:17:db:11:75:2c:4d:3f:ea:2c:30:8c:
69:e3:03:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:16 2026 by rpki-client