
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ww3JzxawZTF9bNdy1i8d4s8LPnI.roa
File: ww3JzxawZTF9bNdy1i8d4s8LPnI.roa (raw, json)
Hash identifier: AD1WqVw2wtoPkduvtWkRzxAzFHVy+V+6VMTjTC452Lo=
Subject key identifier: C3:0D:C9:CF:16:B0:65:31:7D:6C:D7:72:D6:2F:1D:E2:CF:0B:3E:72
Certificate issuer: /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial: 9F
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ww3JzxawZTF9bNdy1i8d4s8LPnI.roa
Signing time: Tue 31 Mar 2026 07:52:29 +0000
ROA not before: Tue 31 Mar 2026 07:52:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 15830
IP address blocks: 101.97.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Validity
Not Before: Mar 31 07:52:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C30DC9CF16B065317D6CD772D62F1DE2CF0B3E72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:04:28:6d:56:eb:c8:fd:2e:1f:9c:e9:92:
44:25:89:ec:7d:b2:ca:6d:22:bc:68:60:53:e4:f1:
ac:e4:0e:06:ef:de:a8:40:0e:82:e1:67:89:05:3a:
92:ab:f1:05:59:43:d8:50:3a:89:62:14:1f:79:36:
61:9d:51:72:ae:d0:63:d7:db:9b:e1:f9:45:57:b0:
89:56:cb:5b:2e:2c:7a:fa:14:2c:1a:32:e8:11:bc:
4b:1c:75:77:05:d1:da:b8:d5:67:53:43:6a:45:cc:
71:b6:c5:c6:d1:64:9f:a7:f5:08:33:17:c7:90:32:
b8:47:77:37:76:ed:76:93:69:2f:fc:6f:9e:43:5b:
f1:9d:6d:bf:ad:b7:96:e3:4f:af:e4:87:62:be:28:
51:0f:d0:fc:bf:3c:77:ee:61:fb:f0:b3:f5:e8:b2:
64:5f:3b:1f:56:7a:3a:62:83:e1:3b:07:2b:64:34:
2b:86:48:f9:ed:22:b8:84:66:3c:f8:1e:e9:8c:48:
84:07:23:66:0e:ab:ab:6f:0c:75:d2:60:a4:8f:ca:
71:a5:1f:f6:c1:5c:9a:0e:82:8c:8e:cc:59:6d:d7:
00:cc:2e:98:f0:45:12:f4:35:62:4d:c4:05:34:80:
63:9c:0e:e9:ae:f6:2a:0a:95:b3:6a:2c:8b:c0:09:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:C9:CF:16:B0:65:31:7D:6C:D7:72:D6:2F:1D:E2:CF:0B:3E:72
X509v3 Authority Key Identifier:
keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ww3JzxawZTF9bNdy1i8d4s8LPnI.roa
sbgp-ipAddrBlock: critical
IPv4:
101.97.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:69:f9:95:55:89:62:fc:a2:0a:64:2c:42:80:03:7b:d1:a7:
c7:a2:e7:78:9e:cf:58:4b:f2:a1:db:26:64:2f:ce:da:a9:32:
49:a3:d3:b3:26:74:5a:73:59:a3:0c:97:ad:12:6f:f7:a9:9a:
07:75:e6:c8:43:85:75:c6:50:68:e3:0f:f8:fd:20:67:82:b0:
1d:f8:30:e4:32:ad:03:61:0b:2d:78:04:76:61:a3:86:f3:19:
a8:26:eb:23:3d:d4:bb:b0:e4:c4:12:aa:4d:a1:3d:7a:9c:8e:
81:64:4e:2c:b2:6e:b6:6e:18:45:a1:d1:7b:cd:fa:fd:1a:41:
a0:ab:f5:dc:b3:a4:6e:7b:97:89:a9:74:f3:cf:73:26:68:73:
32:a9:5a:47:af:42:de:aa:48:af:2e:5b:ba:4c:c1:88:87:40:
2e:b1:ee:2d:11:30:8b:8d:32:ae:66:bb:b8:87:2b:49:ee:fc:
d7:b1:3a:3e:a7:1e:c4:da:50:f3:e9:00:0d:22:3a:46:1e:c3:
96:37:68:6c:01:32:88:92:ac:24:03:69:72:d9:96:11:a6:d0:
79:62:8c:21:e3:70:67:8e:ad:b9:a2:eb:7b:db:d7:c7:72:b1:
8f:25:e7:c2:fb:42:f1:ce:fa:f4:dc:f1:96:fd:4f:9d:78:0b:
f9:dc:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:51 2026 by rpki-client