
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/QnBG8lpCkw8iPSaxELDdFMvQF84.roa
File: QnBG8lpCkw8iPSaxELDdFMvQF84.roa (raw, json)
Hash identifier: GjDvC/0FzSePv1Ne1AXaYqtjGzB3tMLPKDlJ3LLALyA=
Subject key identifier: 42:70:46:F2:5A:42:93:0F:22:3D:26:B1:10:B0:DD:14:CB:D0:17:CE
Certificate issuer: /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial: 36
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/QnBG8lpCkw8iPSaxELDdFMvQF84.roa
Signing time: Tue 31 Mar 2026 08:42:32 +0000
ROA not before: Tue 31 Mar 2026 08:42:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17529
IP address blocks: 120.138.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Validity
Not Before: Mar 31 08:42:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=427046F25A42930F223D26B110B0DD14CBD017CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:df:e0:04:c4:93:fb:63:31:2d:4e:1a:a4:
a5:05:84:0f:bc:e5:f2:82:b1:f3:0b:13:36:cb:b1:
9f:c5:b8:2a:71:db:47:c9:5d:b2:d3:34:55:f1:e7:
99:bf:aa:b7:46:4b:f7:60:17:71:cd:fe:47:e2:bc:
f8:e1:c3:a7:b7:ef:c0:f8:eb:f2:af:17:de:5c:9d:
d3:f9:bd:e9:f4:c0:dc:24:7d:fa:17:5c:16:2a:26:
ed:66:24:98:0e:39:41:a5:30:36:61:e2:d7:7f:1a:
88:ef:64:52:02:d1:81:e2:2b:92:6b:6f:dd:04:9b:
5e:91:5f:85:bd:4b:43:91:fb:ef:cd:d7:c3:06:51:
32:06:ac:97:d0:0c:6f:72:75:e2:a7:42:c9:81:37:
a0:db:52:c6:c4:8a:d0:3b:12:e7:ab:7e:5b:c3:67:
2c:1d:a7:e9:16:fa:18:1d:00:bd:32:85:45:b5:8b:
ab:67:26:9b:14:b9:af:11:f9:de:a2:8e:e2:9b:f1:
9f:f1:f6:8b:b9:b9:7a:0e:3d:06:c5:a8:6d:81:bb:
89:88:17:3e:de:0c:f5:ef:94:79:13:0b:b2:48:15:
da:ca:19:eb:d7:45:42:0b:d3:d8:bf:51:04:d9:cd:
9d:40:16:f1:ba:e8:89:ee:a8:d9:27:cc:af:1e:31:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:46:F2:5A:42:93:0F:22:3D:26:B1:10:B0:DD:14:CB:D0:17:CE
X509v3 Authority Key Identifier:
keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/QnBG8lpCkw8iPSaxELDdFMvQF84.roa
sbgp-ipAddrBlock: critical
IPv4:
120.138.128.0/18
Signature Algorithm: sha256WithRSAEncryption
b8:0a:93:75:3f:06:62:e4:c9:ff:a1:7c:d5:d1:ba:75:28:e1:
ee:a0:2b:9d:71:9b:d7:97:dd:d5:58:64:fc:24:f8:cf:54:78:
48:7b:05:da:4b:44:56:57:ce:bb:a2:dd:ba:64:64:b3:41:7b:
ce:a2:aa:3e:68:f1:ee:c4:4d:7d:19:ef:1e:2b:3f:e7:6a:aa:
99:39:eb:34:ab:21:e3:65:70:a0:2f:21:cf:c8:c5:fe:5f:83:
10:27:96:f0:a8:d4:43:33:a2:60:6a:9a:51:64:2a:f3:b2:8f:
66:c5:4b:08:f4:db:93:63:60:78:d5:c5:32:29:45:ee:98:32:
b3:e3:52:4c:ee:fe:06:90:c8:56:d0:60:ec:32:5a:3f:2d:da:
4c:d9:b4:6d:ae:52:72:85:c6:03:c0:bb:c2:3e:f1:47:e3:2c:
f0:a4:7f:2e:53:b0:10:11:d2:2f:87:c1:0a:9c:15:8a:af:79:
b8:a1:ec:d4:1e:a0:8b:e0:55:92:bf:b6:17:3e:68:0d:72:2b:
d7:f0:87:23:8d:73:3d:e4:94:ed:9e:54:06:55:3d:eb:7a:7b:
af:2c:bd:6c:f1:74:2f:2c:df:bd:08:7d:c3:56:7a:9d:b9:bb:
eb:cd:f3:94:4f:ed:c6:72:c4:92:cf:65:5a:a3:99:fe:03:01:
d8:e9:98:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:20 2026 by rpki-client