
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/5Hqy4lGIX_Sn9XOYC38RN1vqSu0.roa
File: 5Hqy4lGIX_Sn9XOYC38RN1vqSu0.roa (raw, json)
Hash identifier: gPR2kAWZS5VNPNwm/2RcVFKW5lzK6h8byZC+wjBpHzo=
Subject key identifier: E4:7A:B2:E2:51:88:5F:F4:A7:F5:73:98:0B:7F:11:37:5B:EA:4A:ED
Certificate issuer: /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial: 2C
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/5Hqy4lGIX_Sn9XOYC38RN1vqSu0.roa
Signing time: Sun 01 Mar 2026 01:35:41 +0000
ROA not before: Sun 01 Mar 2026 01:35:41 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 131943
IP address blocks: 202.223.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
Validity
Not Before: Mar 1 01:35:41 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=E47AB2E251885FF4A7F573980B7F11375BEA4AED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:48:13:20:74:33:0e:5d:c7:0f:45:52:6b:33:
5c:0b:d9:d0:fc:d7:b2:ea:98:1e:6b:d4:ba:1e:91:
68:3a:7e:2a:19:f3:08:7e:db:10:4e:c6:86:b3:52:
cb:85:a3:8f:e5:72:55:6a:18:a6:ac:22:ec:56:5a:
44:3d:f5:e0:a5:e0:29:52:bf:a1:e2:de:5e:7f:0b:
dd:95:63:c5:43:30:8e:8d:86:5c:05:66:88:ec:bd:
9b:ca:7f:57:5c:81:37:29:b6:03:59:04:75:e3:6f:
44:10:65:45:47:ba:8e:f9:a6:ef:b6:d5:fb:33:c5:
30:b7:07:73:76:0e:ca:57:6d:bd:46:2a:57:01:1b:
22:25:46:0f:63:75:f3:b0:9e:d2:eb:18:64:20:09:
04:76:83:50:9d:ad:02:0d:bd:24:13:50:85:ca:a3:
85:bc:ad:a2:9c:1d:0d:5d:c3:55:12:a7:97:87:67:
7d:a3:91:fb:dc:d1:e5:75:7e:e8:d0:26:a4:da:b2:
24:03:5d:f1:9e:a8:a4:9a:73:4d:7a:ca:a5:d6:b0:
9c:c4:21:90:0c:52:b1:b3:e2:55:cf:51:74:21:a4:
26:aa:d4:03:cb:36:a2:fd:07:15:d4:66:6a:3f:81:
16:c8:99:1f:8a:7c:6f:bc:4c:f3:89:8e:96:80:99:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7A:B2:E2:51:88:5F:F4:A7:F5:73:98:0B:7F:11:37:5B:EA:4A:ED
X509v3 Authority Key Identifier:
keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/5Hqy4lGIX_Sn9XOYC38RN1vqSu0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.223.20.0/22
Signature Algorithm: sha256WithRSAEncryption
84:bb:77:23:81:d0:4b:ff:18:da:ae:7f:4e:9e:74:dc:14:54:
d1:38:a5:b6:e2:d7:cb:db:d1:43:f6:e7:d3:22:c6:5d:d1:aa:
bf:2b:18:b7:75:8c:ec:12:d9:33:dd:c0:d5:cd:6c:69:e2:58:
dd:54:3d:a6:45:9e:f6:9a:5f:66:b8:81:b9:c8:71:ba:97:ac:
c8:ed:76:e1:48:01:8b:30:5e:f1:ec:5a:93:0d:33:b3:78:5f:
36:bf:a1:df:00:3c:c1:de:8a:04:b2:06:34:db:10:84:08:31:
5d:ba:42:a0:85:50:74:dd:b7:21:63:9e:4d:04:f9:72:88:33:
55:00:4a:d9:46:7a:78:24:01:3f:ea:58:9d:3b:49:e8:55:fb:
f0:52:68:dc:1d:4f:be:98:2a:f4:94:6c:f3:dc:d1:35:71:97:
40:d6:b2:cb:13:63:da:bf:5b:05:74:57:64:9b:16:71:3c:ee:
80:70:36:64:96:75:e9:be:ed:47:80:70:33:9e:6b:f2:f0:3c:
89:67:22:ac:d1:01:ce:de:0b:fd:da:13:99:aa:0f:6f:04:3b:
30:6b:03:fa:bc:f5:70:89:11:ca:01:b3:56:65:21:ed:46:fd:
a4:49:8c:99:ad:c1:f7:7c:25:c5:fe:9a:31:d8:0e:a8:6f:d7:
63:48:9f:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:44 2026 by rpki-client