
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/8Qn6EW8rSVbwI9YL5DrtSomP0d8.roa
File: 8Qn6EW8rSVbwI9YL5DrtSomP0d8.roa (raw, json)
Hash identifier: SuI3hm0FzNBQVsyQ0UqFLwVGPF/ofUBNvhtpGj2G21k=
Subject key identifier: F1:09:FA:11:6F:2B:49:56:F0:23:D6:0B:E4:3A:ED:4A:89:8F:D1:DF
Certificate issuer: /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial: 2B
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/8Qn6EW8rSVbwI9YL5DrtSomP0d8.roa
Signing time: Sun 01 Mar 2026 01:35:40 +0000
ROA not before: Sun 01 Mar 2026 01:35:40 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 131943
IP address blocks: 133.226.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
Validity
Not Before: Mar 1 01:35:40 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=F109FA116F2B4956F023D60BE43AED4A898FD1DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:23:19:de:2d:48:43:86:1d:55:d7:26:39:
89:50:c2:f2:a6:f0:a1:5f:0a:07:11:b5:59:aa:1f:
20:d6:c1:38:a0:cd:27:2f:a5:b9:fe:e9:9b:82:8b:
36:04:d6:00:c7:30:62:a6:b1:ea:ce:83:93:61:30:
dc:4e:e1:78:96:5a:91:76:04:5e:dc:be:89:3b:bb:
d3:00:99:2f:91:36:6d:0c:54:73:f1:6d:e2:2f:62:
a4:f3:a1:c2:b8:de:47:05:c0:bb:4d:d7:3a:c0:4a:
51:98:38:e0:ae:c4:c3:78:c6:81:b7:96:7d:0f:c7:
e4:3d:6c:b3:08:4c:37:22:dc:1b:15:e3:3b:28:45:
b6:32:14:bc:38:fe:3a:44:d0:37:68:28:34:85:fc:
92:c3:96:14:23:26:b8:4a:c0:39:49:7a:d8:87:e2:
4c:2a:4f:f4:42:87:6a:e4:00:8c:91:5c:22:7c:af:
0f:97:ce:7b:ba:6e:67:85:08:99:e1:52:40:2e:e8:
0d:5c:81:27:59:f3:40:2d:82:c7:b6:40:0d:a7:c0:
a8:c4:82:b6:24:8a:41:70:16:04:0a:33:8b:63:b9:
a8:68:bc:01:aa:9b:18:0d:c5:87:94:fd:73:02:ab:
29:f8:40:d7:b9:ef:31:97:7c:e3:08:07:19:56:52:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:09:FA:11:6F:2B:49:56:F0:23:D6:0B:E4:3A:ED:4A:89:8F:D1:DF
X509v3 Authority Key Identifier:
keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/8Qn6EW8rSVbwI9YL5DrtSomP0d8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.226.132.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:dd:7c:ce:ee:f4:3f:f7:b2:b8:20:83:b3:c5:e3:e9:af:10:
16:eb:29:5c:79:4e:aa:40:f9:79:cc:2f:a2:27:cb:8d:68:e8:
42:d5:f9:93:69:09:06:c1:d6:91:d0:69:e8:c0:19:8f:da:31:
85:3a:f5:96:72:70:8c:83:ce:c5:19:73:75:18:f9:e1:5f:cb:
91:32:be:07:ac:b1:ff:e7:be:dd:e6:40:93:c8:73:e3:fb:17:
6f:0c:9c:1a:62:fb:4d:aa:5f:3e:0a:d0:0b:e7:8b:88:38:67:
e8:1c:55:da:cf:b7:4c:10:27:fc:4d:0a:a6:ef:7b:44:3a:52:
25:dd:33:b5:16:79:2a:d3:56:b2:e1:f1:b4:f1:a0:e0:52:96:
e5:84:9d:a3:90:12:ec:d6:bd:aa:e9:bd:ca:ea:c5:d6:0c:52:
d2:c1:59:97:e5:a5:95:41:d2:ef:e0:dc:00:32:42:07:10:ee:
19:45:c4:54:8e:fe:86:c1:03:54:e2:2a:3e:6e:b8:bf:af:ea:
23:24:06:82:42:01:d3:7a:d5:0b:8c:0a:df:22:b2:19:ca:ef:
c5:e7:4b:e4:e0:b8:84:ed:8d:4c:4a:92:63:89:c5:ca:33:8a:
77:24:44:f0:56:0c:87:24:d6:46:5f:3f:22:ea:84:0f:97:e5:
78:0d:62:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:40 2026 by rpki-client