
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/oTEvhEV3gTWYOsqFCH1Ml8QmgIQ.roa
File: oTEvhEV3gTWYOsqFCH1Ml8QmgIQ.roa (raw, json)
Hash identifier: RJvIbVytFmP4eOg+QJ1BxNaL2mtm0DKF3KLjlhwdBrY=
Subject key identifier: A1:31:2F:84:45:77:81:35:98:3A:CA:85:08:7D:4C:97:C4:26:80:84
Certificate issuer: /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial: 2A
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/oTEvhEV3gTWYOsqFCH1Ml8QmgIQ.roa
Signing time: Sun 01 Mar 2026 01:35:39 +0000
ROA not before: Sun 01 Mar 2026 01:35:39 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 131943
IP address blocks: 103.126.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
Validity
Not Before: Mar 1 01:35:39 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=A1312F8445778135983ACA85087D4C97C4268084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:aa:fd:43:0f:ab:90:50:8c:78:26:ff:c8:09:
99:10:38:97:bb:e4:07:58:cf:52:d4:c6:f4:2c:bf:
91:18:8b:d0:16:2e:bd:97:ef:34:86:fc:db:12:50:
a6:bf:29:48:fa:24:d9:04:9e:62:69:55:2d:ce:cb:
18:0e:05:a4:37:0c:8f:50:16:02:92:d4:b1:27:69:
59:29:b5:71:90:6d:03:ff:46:5c:2d:f7:e2:7d:6a:
8e:ef:15:fd:26:d5:07:68:18:59:0a:a4:a6:96:c6:
3b:ca:c1:5a:3d:31:7a:30:74:18:c2:f2:cc:c6:2d:
f0:4c:02:09:a9:8e:6a:2b:eb:73:a5:3a:94:fd:a7:
ea:be:04:ab:87:31:70:1b:36:f7:22:86:07:0d:53:
68:79:ee:d5:57:3f:cf:c5:59:c4:cd:0d:77:c8:74:
f3:c0:6a:00:d1:ba:fe:f3:bf:84:70:46:6d:e6:5e:
34:cc:7a:9c:ac:37:fe:fb:9e:80:b8:69:7f:5f:d0:
7c:70:23:63:cf:75:d5:c3:db:5a:2e:96:46:ee:32:
5f:c8:b6:74:47:00:24:04:0d:11:aa:68:0c:2d:44:
95:3f:e6:2d:13:31:ba:25:d1:44:e7:a9:a2:1f:55:
ff:cc:8c:99:98:38:2a:32:00:7d:33:fa:c1:b1:5a:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:31:2F:84:45:77:81:35:98:3A:CA:85:08:7D:4C:97:C4:26:80:84
X509v3 Authority Key Identifier:
keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/oTEvhEV3gTWYOsqFCH1Ml8QmgIQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:08:04:29:b4:22:de:4e:0b:98:51:19:83:e8:78:ab:9d:b2:
44:81:2a:27:d1:5e:67:54:95:67:ed:41:6b:df:12:14:5a:24:
57:20:03:20:f7:ed:82:c4:21:3e:d6:d3:4b:63:b4:2f:09:9b:
88:6d:93:0a:e5:57:ac:17:21:89:b3:5b:cd:5f:64:8f:74:6e:
29:ab:37:fa:2d:b4:d3:0a:cc:88:b2:16:67:82:3c:8a:5f:f1:
c3:7c:91:0f:17:69:48:4b:07:e4:59:de:18:bd:d8:a9:b4:19:
89:04:7f:02:ba:b3:95:f0:c3:4a:53:31:3a:b4:a0:71:6b:f2:
73:84:4d:a2:fd:1e:30:1b:2f:6b:48:97:94:72:83:98:01:d7:
b9:d3:aa:58:ac:58:69:a2:b1:49:82:a8:ab:15:78:9e:ab:36:
9f:2e:1c:45:15:e2:17:f4:a2:ad:30:1f:fc:56:c1:10:e1:8e:
03:a9:64:17:63:f2:98:76:25:a1:67:db:99:c6:70:f0:6d:ef:
42:ba:f6:5e:5d:28:2c:11:62:1e:6e:47:d9:f6:07:b4:a2:3b:
1f:84:06:65:3c:e7:ea:02:16:61:58:2f:7d:76:88:04:be:d2:
32:39:64:1a:7f:b3:7b:7c:f4:a7:98:be:12:b9:89:8f:f6:2c:
89:71:bf:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:01:44 2026 by rpki-client