
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/8WWfVwhCYs1pDVqqvJKtFCSvJbY.roa
File: 8WWfVwhCYs1pDVqqvJKtFCSvJbY.roa (raw, json)
Hash identifier: /T1n7iyW1AHcC0kb4kO4lWgNOebrGa6NAYZeIsDvH7I=
Subject key identifier: F1:65:9F:57:08:42:62:CD:69:0D:5A:AA:BC:92:AD:14:24:AF:25:B6
Certificate issuer: /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial: 5F
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/8WWfVwhCYs1pDVqqvJKtFCSvJbY.roa
Signing time: Tue 31 Mar 2026 07:51:48 +0000
ROA not before: Tue 31 Mar 2026 07:51:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 138384
IP address blocks: 211.133.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48CD162824C1F863871899267CC160280776531F
Validity
Not Before: Mar 31 07:51:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F1659F57084262CD690D5AAABC92AD1424AF25B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:56:cf:64:47:ae:68:b3:bc:d6:58:bf:f8:
14:7e:4a:b1:5d:61:03:9b:f4:e7:c8:28:54:a1:e2:
31:a1:f4:ab:0b:cd:a1:9d:fb:8a:ad:10:7e:a8:db:
fb:ef:ab:c9:68:77:35:fa:1d:42:d5:90:0b:c4:9e:
dd:fe:ec:06:54:6f:b1:65:6c:7c:d8:6b:19:db:ad:
69:d9:8b:83:9e:a5:a9:9a:0b:0a:28:05:92:37:a3:
96:88:d5:81:13:3d:ca:22:2b:a5:e7:a0:5d:3a:2d:
8d:f3:b2:57:6f:9c:4f:a6:78:50:7c:c9:1f:36:eb:
3a:72:1c:5f:99:f4:01:57:d9:1b:12:5a:8c:ec:e8:
c4:30:0f:8d:ec:cb:d1:25:84:c3:0f:22:83:75:34:
9d:85:5a:e4:9e:7f:90:dc:e1:44:dc:5d:cb:99:d0:
4d:61:cb:e7:6b:15:42:e0:e9:60:05:0c:a6:35:25:
0b:b7:52:5a:54:07:1e:f4:e7:21:2a:46:f1:de:36:
18:fb:15:a5:9c:1e:06:f9:11:74:cc:ee:fa:01:fb:
75:90:a3:b5:a6:0c:17:07:eb:d8:fe:27:2c:16:ec:
1c:50:30:b7:7f:cd:9a:2d:e8:69:01:fc:8a:0d:16:
19:aa:14:42:1d:58:3e:c5:28:0f:a1:29:e8:5c:a5:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:65:9F:57:08:42:62:CD:69:0D:5A:AA:BC:92:AD:14:24:AF:25:B6
X509v3 Authority Key Identifier:
keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/8WWfVwhCYs1pDVqqvJKtFCSvJbY.roa
sbgp-ipAddrBlock: critical
IPv4:
211.133.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:ad:de:ff:0b:c3:54:12:19:76:81:61:ec:c6:9f:6a:b2:f6:
3e:c3:e1:fb:19:ce:03:4a:20:a4:30:eb:c6:a6:fd:d1:81:bb:
f3:38:be:41:f8:0f:94:8e:47:d8:bf:d2:03:58:6a:7e:08:a7:
d5:30:94:a9:48:cb:24:38:41:ba:6b:dd:3b:b8:e3:5b:d9:b3:
9f:8e:50:a9:19:43:5e:09:49:9d:44:6f:69:ce:96:62:8c:3a:
72:8a:d1:19:a3:a9:9b:c7:75:5a:57:36:55:77:13:04:2f:22:
7e:c5:56:8c:7d:83:19:1e:f7:0f:65:e4:0b:06:3c:67:84:34:
b4:f0:4d:16:9b:3a:c1:5f:46:1d:2b:59:a2:5f:49:7e:eb:39:
e1:17:55:91:8e:ee:b3:a6:6d:24:fa:a6:f0:d4:b5:67:77:5d:
c5:14:24:ed:f0:e1:18:73:e2:89:78:8d:cb:1a:e5:6e:75:da:
0c:05:56:37:e7:90:ea:e7:c6:c1:4e:60:53:85:ee:44:87:d8:
56:90:ed:5f:e8:eb:fc:b7:08:39:8b:07:08:1f:82:ca:43:c3:
a1:b6:ab:c1:53:6a:c7:f1:a7:ef:28:a8:19:92:d8:63:a3:38:
e8:6e:e4:b5:78:5b:32:c0:76:40:69:a2:4e:cd:2c:ac:27:3e:
95:95:b7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:18:00 2026 by rpki-client