
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/VGkXy7nAGxKb6y7UTxWvoySRYbo.roa
File: VGkXy7nAGxKb6y7UTxWvoySRYbo.roa (raw, json)
Hash identifier: 5Pcsbls3aOjIGY1nXSg+lThRMJuAUCiH5OeemOLUiqs=
Subject key identifier: 54:69:17:CB:B9:C0:1B:12:9B:EB:2E:D4:4F:15:AF:A3:24:91:61:BA
Certificate issuer: /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial: 60
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/VGkXy7nAGxKb6y7UTxWvoySRYbo.roa
Signing time: Tue 31 Mar 2026 07:51:48 +0000
ROA not before: Tue 31 Mar 2026 07:51:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 138384
IP address blocks: 101.102.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48CD162824C1F863871899267CC160280776531F
Validity
Not Before: Mar 31 07:51:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=546917CBB9C01B129BEB2ED44F15AFA3249161BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:c3:b4:b8:0f:8a:0d:4e:91:69:2f:04:51:
d0:36:ac:2e:a0:82:3d:aa:d5:f9:be:5e:af:4f:a6:
a3:89:55:b8:a9:5d:25:ba:40:35:d1:42:0a:f0:78:
8f:67:59:1e:5b:c7:7d:99:3c:a9:dc:14:04:ba:1d:
39:07:6e:3f:f1:f0:e3:42:72:65:e2:7e:74:28:4c:
b5:5a:d3:b0:0d:88:00:31:e9:3a:e6:f8:c4:54:85:
a3:47:f6:fe:a5:6c:c0:85:f5:69:3c:69:94:73:52:
20:75:65:c7:09:d6:4b:d8:f4:b2:c0:f7:82:d5:1b:
87:97:25:96:94:bf:c6:e4:af:23:cf:73:16:89:42:
88:d1:74:2f:d9:64:1e:0d:29:4d:f1:b2:6f:6b:90:
96:7d:50:e1:bc:4a:0f:d6:34:84:65:a1:98:7e:c5:
a1:f1:0f:d0:f6:31:78:44:62:e6:7d:ab:6e:4b:60:
60:89:26:3b:9b:75:e7:f2:cb:be:9d:d3:dc:1e:fe:
53:43:fe:58:74:90:13:e4:d3:15:ff:65:25:13:40:
05:ad:1a:00:ac:46:40:5e:bf:3e:12:11:11:17:af:
4e:75:1b:0f:9d:d7:18:9a:c9:96:da:67:c8:0b:1d:
9c:a7:dd:18:72:cf:61:d9:d5:4a:07:7e:bd:2a:28:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:17:CB:B9:C0:1B:12:9B:EB:2E:D4:4F:15:AF:A3:24:91:61:BA
X509v3 Authority Key Identifier:
keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/VGkXy7nAGxKb6y7UTxWvoySRYbo.roa
sbgp-ipAddrBlock: critical
IPv4:
101.102.0.0/18
Signature Algorithm: sha256WithRSAEncryption
91:3d:d2:fd:10:00:76:87:66:f6:88:9b:3f:17:45:49:04:c8:
1f:4d:31:0b:b6:36:db:cc:1b:4a:fb:5e:d6:96:d5:ec:27:00:
27:10:51:bf:51:b4:b2:d1:08:55:21:7f:c4:70:ee:b0:8c:aa:
f4:9d:fb:6b:75:b9:47:f8:be:0e:6b:85:ea:40:29:50:dd:cf:
71:1f:49:ba:06:9d:76:10:82:15:77:66:9f:b6:3e:ee:5f:af:
3f:5a:e9:fd:c6:dc:2f:a1:63:1f:ea:01:bc:d0:b9:6d:fb:62:
3c:66:30:0e:d0:ce:6d:78:e4:22:69:28:69:63:15:7a:96:d7:
1f:be:c1:09:e7:b3:76:7c:62:5d:4b:93:73:f6:ba:bc:c5:a6:
be:9b:71:2a:40:c5:f6:fc:0a:d1:e8:7f:9a:af:c9:61:a1:d3:
0a:fc:47:b3:3d:81:fa:71:55:95:67:65:a0:38:47:14:56:f4:
f9:b4:d9:3a:a7:d1:68:a1:43:7c:95:6b:f5:91:53:c4:70:63:
b7:0d:e0:91:25:82:41:b3:b5:b9:e8:3c:31:c4:db:b6:f9:38:
5c:88:1d:09:71:9c:73:40:3a:ab:ab:a0:19:1b:7f:84:d5:be:
32:fe:08:0b:a0:99:1e:53:ca:af:e3:86:52:cb:25:0e:a0:66:
7e:e2:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:33 2026 by rpki-client