
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/brNDkBgfTGfEIO8yVB28hZNtAw8.roa
File: brNDkBgfTGfEIO8yVB28hZNtAw8.roa (raw, json)
Hash identifier: 6CU7IUxHWE03DMOf73vXyZg/RlYs3adLSj2Vo/V3GWo=
Subject key identifier: 6E:B3:43:90:18:1F:4C:67:C4:20:EF:32:54:1D:BC:85:93:6D:03:0F
Certificate issuer: /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial: 5E
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/brNDkBgfTGfEIO8yVB28hZNtAw8.roa
Signing time: Tue 31 Mar 2026 07:51:47 +0000
ROA not before: Tue 31 Mar 2026 07:51:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 138384
IP address blocks: 211.7.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48CD162824C1F863871899267CC160280776531F
Validity
Not Before: Mar 31 07:51:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6EB34390181F4C67C420EF32541DBC85936D030F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:5c:32:b0:1a:f7:3a:27:d1:73:b4:19:99:
6d:69:84:b2:77:03:5f:75:5f:97:67:59:ad:a8:53:
69:72:4b:14:9e:32:02:25:75:40:f2:bd:49:ba:7d:
10:a9:e5:fc:f3:21:5e:fb:06:6d:3c:b6:79:f1:50:
15:1c:06:f9:c4:aa:2a:64:ce:5a:c8:5c:1b:9b:e4:
22:f3:44:c2:a9:ff:9f:19:8b:3c:4a:6a:ff:20:76:
ff:05:ab:f4:c7:c2:54:cc:0e:f8:05:05:ab:0c:08:
be:83:5c:67:13:f6:55:76:34:04:83:c9:6e:00:09:
d3:e2:3b:1f:aa:ec:1b:ce:49:11:cf:34:76:78:80:
d0:6f:5b:9c:cd:92:28:4d:25:af:36:6a:71:9c:e1:
96:42:a4:69:44:f5:69:22:c7:2c:8b:2b:49:c0:da:
ef:e6:dc:df:58:5f:3e:10:9a:d8:45:a0:e0:9a:b7:
2f:cc:0e:1b:11:39:5a:08:4e:fc:62:2a:a2:9b:87:
df:e9:09:05:59:f9:68:fa:e5:19:aa:68:4e:54:12:
db:9c:8a:c1:e1:67:f4:8a:62:d1:93:c4:0a:70:e3:
b6:f3:9d:20:e1:d7:98:fa:a8:9e:c7:19:04:2d:0f:
d2:9b:49:a8:02:aa:f2:35:74:75:94:85:ff:3f:52:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:43:90:18:1F:4C:67:C4:20:EF:32:54:1D:BC:85:93:6D:03:0F
X509v3 Authority Key Identifier:
keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/brNDkBgfTGfEIO8yVB28hZNtAw8.roa
sbgp-ipAddrBlock: critical
IPv4:
211.7.96.0/19
Signature Algorithm: sha256WithRSAEncryption
42:2e:ca:00:98:0e:c3:2b:29:7e:ff:51:95:f7:4f:b4:cb:a4:
f3:84:66:6e:7b:5b:08:9d:b9:07:a4:b1:15:26:c3:06:51:be:
9a:a1:98:22:be:b4:b4:ca:3b:c6:0b:cc:4f:dd:35:57:4f:39:
89:81:bc:86:d7:ee:25:12:96:95:17:be:f1:d5:c6:f8:ed:0d:
8d:52:62:62:24:02:5c:32:9b:9c:11:5e:f7:2c:2a:59:b8:11:
5b:6f:dc:14:16:6e:e7:bd:5c:40:16:75:49:f4:ca:88:65:f6:
a2:ea:c1:67:33:01:0c:9a:00:0f:87:6b:6f:0c:01:26:07:3c:
3c:f3:a1:fb:b9:36:29:9c:29:f9:da:bd:d8:c6:8b:1b:b2:e2:
47:e5:6e:15:76:19:ff:c9:fc:8c:ae:0f:ee:9c:65:4d:95:17:
ed:f0:9c:9d:26:ee:1c:31:e5:cc:f7:72:9d:e1:80:24:21:6a:
4e:f0:0b:09:59:c6:f9:20:a7:8d:00:c5:32:db:0f:10:a5:28:
4c:a0:b6:01:1b:3c:bd:1a:2f:71:ac:69:03:d3:17:55:f6:cc:
7a:04:dd:83:ac:1c:4e:51:53:a4:4f:9b:e0:17:7d:b2:ca:f4:
38:0c:7c:7b:14:da:05:2c:18:ec:a6:cf:8d:b4:9b:1d:da:76:
66:85:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:14:43 2026 by rpki-client