
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20099/RsPHseJNyHazUfvmr4GcGruIsMc.roa
File: RsPHseJNyHazUfvmr4GcGruIsMc.roa (raw, json)
Hash identifier: XLzwgP800Jm0fGFthFaXZ+sPecsYJohlXoEqss+hw7o=
Subject key identifier: 46:C3:C7:B1:E2:4D:C8:76:B3:51:FB:E6:AF:81:9C:1A:BB:88:B0:C7
Certificate issuer: /CN=2327CD1B4F1F8B8956861597E494314A68561591
Certificate serial: 46
Authority key identifier: 23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/RsPHseJNyHazUfvmr4GcGruIsMc.roa
Signing time: Sun 01 Feb 2026 01:32:59 +0000
ROA not before: Sun 01 Feb 2026 01:32:59 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 131966
IP address blocks: 202.226.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2327CD1B4F1F8B8956861597E494314A68561591
Validity
Not Before: Feb 1 01:32:59 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=46C3C7B1E24DC876B351FBE6AF819C1ABB88B0C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:0f:ec:45:e4:f1:65:36:70:ad:53:b7:4e:
fb:ed:7f:47:e6:cb:0e:75:b4:be:84:43:c7:e5:07:
3a:6a:64:5c:1f:ac:52:08:43:ca:a0:40:8c:86:47:
c9:95:79:76:60:f2:f5:75:b1:6f:44:af:7f:53:4f:
8a:fc:66:90:5b:86:90:c1:22:d8:e0:d5:88:8e:f3:
34:de:1c:2e:28:af:f6:80:e9:1e:02:7d:d3:be:ce:
d8:20:94:f7:57:18:88:3e:cb:13:db:9b:a2:18:2b:
26:29:67:86:cb:f7:80:49:21:c7:c9:b2:93:48:bf:
99:8e:93:c1:b2:db:fc:1a:43:6c:50:3f:e4:3d:f8:
b1:da:15:ed:bd:5c:38:1a:ba:c0:b0:5c:3c:5f:6c:
ef:ad:49:92:26:81:0f:6e:39:fa:3c:1c:c3:cb:a8:
d6:76:af:95:97:7d:ce:22:f4:76:45:c9:e7:85:d1:
46:1a:62:aa:13:f1:d5:8b:f1:09:f2:53:1a:0c:f8:
8b:40:91:b9:cd:1e:38:91:94:d6:e8:21:cd:f6:7d:
d2:32:8a:83:99:d9:ad:0d:9a:3c:ba:25:1c:1d:2d:
aa:4c:17:2c:fb:d8:8b:d8:1f:77:2b:b8:3f:53:16:
6f:e0:60:c5:45:34:a9:d2:78:11:ef:88:a6:18:bb:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C3:C7:B1:E2:4D:C8:76:B3:51:FB:E6:AF:81:9C:1A:BB:88:B0:C7
X509v3 Authority Key Identifier:
keyid:23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/RsPHseJNyHazUfvmr4GcGruIsMc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.226.60.0/22
Signature Algorithm: sha256WithRSAEncryption
84:6a:c7:41:24:b4:a6:b1:a9:e7:ee:a0:21:1b:1f:6f:73:c1:
04:a6:15:c9:3e:63:fd:f2:ad:45:fc:27:ac:d6:e2:4a:23:95:
42:42:6a:55:41:7e:70:f2:c0:56:5f:0a:9b:58:88:48:bb:2b:
1e:86:a2:b1:65:9c:cb:53:43:b4:54:2e:01:9e:86:43:0e:a7:
e4:06:6b:b8:41:e1:07:da:7c:0e:67:4e:d6:8a:bc:ab:bc:81:
ce:14:c4:a2:e6:a3:eb:c6:58:a1:13:33:f4:c5:d1:38:2b:c1:
77:60:89:bc:9b:83:44:80:61:57:53:26:71:33:65:3d:fb:99:
ae:85:d9:6a:9a:7a:6a:ee:85:04:47:77:d4:f2:ce:36:87:1c:
6b:4e:7a:6c:1a:f9:ce:30:05:65:28:ab:50:d7:28:a7:ef:9c:
d7:e4:c3:31:9e:1b:3a:6f:66:fc:35:56:46:76:11:f9:d0:05:
f4:91:48:e6:51:cd:03:7e:ba:0c:8a:17:2a:3d:5d:b0:0d:4e:
a7:e5:6b:49:29:82:bc:9a:38:8a:2e:5b:7b:73:40:0b:70:20:
b5:d7:fd:69:ee:5d:e8:78:bd:19:97:28:c8:43:ab:aa:2e:66:
80:66:2e:07:e5:5e:34:a7:e3:c4:72:b0:89:1f:18:bd:12:2b:
67:88:c4:7b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMzI3
Q0QxQjRGMUY4Qjg5NTY4NjE1OTdFNDk0MzE0QTY4NTYxNTkxMB4XDTI2MDIwMTAx
MzI1OVoXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoNDZDM0M3QjFFMjREQzg3
NkIzNTFGQkU2QUY4MTlDMUFCQjg4QjBDNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAdD+xF5PFlNnCtU7dO++1/R+bLDnW0voRDx+UHOmpkXB+sUghD
yqBAjIZHyZV5dmDy9XWxb0Svf1NPivxmkFuGkMEi2ODViI7zNN4cLiiv9oDpHgJ9
077O2CCU91cYiD7LE9ubohgrJilnhsv3gEkhx8myk0i/mY6TwbLb/BpDbFA/5D34
sdoV7b1cOBq6wLBcPF9s761JkiaBD245+jwcw8uo1navlZd9ziL0dkXJ54XRRhpi
qhPx1YvxCfJTGgz4i0CRuc0eOJGU1ughzfZ90jKKg5nZrQ2aPLolHB0tqkwXLPvY
i9gfdyu4P1MWb+BgxUU0qdJ4Ee+Iphi76C8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRGw8ex4k3IdrNR++avgZwau4iwxzAfBgNVHSMEGDAWgBQjJ80bTx+LiVaGFZfk
lDFKaFYVkTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwOTkvSXlmTkcwOGZpNGxXaGhXWDVKUXhTbWhXRlpFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSXlmTkcwOGZpNGxXaGhXWDVKUXhT
bWhXRlpFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDk5L1JzUEhzZUpOeUhhelVmdm1yNEdjR3J1SXNNYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALK4jwwDQYJKoZIhvcNAQELBQADggEBAIRqx0EktKaxqefuoCEbH29z
wQSmFck+Y/3yrUX8J6zW4kojlUJCalVBfnDywFZfCptYiEi7Kx6GorFlnMtTQ7RU
LgGehkMOp+QGa7hB4QfafA5nTtaKvKu8gc4UxKLmo+vGWKETM/TF0TgrwXdgibyb
g0SAYVdTJnEzZT37ma6F2WqaemruhQRHd9TyzjaHHGtOemwa+c4wBWUoq1DXKKfv
nNfkwzGeGzpvZvw1VkZ2EfnQBfSRSOZRzQN+ugyKFyo9XbANTqfla0kpgryaOIou
W3tzQAtwILXX/WnuXeh4vRmXKMhDq6ouZoBmLgflXjSn48RysIkfGL0SK2eIxHs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:26 2026 by rpki-client