
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/C9Qx__kBKfz9h5OoZJUJAKSPNAc.roa
File: C9Qx__kBKfz9h5OoZJUJAKSPNAc.roa (raw, json)
Hash identifier: DJC/e0T+9eXIeyp7vdcPYbD7e+7ls04Cl6sD8ezU4AI=
Subject key identifier: 0B:D4:31:FF:F9:01:29:FC:FD:87:93:A8:64:95:09:00:A4:8F:34:07
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 017E
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/C9Qx__kBKfz9h5OoZJUJAKSPNAc.roa
Signing time: Tue 31 Mar 2026 07:48:21 +0000
ROA not before: Tue 31 Mar 2026 07:48:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18186
IP address blocks: 117.103.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0BD431FFF90129FCFD8793A864950900A48F3407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:9d:ed:14:30:4f:87:00:70:a2:53:fe:a3:
3c:48:2f:b4:3b:e7:ee:ba:7e:42:6a:2b:ca:5c:15:
01:0c:da:bc:9a:e9:7b:88:47:56:56:c4:a0:9c:41:
60:cc:bb:f5:e2:1d:91:1a:a4:53:53:8c:8f:7c:d8:
d9:51:87:09:4a:c5:f4:af:00:99:ba:b4:e5:4b:2f:
e9:5d:5f:12:bf:ae:eb:10:8a:69:cd:63:c7:85:78:
1e:0c:e7:e3:51:60:3d:29:1d:4e:c4:84:53:1b:8e:
03:29:53:7e:c7:18:4a:01:1e:3b:4b:41:a7:09:41:
36:bb:c9:60:42:85:a4:e4:1c:c1:65:7a:81:f3:ef:
2d:cc:bf:be:ca:7f:ec:85:aa:9c:89:b0:52:70:87:
d4:07:9b:ca:b4:18:69:81:db:96:b8:cd:94:38:d2:
6a:87:2d:f7:d0:1f:a4:12:44:52:d5:dd:ca:33:06:
57:df:da:1a:ce:7d:10:f1:8b:d2:23:61:7c:41:66:
7a:bc:c6:46:7b:90:f4:42:58:13:9f:7f:0e:df:51:
04:20:ac:43:89:4e:07:f7:1a:f3:6b:61:90:82:9c:
84:3f:49:f4:4d:72:fd:97:71:ca:07:31:2e:91:88:
03:c6:33:55:4e:ba:e8:6c:38:bd:c7:ad:7c:1f:4c:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D4:31:FF:F9:01:29:FC:FD:87:93:A8:64:95:09:00:A4:8F:34:07
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/C9Qx__kBKfz9h5OoZJUJAKSPNAc.roa
sbgp-ipAddrBlock: critical
IPv4:
117.103.191.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e9:21:7a:b9:8d:56:44:6f:8e:9f:fe:91:cc:aa:5f:51:8a:
65:3a:97:d9:98:b3:77:7c:0b:a6:1b:ec:68:f5:93:8f:68:4b:
3c:71:c6:26:a8:fe:48:48:fe:01:7a:94:1a:7b:ba:76:d3:90:
47:95:79:83:5b:2a:ee:96:f6:af:5f:8f:eb:b6:52:cd:a5:3e:
22:e7:e7:ab:ac:c7:d8:fe:d7:be:c8:10:c9:5a:9a:c2:a5:02:
34:8a:90:24:46:4e:30:6c:12:9b:7b:68:88:44:29:6b:2a:89:
36:7d:d4:eb:be:43:7a:b0:b7:68:e1:fc:1a:36:55:40:ed:6d:
17:9c:09:49:53:f7:83:2b:25:04:e4:d2:e4:96:6f:c6:6e:99:
a9:d8:26:3c:cc:a9:a6:0e:e8:e4:97:3a:75:18:53:2e:6f:b5:
16:27:5e:b4:33:19:42:4e:d6:c9:80:55:a9:80:e2:c7:82:8a:
2d:38:5d:34:e6:40:9f:58:62:56:b9:89:fc:6e:df:bb:82:b2:
44:c7:7e:4e:02:08:01:b1:f3:41:df:bc:21:df:b1:e9:05:37:
b4:1e:58:6e:14:c1:c2:42:bf:a6:94:2a:7f:4a:88:14:62:58:
bf:68:36:0a:ee:1e:b7:fc:35:e0:c5:6a:87:47:58:bd:16:ba:
12:6b:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:10 2026 by rpki-client