
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20168/IW7KQMCWlZbC_BV5-nL-d7fdqv8.roa
File: IW7KQMCWlZbC_BV5-nL-d7fdqv8.roa (raw, json)
Hash identifier: 38h2HFCi7zsg2EB/RCj2H4By3HEZa4sTVHpb/69fqX4=
Subject key identifier: 21:6E:CA:40:C0:96:95:96:C2:FC:15:79:FA:72:FE:77:B7:DD:AA:FF
Certificate issuer: /CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286
Certificate serial: 25
Authority key identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/IW7KQMCWlZbC_BV5-nL-d7fdqv8.roa
Signing time: Tue 31 Mar 2026 08:41:32 +0000
ROA not before: Tue 31 Mar 2026 08:41:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 146969
IP address blocks: 103.173.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286
Validity
Not Before: Mar 31 08:41:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=216ECA40C0969596C2FC1579FA72FE77B7DDAAFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:53:c4:0f:52:e9:f7:8a:3c:4b:f3:e4:fb:
01:27:83:b1:32:6c:a3:45:81:dd:2a:2a:a2:48:90:
87:68:83:d8:7f:54:89:d3:05:8f:a2:db:79:ad:89:
97:b3:a5:b1:6a:ee:0a:54:d0:e2:fb:51:31:cf:5a:
6f:a6:c2:74:d2:27:11:35:e9:68:e1:0a:0f:ff:96:
51:05:e1:9f:88:6a:13:5d:d3:28:28:59:be:45:4b:
17:b2:79:f8:55:05:cb:26:6d:03:d9:b0:24:2b:62:
10:1f:bf:5c:db:ea:a4:b2:ec:87:87:5a:07:38:a2:
a9:22:32:9a:21:38:60:86:85:9d:65:ab:f0:58:31:
99:13:94:35:ad:a2:df:48:dc:19:78:f9:09:3a:34:
17:16:fa:5d:d3:7b:cb:81:0f:fd:8f:d6:84:19:c5:
24:1f:f3:f8:d4:eb:10:ef:85:04:bd:cb:62:02:4e:
6f:07:00:ed:8f:80:b5:7c:be:bd:86:ae:9a:69:53:
b5:16:59:f7:5f:fa:5b:b9:ee:26:ba:46:c7:85:a0:
4d:88:4e:d1:63:02:35:ae:b6:29:72:87:e1:99:90:
c6:70:d3:d4:46:2e:2e:f1:5e:f4:82:23:ff:eb:1f:
19:0b:df:15:85:50:4d:a0:db:89:05:5e:85:39:82:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:CA:40:C0:96:95:96:C2:FC:15:79:FA:72:FE:77:B7:DD:AA:FF
X509v3 Authority Key Identifier:
keyid:81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/IW7KQMCWlZbC_BV5-nL-d7fdqv8.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.104.0/23
Signature Algorithm: sha256WithRSAEncryption
90:e5:b7:3d:36:7e:4c:78:09:fb:e1:02:c1:18:70:5b:c9:9c:
42:bf:13:b4:ab:b5:a9:e4:e7:be:b1:a1:05:8a:3d:c8:5d:32:
04:a3:c9:69:d2:c9:e2:96:9f:f2:ce:aa:bd:c2:53:01:62:92:
30:af:d1:53:a9:d1:c3:83:fe:a7:c8:8a:3d:ac:a8:bd:b0:f9:
d9:92:4e:f6:f6:bb:1f:59:53:92:47:39:e5:9b:bc:6a:09:f7:
4a:37:67:d4:d5:c8:1d:8a:d2:5f:23:6a:20:68:40:4b:c3:e7:
e5:47:ca:4a:ac:54:bd:50:7a:e5:b1:46:f6:be:6d:03:f0:3b:
6c:6f:b1:41:93:4f:4e:40:c7:39:51:66:99:a6:d5:38:86:ea:
9b:de:9d:3c:6c:d9:a3:93:14:16:3f:af:ef:86:5a:cb:bd:0c:
a1:2c:60:36:72:93:85:ab:55:a6:16:0b:ca:38:11:80:d9:12:
bf:10:f6:8a:f9:50:7f:4d:ef:78:e8:fb:eb:ed:fd:97:96:66:
c7:85:bc:05:72:bb:68:24:4a:ea:37:47:90:cb:de:35:69:0a:
66:0c:92:4b:1f:d1:06:bd:45:1e:25:90:cb:21:3d:41:e2:5a:
3d:21:a0:0e:bc:ae:13:72:b4:5b:18:45:7f:c0:f9:b9:da:40:
d4:9e:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:40 2026 by rpki-client