
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20265/4IWV-67GGw-FAaJICeKBr6Ogdew.roa
File: 4IWV-67GGw-FAaJICeKBr6Ogdew.roa (raw, json)
Hash identifier: CLwmg3xoJroTMNdMA2nfzw2eXMOQkwvWAZHFAC/vH4E=
Subject key identifier: E0:85:95:FB:AE:C6:1B:0F:85:01:A2:48:09:E2:81:AF:A3:A0:75:EC
Certificate issuer: /CN=636333030C4B314581F9CC08CD8A3EF217AEDDAD
Certificate serial: 19
Authority key identifier: 63:63:33:03:0C:4B:31:45:81:F9:CC:08:CD:8A:3E:F2:17:AE:DD:AD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y2MzAwxLMUWB-cwIzYo-8heu3a0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/4IWV-67GGw-FAaJICeKBr6Ogdew.roa
Signing time: Tue 31 Mar 2026 08:44:22 +0000
ROA not before: Tue 31 Mar 2026 08:44:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 1008
IP address blocks: 160.22.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/Y2MzAwxLMUWB-cwIzYo-8heu3a0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/Y2MzAwxLMUWB-cwIzYo-8heu3a0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y2MzAwxLMUWB-cwIzYo-8heu3a0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636333030C4B314581F9CC08CD8A3EF217AEDDAD
Validity
Not Before: Mar 31 08:44:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E08595FBAEC61B0F8501A24809E281AFA3A075EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:d5:19:9d:fc:20:d6:d7:be:e6:e1:0f:dd:
7a:01:90:d0:31:63:2b:cb:d3:18:d0:24:e2:e2:3a:
54:7e:21:d8:51:20:65:7f:76:ee:af:18:7d:56:95:
f9:94:7e:4a:ee:4d:62:c4:db:0b:05:9a:5e:96:c0:
d7:14:ca:a5:b7:ac:eb:92:24:7f:51:84:9e:7f:04:
3a:fd:45:09:a6:68:08:7b:40:1b:b4:d0:1d:f7:5e:
21:49:d7:a6:d9:44:15:90:dc:fe:03:92:6e:2c:89:
54:62:65:e8:2e:8c:16:0e:ac:56:8d:23:f9:c4:e5:
c6:ee:69:b5:51:5c:69:53:e4:f2:d4:11:6b:61:ed:
c1:99:6e:a3:ac:97:ed:40:03:e3:b4:62:de:c9:29:
fd:0c:34:19:cf:2a:c0:72:54:62:0b:ac:70:2a:c6:
91:3b:00:85:51:24:7c:9b:ad:d2:f4:b9:31:a6:a8:
c9:9f:97:df:ba:7f:7d:46:a9:ef:88:76:98:8c:7c:
4e:41:58:8f:22:a3:45:65:f3:74:9f:8a:dd:5c:81:
08:26:d0:b9:e9:ef:63:d7:39:d6:ac:b9:73:c5:9f:
78:93:ff:14:1e:ff:60:f2:36:b3:93:03:09:b3:6e:
f3:de:52:52:7a:48:6c:2c:dc:c0:32:d4:74:8a:6f:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:85:95:FB:AE:C6:1B:0F:85:01:A2:48:09:E2:81:AF:A3:A0:75:EC
X509v3 Authority Key Identifier:
keyid:63:63:33:03:0C:4B:31:45:81:F9:CC:08:CD:8A:3E:F2:17:AE:DD:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/Y2MzAwxLMUWB-cwIzYo-8heu3a0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y2MzAwxLMUWB-cwIzYo-8heu3a0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20265/4IWV-67GGw-FAaJICeKBr6Ogdew.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.202.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:12:cc:84:81:e7:36:16:82:ea:a5:aa:36:ef:06:a8:3d:17:
26:39:74:36:4e:40:f6:b0:cf:3f:20:c1:80:db:22:7c:5e:44:
2c:bd:ec:8f:8e:9a:6c:64:e4:4a:f5:c9:9f:35:4b:92:af:1e:
bb:49:54:79:1a:38:4a:d7:0c:d4:b9:81:9d:98:b6:fb:32:9e:
93:5a:79:4b:24:93:00:c7:9e:42:62:ac:fe:d6:0f:b1:95:96:
ff:5b:32:9f:9f:cd:97:5b:bd:f6:53:95:44:17:af:fe:a8:df:
74:13:5f:91:51:ef:31:67:65:29:c4:88:ef:86:29:9a:3d:e2:
78:60:6b:64:ff:d9:85:cd:65:84:28:cb:dd:2e:43:3d:3f:02:
43:bc:55:7d:16:ea:d7:f8:17:0c:5c:72:27:c3:56:d0:08:8a:
23:90:55:40:60:1f:a3:a6:1c:26:40:dc:3d:15:95:e3:c8:b6:
ae:17:05:43:06:33:dd:4f:6d:c4:51:e8:c4:ca:57:5e:3b:c4:
59:dc:ca:ce:55:52:d7:ae:7a:cb:48:c7:45:ab:2e:fc:ec:61:
f4:cc:e8:e9:fb:e5:3a:70:67:66:b2:0b:be:2b:a9:9e:09:60:
31:d4:85:87:c1:fd:b8:2d:1d:d7:f5:59:b3:71:19:44:5f:3a:
a2:8c:7c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:26 2026 by rpki-client