
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20274/sFLhAb3Aqspns3cSvSopbWBM_UE.roa
File: sFLhAb3Aqspns3cSvSopbWBM_UE.roa (raw, json)
Hash identifier: QLyU1y7gALYVlwDAbJ6lZFpcm5emLzwEpWh3FQzVfi0=
Subject key identifier: B0:52:E1:01:BD:C0:AA:CA:67:B3:77:12:BD:2A:29:6D:60:4C:FD:41
Certificate issuer: /CN=C4385E1388714415ECB55403CF617E1683ABB5D6
Certificate serial: 0F
Authority key identifier: C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/sFLhAb3Aqspns3cSvSopbWBM_UE.roa
Signing time: Tue 31 Mar 2026 08:46:30 +0000
ROA not before: Tue 31 Mar 2026 08:46:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 152872
IP address blocks: 165.99.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4385E1388714415ECB55403CF617E1683ABB5D6
Validity
Not Before: Mar 31 08:46:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B052E101BDC0AACA67B37712BD2A296D604CFD41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:18:7c:fe:20:28:90:4e:4d:e8:64:03:ae:
94:06:0c:5a:9b:6a:47:24:ec:9f:04:82:2a:25:43:
17:c6:01:2d:03:c0:c3:5f:22:e8:0b:e9:48:bb:20:
f0:1c:82:ab:92:33:59:59:63:cc:cb:ea:96:c1:a8:
8d:2d:ab:e2:83:54:95:0b:9b:14:11:33:1c:65:28:
21:ed:c4:d7:0b:a3:42:a8:f9:5f:db:8e:ad:52:9c:
27:a6:41:cb:38:a7:e2:d5:4f:91:5f:01:73:80:5a:
9d:84:bc:c4:85:6a:90:bd:03:f1:d1:6a:56:14:11:
ed:64:3a:80:e1:84:4f:15:e6:f5:2b:d1:d6:67:22:
27:9d:54:bc:d2:f7:e7:ba:df:80:fa:0e:72:02:ac:
ce:9d:3e:01:cb:81:9b:22:7c:2a:1b:14:0e:45:9d:
c2:2a:70:ef:f8:af:2b:92:3b:d0:0d:a6:de:17:e3:
32:5d:e4:e7:46:ec:59:8c:3a:b3:bb:ce:8d:5c:f2:
98:b0:f1:48:f2:5e:20:76:88:08:a8:21:c7:f7:e2:
03:76:f8:9f:f2:32:29:39:4b:19:6c:81:70:61:a3:
de:a2:57:c5:22:2f:6a:c6:42:55:de:83:20:8f:32:
a8:23:24:d0:d3:6a:c3:3b:f9:c8:c4:79:af:b4:3c:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:52:E1:01:BD:C0:AA:CA:67:B3:77:12:BD:2A:29:6D:60:4C:FD:41
X509v3 Authority Key Identifier:
keyid:C4:38:5E:13:88:71:44:15:EC:B5:54:03:CF:61:7E:16:83:AB:B5:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/xDheE4hxRBXstVQDz2F-FoOrtdY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xDheE4hxRBXstVQDz2F-FoOrtdY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20274/sFLhAb3Aqspns3cSvSopbWBM_UE.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.146.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:c9:fd:56:37:a0:1d:88:23:4b:e7:c1:fc:2f:4d:e5:e0:fc:
6a:43:d3:4e:66:bb:54:bf:42:01:61:aa:a3:e6:a7:fc:77:d2:
25:43:aa:09:63:21:d9:bf:fb:9f:b8:1a:9d:b4:8b:9d:16:40:
e8:5e:ab:cb:2e:50:de:07:74:5d:91:ed:ea:52:9f:71:39:29:
63:e7:15:a1:fa:2d:07:fc:be:6f:df:2c:75:27:c0:9d:73:b0:
42:e1:29:35:9f:3f:d7:64:88:02:fc:23:4e:5d:67:b2:33:18:
51:4d:6d:3a:9a:42:a8:5b:c5:7d:1f:c3:78:f9:ab:68:2f:f8:
0d:7a:cd:92:ae:4b:fe:b0:83:f5:e5:ff:bd:5d:02:35:46:55:
21:cf:d0:2e:39:9c:f3:f5:ad:45:f6:e8:2c:1b:96:4a:66:e4:
24:59:37:f3:ca:11:7b:45:17:31:20:95:7a:db:58:a7:57:c3:
86:30:97:4b:b0:b3:96:3d:30:38:d5:63:27:64:fd:62:29:3e:
3d:1c:b0:f2:0e:a3:9f:34:14:97:de:7c:1f:0d:d6:06:82:59:
f9:f9:29:9a:c0:25:1d:c2:56:a2:af:5a:59:d7:cd:ed:e7:c6:
a7:8c:5d:fa:f1:8f:81:54:69:72:21:01:8e:be:ba:0c:31:dc:
57:fb:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:05 2026 by rpki-client