
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20282/hZ2Aypk4Rsdu5kX7KoxwF11vKIA.roa
File: hZ2Aypk4Rsdu5kX7KoxwF11vKIA.roa (raw, json)
Hash identifier: Y9mUmJ1YQWMPclsv63qOZfZJPoHW1EgQXIUt1Z8jeqU=
Subject key identifier: 85:9D:80:CA:99:38:46:C7:6E:E6:45:FB:2A:8C:70:17:5D:6F:28:80
Certificate issuer: /CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648
Certificate serial: 07
Authority key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/hZ2Aypk4Rsdu5kX7KoxwF11vKIA.roa
Signing time: Fri 20 Feb 2026 01:15:26 +0000
ROA not before: Fri 20 Feb 2026 01:15:26 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 152875
IP address blocks: 138.252.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648
Validity
Not Before: Feb 20 01:15:26 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=859D80CA993846C76EE645FB2A8C70175D6F2880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:f4:b4:c3:0c:ab:8c:fc:d3:65:b4:e7:2e:
ec:62:f8:80:f2:f9:89:da:bb:cd:7b:e4:a1:06:d2:
b7:f5:c4:c7:14:b2:a3:bf:28:1a:75:1c:20:aa:40:
74:6d:ad:49:3b:7f:e8:e0:98:9a:c0:e5:3b:db:12:
8f:ef:ee:43:bb:31:93:9b:27:91:29:c0:c5:bc:b9:
4c:ab:20:37:bb:7a:f6:bc:88:ab:02:df:73:20:7d:
50:c6:c1:01:5c:14:cd:fd:af:d9:ec:54:a9:ac:2c:
89:2d:2f:0d:5c:64:98:74:3e:b1:74:cb:4b:ba:0e:
61:eb:48:5c:9b:23:aa:38:86:7e:58:3a:01:3b:54:
42:8b:14:4e:68:e1:e2:7e:ae:86:39:3d:e5:d3:9e:
e6:7c:ff:f9:3e:0d:5e:f9:fd:0a:26:c9:7b:ef:34:
bd:9a:1b:12:43:d7:7b:4e:4b:77:25:8d:b4:f1:ed:
08:38:ee:70:da:d4:38:16:87:e9:85:01:8d:16:fd:
d1:1a:d5:f3:0f:1f:bd:e3:63:b9:1d:aa:6f:f2:d5:
5f:78:ee:0b:eb:c0:fc:52:67:5a:ff:92:2a:95:10:
d4:33:47:dc:87:76:7f:e2:b0:cd:27:14:e0:d1:0f:
af:f1:8d:a4:b5:f4:1c:53:97:22:26:84:73:c8:20:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:80:CA:99:38:46:C7:6E:E6:45:FB:2A:8C:70:17:5D:6F:28:80
X509v3 Authority Key Identifier:
keyid:3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/hZ2Aypk4Rsdu5kX7KoxwF11vKIA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
138.252.48.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:70:35:32:0d:35:f6:55:4e:51:e8:72:93:6a:c3:9b:91:12:
a5:87:e4:84:24:7a:d7:32:b1:df:f5:4d:7a:be:54:7a:02:57:
91:0b:7c:b1:8d:24:84:f7:7f:14:6e:f6:1e:f4:b6:53:2a:5b:
64:2e:ea:c3:2e:da:f8:82:ba:24:98:0d:42:91:3a:57:26:78:
f8:8b:82:0f:0f:62:6d:5e:f1:b4:38:d7:70:cd:49:f9:a4:09:
33:b0:b1:20:bd:86:2e:bf:f9:48:2f:b3:3c:da:fb:7d:1f:b7:
6f:87:57:c7:d5:22:02:52:ea:79:c4:58:3e:b2:f0:30:a7:f0:
ab:09:b3:af:b5:99:44:b8:98:19:bd:58:0a:a7:9e:8d:d2:16:
e9:b1:e8:2e:01:a4:c8:3e:c2:d6:4f:01:06:ab:2c:1e:67:53:
be:6b:13:9c:74:76:f3:b1:ff:9d:5d:e1:30:b2:5d:2f:6d:04:
08:3b:11:80:43:b3:91:5c:26:50:91:f8:26:a2:8b:cd:2d:6d:
ae:80:1a:27:10:b0:2b:9f:2b:a3:2e:7a:65:50:f6:07:ff:24:
bf:56:62:25:8d:6d:a1:51:84:ce:0a:4d:6e:2a:f8:11:70:9f:
48:03:8b:f7:d8:c3:ce:7a:7d:9e:01:37:e0:6d:f0:ae:66:14:
a9:ae:ec:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:13 2026 by rpki-client