
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20285/qw4pFaZHxtq0-c_GADj51CX9lDE.roa
File: qw4pFaZHxtq0-c_GADj51CX9lDE.roa (raw, json)
Hash identifier: si3sAv9qyVtmVqgedpLAbAyZ1DAEpuMK0cazLE8CFjQ=
Subject key identifier: AB:0E:29:15:A6:47:C6:DA:B4:F9:CF:C6:00:38:F9:D4:25:FD:94:31
Certificate issuer: /CN=7EA77CA8D1EF9774B4F74D03A703B7A3214DDB06
Certificate serial: 02
Authority key identifier: 7E:A7:7C:A8:D1:EF:97:74:B4:F7:4D:03:A7:03:B7:A3:21:4D:DB:06
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqd8qNHvl3S0900DpwO3oyFN2wY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/qw4pFaZHxtq0-c_GADj51CX9lDE.roa
Signing time: Wed 08 Apr 2026 23:28:08 +0000
ROA not before: Wed 08 Apr 2026 23:28:08 +0000
ROA not after: Thu 08 Apr 2027 23:12:45 +0000
asID: 152876
IP address blocks: 144.79.120.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/fqd8qNHvl3S0900DpwO3oyFN2wY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/fqd8qNHvl3S0900DpwO3oyFN2wY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqd8qNHvl3S0900DpwO3oyFN2wY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EA77CA8D1EF9774B4F74D03A703B7A3214DDB06
Validity
Not Before: Apr 8 23:28:08 2026 GMT
Not After : Apr 8 23:12:45 2027 GMT
Subject: CN=AB0E2915A647C6DAB4F9CFC60038F9D425FD9431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:9c:33:f8:8e:e6:0f:5b:b2:51:b9:bc:9d:
df:08:c7:10:7a:94:76:f7:5b:ce:5e:ee:c1:63:c1:
a0:cb:89:f4:df:3f:c3:32:67:cb:94:81:d4:e0:aa:
82:ba:01:8b:30:5d:d9:ca:ca:38:d1:90:6f:89:64:
c1:0a:cc:a1:04:55:b5:f1:eb:69:a8:7c:f2:7b:8d:
00:4e:76:f4:05:5f:55:86:c6:ff:af:9e:a9:c3:d2:
ad:50:fd:73:e1:48:8a:03:fe:35:cc:cb:e1:b1:16:
be:63:4a:0f:fe:e3:db:e9:a5:1c:3f:86:4d:63:68:
23:f4:a3:a3:d5:82:59:4b:a4:de:a6:a7:40:26:22:
c9:e0:6e:9f:38:a4:35:f8:04:a6:43:0b:00:78:60:
f0:e2:0c:b2:b9:a3:9a:cd:07:84:18:ee:42:3a:e1:
9d:75:69:8a:ce:f9:f6:6a:f0:0e:81:8c:60:2c:47:
fc:9f:64:b1:7e:42:31:b2:c2:8b:6f:b0:1d:90:0e:
b9:b1:7c:3c:11:0e:c5:b8:3e:c7:cb:0d:e1:58:99:
6a:78:35:68:d3:6a:2c:f5:1f:1b:e4:1b:7d:ea:52:
9e:a0:74:05:57:c3:94:17:15:20:01:b5:fa:b5:da:
90:19:56:01:dd:61:69:af:bd:a3:29:eb:f8:40:b4:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0E:29:15:A6:47:C6:DA:B4:F9:CF:C6:00:38:F9:D4:25:FD:94:31
X509v3 Authority Key Identifier:
keyid:7E:A7:7C:A8:D1:EF:97:74:B4:F7:4D:03:A7:03:B7:A3:21:4D:DB:06
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/fqd8qNHvl3S0900DpwO3oyFN2wY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqd8qNHvl3S0900DpwO3oyFN2wY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/qw4pFaZHxtq0-c_GADj51CX9lDE.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.120.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:ff:f7:63:e7:ae:bb:70:9f:6a:f7:0e:7a:41:03:cd:28:fc:
e8:7d:ab:5c:17:1c:43:b6:96:da:b3:bf:80:6d:56:9c:d1:15:
8f:b9:fa:4a:22:14:f8:77:e0:09:fa:a6:06:88:bd:a9:21:64:
b7:be:04:7d:3c:c0:e7:fe:fd:4e:ac:f9:f6:d4:85:f0:f2:df:
1a:4f:67:45:79:84:28:98:11:75:74:51:68:3c:6b:ed:c6:1a:
c2:12:78:f2:ee:b9:11:5f:71:dc:a2:b4:49:48:3a:9c:7d:a2:
31:3e:62:a7:85:fc:5d:d8:70:b3:4c:55:c9:00:21:d8:02:e3:
01:d3:71:85:b4:b9:bf:cb:45:1a:0a:64:ba:19:aa:2f:85:a5:
3c:12:29:a6:23:29:e6:a4:fd:70:2f:f3:9a:ef:cb:49:3e:82:
de:02:d4:ea:cd:bb:75:df:3e:47:34:d2:52:8e:fb:15:8b:b0:
98:64:2d:15:2f:62:10:de:e8:22:ff:c5:e4:d9:2e:c7:7a:36:
a8:b8:b7:c1:46:9b:07:48:23:8a:c7:87:3e:9a:0f:03:0b:23:
73:61:fb:33:cc:e0:4a:02:ff:e1:f3:10:01:1e:ca:9d:55:40:
fd:6b:af:88:f4:36:54:7a:c3:07:b9:5b:d3:b9:61:b2:83:3d:
f0:68:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:59 2026 by rpki-client