
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/npFhrUbGVIykZ68pkuV0hpa0M0E.roa
File: npFhrUbGVIykZ68pkuV0hpa0M0E.roa (raw, json)
Hash identifier: A+FWPV2UZA4M3q4ZPUjPtICF/Dj96GoPizVGVlOjZNo=
Subject key identifier: 9E:91:61:AD:46:C6:54:8C:A4:67:AF:29:92:E5:74:86:96:B4:33:41
Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial: CA
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/npFhrUbGVIykZ68pkuV0hpa0M0E.roa
Signing time: Tue 31 Mar 2026 07:27:22 +0000
ROA not before: Tue 31 Mar 2026 07:27:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131976
IP address blocks: 113.192.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
Validity
Not Before: Mar 31 07:27:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9E9161AD46C6548CA467AF2992E5748696B43341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:bf:e7:6f:0b:95:ce:0d:33:83:0b:97:a3:
6c:13:15:72:a9:db:13:67:54:f8:4d:29:c8:6b:cd:
22:bb:62:36:8f:9d:77:51:2f:16:1b:17:27:82:74:
e0:bf:9f:81:9d:e0:55:bb:58:90:f6:fe:53:67:61:
7f:df:7c:47:f1:b1:19:79:0d:7f:5e:f4:c4:90:b2:
a5:a1:b7:65:2f:fe:1d:49:11:2d:1a:ff:27:fd:3c:
13:5a:f6:12:d3:b1:89:8b:36:fb:7f:07:e8:4b:15:
c9:4d:c4:01:13:2c:b4:3a:ea:8a:7b:fb:ef:e7:b5:
04:a6:55:c0:1e:7e:aa:89:4b:84:ee:a7:5d:64:7a:
eb:d9:2b:2f:d5:da:80:dd:3a:85:59:fa:ae:f6:00:
0b:23:55:63:1e:cb:a1:05:59:c0:77:f8:1a:aa:e0:
79:95:3d:0f:97:7d:3e:fb:e7:7d:d5:fc:99:5a:0e:
56:e9:12:31:89:ae:3d:c2:e4:3f:9b:34:2c:a0:6d:
1e:e7:b7:a0:4c:70:dd:a1:0d:2d:d8:38:d1:45:45:
01:03:33:c6:03:f9:8f:cb:0e:8e:79:82:1d:ff:a5:
89:9c:87:fb:45:e0:f8:b0:91:57:14:1b:f6:9f:8a:
ce:ca:54:9e:34:eb:bf:88:5b:f7:a2:01:2d:59:a6:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:61:AD:46:C6:54:8C:A4:67:AF:29:92:E5:74:86:96:B4:33:41
X509v3 Authority Key Identifier:
keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/npFhrUbGVIykZ68pkuV0hpa0M0E.roa
sbgp-ipAddrBlock: critical
IPv4:
113.192.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b0:01:6b:1c:29:a3:af:b5:2a:94:ec:1a:5f:ee:b3:e5:4a:
9f:c7:d1:ec:b8:97:ba:4d:c4:77:42:a2:a9:4f:e2:48:4c:27:
62:4d:75:9a:c5:89:79:13:42:e5:6c:95:a9:c3:42:7d:4b:49:
18:c0:86:00:f1:d8:de:14:d4:1f:e4:2f:9b:33:71:f9:8e:66:
57:57:b1:6b:7f:a5:1f:e7:b1:48:a6:75:2d:d5:06:9c:8a:50:
c1:bd:7e:c1:b7:e4:1e:fb:41:92:bd:d9:74:ac:4b:f3:b5:ce:
5c:a4:a0:a9:18:9c:07:37:0e:ce:b8:b3:1c:a1:16:b3:d8:4c:
47:4f:38:8d:81:9f:37:fc:91:81:52:d0:18:bc:55:3b:d1:48:
36:01:2a:cf:e1:89:fc:ac:02:26:43:08:ec:aa:64:01:27:c1:
a1:d3:99:00:22:ae:05:18:3a:30:dd:c3:2a:1f:59:c9:a2:e4:
48:22:57:44:89:59:b3:b5:b8:4f:21:b4:71:6c:ed:7a:ef:af:
09:e2:77:88:d0:b2:57:91:76:77:e9:3a:ed:d8:8a:0b:97:d6:
ff:8f:17:76:90:4d:fc:19:eb:7c:16:0f:d0:56:a9:45:ed:34:
54:fb:e6:f6:94:c1:24:bc:0d:68:81:9d:83:0d:4c:b3:e5:30:
46:8c:c9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:03:02 2026 by rpki-client