
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/q5jykEQfhZD5bVMo2R1gFU9kohE.roa
File: q5jykEQfhZD5bVMo2R1gFU9kohE.roa (raw, json)
Hash identifier: dfiBWGZsMODsZEgRwGiRPJYI68qg4X5Rg7VIuVEaIzQ=
Subject key identifier: AB:98:F2:90:44:1F:85:90:F9:6D:53:28:D9:1D:60:15:4F:64:A2:11
Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial: C5
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/q5jykEQfhZD5bVMo2R1gFU9kohE.roa
Signing time: Tue 31 Mar 2026 07:27:20 +0000
ROA not before: Tue 31 Mar 2026 07:27:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7521
IP address blocks: 210.173.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
Validity
Not Before: Mar 31 07:27:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AB98F290441F8590F96D5328D91D60154F64A211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:ff:2c:e2:54:d8:d7:fe:bd:0e:1b:ac:f2:
de:07:a4:16:4f:f1:80:6f:2c:c6:85:ce:0e:5d:de:
f2:d9:e8:99:40:41:f9:a0:48:ba:08:d8:82:8a:b9:
ab:e4:37:f6:f3:52:60:4c:62:52:35:72:7a:4e:42:
10:c3:ee:7d:19:ed:58:e7:d3:5d:8a:a3:40:2c:29:
c1:39:dd:7f:a7:ed:0b:9f:45:65:50:25:75:38:1f:
4f:83:2f:34:10:bf:38:5b:66:30:de:0c:ba:1d:ce:
36:81:e2:90:3b:6d:90:7d:f2:54:18:e9:17:a4:8c:
85:1c:33:95:07:4d:b6:aa:92:ed:81:fc:5a:10:47:
52:60:88:55:1c:f5:45:a9:a0:c1:b6:a5:a1:f3:8c:
6c:b7:f9:69:a9:32:f1:de:90:8c:b4:ba:3c:7e:55:
94:9b:6c:05:1c:95:92:76:42:66:8c:2b:85:d0:cd:
ba:f1:be:4b:35:5e:f1:96:0b:f0:37:ee:81:34:b2:
49:3b:3c:cb:d0:c2:8b:30:81:b9:51:b1:18:1d:ca:
8e:ca:88:47:3b:c8:24:05:b2:30:10:d3:87:64:b2:
fc:df:e7:b4:65:e3:c6:22:0e:ce:ef:a1:25:0d:42:
6c:c9:b0:be:4d:c0:cb:eb:09:d2:39:4e:a1:41:22:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:F2:90:44:1F:85:90:F9:6D:53:28:D9:1D:60:15:4F:64:A2:11
X509v3 Authority Key Identifier:
keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/q5jykEQfhZD5bVMo2R1gFU9kohE.roa
sbgp-ipAddrBlock: critical
IPv4:
210.173.186.0/23
Signature Algorithm: sha256WithRSAEncryption
09:f9:df:ed:14:ec:f0:2e:3e:b4:c8:18:b0:52:80:fa:0a:75:
22:ec:41:6c:ed:d1:49:6b:97:f7:ec:de:73:d2:1b:f3:54:4e:
4d:84:45:c4:f0:fd:ee:e9:d8:3d:4b:d3:f4:91:83:96:44:09:
f4:b5:af:bc:35:e3:b7:85:28:33:12:1c:36:fa:a0:c8:b1:85:
7a:50:cf:f4:c2:e5:ff:68:ae:47:e2:69:7f:5f:34:2f:cf:2c:
c7:c4:56:cb:bb:e7:76:a7:4c:59:a7:19:6f:2f:b8:70:c2:99:
03:5b:88:53:72:c5:1f:94:12:33:2e:8e:8f:e1:c6:53:97:24:
23:2e:e7:94:d0:9b:5b:2d:22:82:22:b6:b8:7e:65:b0:92:1d:
47:68:09:51:d6:bc:02:85:6a:fb:a6:cf:2a:7c:eb:ae:2a:ad:
db:8e:c5:22:fd:c1:27:75:16:91:79:df:f7:2e:cb:9a:a7:68:
53:8f:37:a5:68:2e:de:64:a2:9a:7e:bd:05:30:8c:ac:bc:43:
a8:13:a0:4f:f6:07:f3:61:04:48:ff:60:cc:0e:87:fb:79:7e:
aa:96:e7:95:a2:c8:bd:3d:8f:f0:ee:e9:59:93:6a:78:b5:6e:
9c:60:be:75:2f:66:22:df:11:6a:c8:86:5f:13:a5:b7:63:04:
d7:83:05:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:26 2026 by rpki-client