
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/ZETDql-rUjE9t_qOoinO4L1BnYQ.roa
File: ZETDql-rUjE9t_qOoinO4L1BnYQ.roa (raw, json)
Hash identifier: X+zx7dQE2kqua/ra66Of91CSdGPOpwvJCEMWezqWtJs=
Subject key identifier: 64:44:C3:AA:5F:AB:52:31:3D:B7:FA:8E:A2:29:CE:E0:BD:41:9D:84
Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial: 39
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/ZETDql-rUjE9t_qOoinO4L1BnYQ.roa
Signing time: Tue 31 Mar 2026 08:43:18 +0000
ROA not before: Tue 31 Mar 2026 08:43:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 192.55.118.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA30F686577D6576F647B295455535835130C3
Validity
Not Before: Mar 31 08:43:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6444C3AA5FAB52313DB7FA8EA229CEE0BD419D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:50:b3:5b:86:36:f5:10:36:36:10:18:a4:
ea:ae:c0:94:fa:e0:57:f2:fc:dc:ee:7c:21:df:12:
cd:6e:a6:68:5e:f6:ef:4b:79:37:76:b4:da:b9:25:
f1:1f:27:d4:7a:08:9f:c9:9d:34:15:20:18:7f:0a:
ff:41:84:f5:76:4a:11:7f:45:21:a8:91:7b:23:6b:
0e:22:f7:b2:81:fc:26:d2:ba:4f:ea:a8:01:4e:50:
6e:9b:17:9d:fd:4c:71:ac:a0:39:4c:26:e7:1c:58:
bb:25:c4:41:9c:9a:51:9e:db:01:23:4f:20:85:59:
88:dd:22:75:21:74:16:ec:0e:39:59:a5:80:4e:71:
96:bc:07:a9:3e:a0:7f:e1:1b:49:34:b8:cb:01:6e:
4f:a3:85:9f:36:83:3a:84:31:dc:1a:44:2b:fe:05:
9b:2d:fa:45:49:74:b5:7a:06:d1:e6:73:dc:e9:30:
c1:ec:b5:5d:a4:08:ae:6c:de:62:d8:ca:04:48:ac:
b2:d6:2d:16:a3:00:dc:6d:3e:c4:ce:fa:ef:f0:a0:
40:27:10:9b:b7:2f:a7:90:8c:9b:b0:7f:67:86:95:
87:50:a4:9d:81:d5:4a:8a:20:db:cb:d8:13:6b:6c:
5b:43:8d:c1:f6:b4:48:26:27:6c:8f:36:66:42:0d:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:C3:AA:5F:AB:52:31:3D:B7:FA:8E:A2:29:CE:E0:BD:41:9D:84
X509v3 Authority Key Identifier:
keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/ZETDql-rUjE9t_qOoinO4L1BnYQ.roa
sbgp-ipAddrBlock: critical
IPv4:
192.55.118.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cf:1e:fc:2e:c9:42:c7:4b:12:86:57:65:0a:48:28:69:2e:
66:5e:61:9a:b0:a3:d5:a7:97:f4:cf:28:3e:3f:75:21:17:5c:
ea:fd:69:5f:96:23:82:3b:88:38:12:79:73:0b:1c:0b:78:5f:
8b:3e:83:4e:ea:0a:e0:2a:86:74:04:f4:e3:3a:65:a4:7d:3a:
92:0d:c6:8d:46:cd:dc:a8:6e:c8:98:37:eb:e5:20:87:a3:a6:
d0:09:ec:36:49:20:2f:e8:6a:a5:bc:a4:da:fe:d4:c9:3a:11:
fd:56:2a:bd:29:0a:c4:fa:9a:f2:0a:87:2f:c5:ea:3e:94:27:
4b:55:64:1d:55:e1:69:fd:0e:d1:8c:9f:78:a9:2b:be:cc:8f:
be:93:42:f4:2d:f7:53:53:dc:a2:ba:ed:22:0e:ff:35:c0:88:
1e:6c:19:1c:20:4a:48:a8:b9:c6:4f:76:e5:d4:7b:33:e1:e6:
10:31:79:79:12:7f:51:42:bb:80:86:24:43:b8:f5:00:68:e4:
19:4b:59:6f:8e:9f:89:11:79:f5:f7:0d:4e:20:9a:bb:2c:29:
76:71:0e:95:64:09:5d:88:1a:c2:82:2c:64:73:f6:a9:fe:ef:
27:c0:1c:f1:9e:c1:ce:60:69:8c:73:09:d7:5e:e2:5e:78:4e:
2e:0c:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:25 2026 by rpki-client