
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/rghyuWptAsljcQSUdsg6wXPjc6Q.roa
File: rghyuWptAsljcQSUdsg6wXPjc6Q.roa (raw, json)
Hash identifier: lnGYQesJkmhFVJsHy/wKX+DlIfYhX4ck6s+SU6fY0y8=
Subject key identifier: AE:08:72:B9:6A:6D:02:C9:63:71:04:94:76:C8:3A:C1:73:E3:73:A4
Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial: 31
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/rghyuWptAsljcQSUdsg6wXPjc6Q.roa
Signing time: Tue 31 Mar 2026 08:43:15 +0000
ROA not before: Tue 31 Mar 2026 08:43:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 192.153.95.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA30F686577D6576F647B295455535835130C3
Validity
Not Before: Mar 31 08:43:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AE0872B96A6D02C96371049476C83AC173E373A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:69:fd:cb:0f:5c:6e:ef:68:d0:08:c9:f9:
d6:6c:cc:fe:e6:10:5a:a7:75:c3:4e:dd:c2:6f:e1:
4c:78:21:fc:a2:82:6a:b8:df:83:57:a0:70:fe:6e:
c7:40:1c:52:89:00:63:ba:c9:56:d1:65:a9:c4:79:
6c:18:b4:76:77:12:91:ba:4b:2c:8d:24:72:ed:fd:
84:89:36:ea:04:b2:43:a1:9d:82:4b:0d:72:96:72:
f7:84:d6:7e:6f:29:76:75:12:a8:28:a3:ba:7b:75:
40:89:fa:e0:77:e1:4a:64:6c:e3:47:f8:f5:ef:8b:
6d:1e:b7:6f:54:18:6f:ad:b1:29:1f:ba:37:12:0c:
27:df:59:04:3c:af:b5:21:5c:f4:70:11:2e:28:cb:
d3:dc:de:f5:c2:cf:6b:a6:25:46:b6:b5:e2:ed:40:
43:30:29:35:32:65:5d:b0:5a:ab:34:a6:82:a4:0d:
86:b8:59:dd:5d:45:53:49:72:e4:3e:77:f6:86:76:
a6:44:3f:58:6e:78:eb:74:97:d3:95:ae:42:71:d8:
4e:b3:b7:ec:70:6b:43:ac:9e:58:fb:81:67:be:30:
8d:33:aa:06:ce:24:58:47:a8:27:4e:32:54:9b:4c:
84:ef:df:dd:2c:66:7e:12:91:88:dc:aa:a8:2a:f7:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:08:72:B9:6A:6D:02:C9:63:71:04:94:76:C8:3A:C1:73:E3:73:A4
X509v3 Authority Key Identifier:
keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/rghyuWptAsljcQSUdsg6wXPjc6Q.roa
sbgp-ipAddrBlock: critical
IPv4:
192.153.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:93:d2:a0:b6:55:d6:51:39:73:dd:45:eb:a7:92:a4:f6:14:
b7:6f:79:b2:a6:1b:3d:0d:3a:93:41:fd:94:33:77:75:0c:42:
0c:2d:32:d2:58:d6:2b:b3:eb:bb:29:7a:57:a2:2c:3f:84:54:
87:5e:09:41:77:a6:9d:f7:4d:45:73:c9:cf:f2:ed:23:c5:cf:
e4:3b:d1:23:84:0e:65:03:82:d6:be:22:47:54:04:f9:48:91:
15:69:7e:28:a6:07:80:4d:ec:e0:d4:97:cf:f3:3b:f4:4d:27:
0b:7a:3d:42:26:ad:59:23:cd:35:bb:07:c7:71:14:e5:f7:07:
57:2c:b4:19:ba:cc:87:a9:c4:f9:1f:cc:29:e9:a6:e4:b5:58:
a1:9c:32:36:79:c3:f4:d8:13:56:d2:a9:63:6a:ab:74:18:c2:
9c:95:6b:c8:60:62:78:96:1c:39:59:40:0d:40:7f:3a:6f:90:
b7:4b:44:ab:b9:77:19:49:2a:49:06:64:c2:55:20:ba:b4:80:
2d:02:56:57:52:f5:ac:7d:20:1f:eb:66:95:95:14:fd:2e:9c:
9d:30:20:8c:9b:b9:7d:81:99:52:73:a2:4a:88:ca:2f:67:3c:
53:57:bd:a0:c5:8f:d4:61:9e:9e:e6:07:dd:ac:87:7b:5f:53:
f0:a3:37:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:09 2026 by rpki-client