
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/yNAbpCQ6ZGx1yG_EE_eftgMrUdc.roa
File: yNAbpCQ6ZGx1yG_EE_eftgMrUdc.roa (raw, json)
Hash identifier: 5yjcDstsF4EQolo0bZTZVhnSGulUVoYZSmNvVWTg12Y=
Subject key identifier: C8:D0:1B:A4:24:3A:64:6C:75:C8:6F:C4:13:F7:9F:B6:03:2B:51:D7
Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial: 33
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/yNAbpCQ6ZGx1yG_EE_eftgMrUdc.roa
Signing time: Tue 31 Mar 2026 08:43:15 +0000
ROA not before: Tue 31 Mar 2026 08:43:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 192.153.104.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA30F686577D6576F647B295455535835130C3
Validity
Not Before: Mar 31 08:43:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C8D01BA4243A646C75C86FC413F79FB6032B51D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:14:02:7d:b0:cf:12:d7:38:9d:3c:e6:5e:
4b:bb:c3:0a:35:f4:c6:a5:6e:aa:a6:12:0d:80:c6:
9a:43:7a:72:57:6f:6d:7a:b0:d0:ed:40:5f:ca:79:
f5:8a:63:ac:3c:6e:37:2d:05:56:a1:53:9f:d9:4f:
9c:33:a0:71:a0:3e:11:08:27:61:c9:4c:fc:4c:6b:
23:f8:04:e5:3e:fd:d2:1b:a8:ce:1f:70:70:1e:24:
77:cd:e0:e4:90:9d:03:b4:e6:c8:e7:87:f9:42:74:
fd:c3:2b:3b:f2:c1:29:10:a0:aa:c5:68:96:7a:c3:
c9:c4:ee:7f:b8:81:e2:0f:1a:38:b2:88:22:1a:2d:
60:c5:45:a3:a8:99:d1:ef:7e:72:22:3c:ec:7e:ff:
0f:16:e3:5c:00:ce:ec:4f:e1:f2:9a:fb:32:f9:cf:
ec:0f:20:c2:9d:b3:2b:7c:11:24:6a:27:36:d2:7c:
7d:42:8a:6b:b2:62:3d:ed:3b:de:35:98:a7:a1:98:
5f:a9:7b:7a:3e:01:56:62:71:20:e7:3a:90:06:e0:
ec:07:7c:06:27:7e:30:38:45:16:50:7b:31:98:cb:
8f:b5:64:13:f3:0a:ea:21:8c:21:f9:ff:d2:45:39:
f4:cb:09:22:c0:96:ab:42:d0:42:92:58:38:17:e2:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D0:1B:A4:24:3A:64:6C:75:C8:6F:C4:13:F7:9F:B6:03:2B:51:D7
X509v3 Authority Key Identifier:
keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/yNAbpCQ6ZGx1yG_EE_eftgMrUdc.roa
sbgp-ipAddrBlock: critical
IPv4:
192.153.104.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:da:58:6a:17:b2:39:47:37:64:d9:04:66:8c:89:9c:fe:24:
4e:72:ee:a4:fc:7d:9c:c3:d4:df:7e:23:60:21:e3:3c:61:eb:
fe:29:20:e7:a6:09:8e:2e:b7:0e:c0:0d:1c:f5:7c:fa:5d:84:
b8:87:19:7d:e6:fe:03:06:7b:06:f8:80:be:58:f9:27:aa:85:
ae:0f:80:81:c5:de:7b:47:e3:cf:dd:92:a3:5a:84:32:d0:22:
bf:d3:54:5d:76:38:7f:88:16:4e:50:49:8e:74:c2:9a:90:16:
d4:c8:31:97:03:18:ff:aa:ce:28:bb:a3:67:b7:d2:5c:c9:63:
b8:f3:1c:59:7c:2f:b1:46:04:c9:eb:94:5b:54:74:ca:33:d6:
e3:73:f3:14:d0:9f:73:46:99:65:43:59:b6:ce:a5:b6:61:ed:
3c:33:b9:27:e3:29:7c:0b:31:16:ce:0f:21:67:df:cc:09:15:
0f:a1:37:7b:9b:95:d4:b4:ec:1e:1f:83:88:f8:6b:0d:dc:01:
49:fb:25:d0:77:d6:a6:48:06:af:3d:92:23:7c:d3:d6:e2:1e:
e3:31:9b:77:dd:df:20:4d:ed:30:f7:b4:e3:39:9f:70:af:b7:
69:02:b4:b0:ee:51:43:f6:e7:3e:2b:c9:2b:3d:c3:02:e9:41:
94:a7:1b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:42 2026 by rpki-client