
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/n-2DtN_PZqytQNR_BY7S113__Uc.roa
File: n-2DtN_PZqytQNR_BY7S113__Uc.roa (raw, json)
Hash identifier: gZ+Mc8Iz92VkvYzRnc9qWLiT0xLLNZ3qGUBOSe4/mDo=
Subject key identifier: 9F:ED:83:B4:DF:CF:66:AC:AD:40:D4:7F:05:8E:D2:D7:5D:FF:FD:47
Certificate issuer: /CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Certificate serial: 29
Authority key identifier: 1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/n-2DtN_PZqytQNR_BY7S113__Uc.roa
Signing time: Tue 31 Mar 2026 08:44:01 +0000
ROA not before: Tue 31 Mar 2026 08:44:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7677
IP address blocks: 157.101.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Validity
Not Before: Mar 31 08:44:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9FED83B4DFCF66ACAD40D47F058ED2D75DFFFD47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:46:0b:a8:49:f4:82:7b:fc:1a:b9:6f:de:
e3:71:0f:2b:ea:5b:a1:0d:94:10:f6:4d:3f:23:e5:
c5:ec:2d:24:00:d8:b5:e9:a1:3d:e6:e8:f2:ce:f1:
78:95:84:f9:a7:c1:8e:6d:a9:a5:4c:34:39:87:9d:
fc:8f:75:ea:4b:1e:54:fb:2d:37:5d:c6:0c:cc:60:
d2:91:d5:d9:e7:55:0a:8b:53:2e:fe:ed:c0:78:96:
ba:5f:47:a8:12:56:a9:11:8c:ea:0e:82:25:64:d4:
81:f6:4a:ac:a2:ce:d9:c0:26:0d:3c:ac:0b:3b:56:
ec:7e:c9:02:bb:8f:ba:06:27:b3:19:3a:d6:6e:2b:
3e:73:62:68:0f:cf:7f:f6:3f:1b:99:57:fb:ef:33:
ea:1c:a5:70:e7:0c:d0:d9:e4:9f:bc:4b:9a:74:0f:
79:38:7f:5e:5f:6a:4b:b7:7e:1c:a1:ba:9b:69:b6:
ea:a2:47:56:e5:93:a1:d0:ea:cc:0b:6e:69:07:f6:
1d:24:fc:05:c9:52:a0:d0:d2:ec:6c:92:bf:cd:1e:
ab:4f:28:1c:02:85:bf:4a:05:c4:ca:02:ac:7a:72:
d6:1a:af:8b:b2:d4:ea:de:65:d6:32:a8:0e:f7:bf:
40:0b:b8:bd:2c:ca:65:39:a7:82:3f:49:9c:c8:cc:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:ED:83:B4:DF:CF:66:AC:AD:40:D4:7F:05:8E:D2:D7:5D:FF:FD:47
X509v3 Authority Key Identifier:
keyid:1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/n-2DtN_PZqytQNR_BY7S113__Uc.roa
sbgp-ipAddrBlock: critical
IPv4:
157.101.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:f5:46:01:e2:10:89:a8:99:92:ff:ce:59:6e:3c:94:16:68:
d6:f0:5c:85:78:35:95:c3:ac:55:24:83:48:03:fa:07:a7:9a:
c7:c0:c8:e2:88:ea:7e:1e:c1:e2:06:d1:a9:2a:28:31:57:47:
a5:81:b8:8b:db:0e:f4:12:60:d0:72:9b:3c:f0:cd:58:d2:c4:
33:12:83:ba:cb:23:6f:8a:a7:1f:3b:df:a5:4d:80:b8:3e:2e:
d8:7e:0f:5e:96:20:79:c8:09:23:e0:d1:5b:11:25:d5:4a:3a:
24:00:b7:3c:75:48:42:68:63:8e:78:a7:ee:f8:75:9d:3d:39:
9d:02:87:96:10:69:ab:17:89:67:cd:87:fa:ac:ca:b2:3a:6e:
ff:58:e5:35:18:bb:3f:18:1c:2a:38:3d:fd:eb:75:e0:50:67:
e8:35:e0:f4:ab:e0:58:ca:b8:2c:88:dd:e6:6f:8e:89:5c:93:
4d:aa:1f:a0:01:1f:10:45:43:a5:66:8f:72:f2:0d:42:f6:dc:
8a:88:91:84:55:13:f7:97:01:6f:17:09:b9:ef:48:06:30:c8:
0a:96:c8:dd:12:82:38:be:71:ee:c0:b1:14:0e:01:ea:b9:8f:
7d:b6:3f:dd:53:40:7f:3d:07:28:7a:a3:9f:83:62:46:10:ad:
e0:bc:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:33 2026 by rpki-client