
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/224/1Xovu8h1eG1H_sspnH__MJ5QchI.roa
File: 1Xovu8h1eG1H_sspnH__MJ5QchI.roa (raw, json)
Hash identifier: 2ZXFkAVLbyePxKRotJ1PyO7wtHwZj3ObT8MY6bIkF3A=
Subject key identifier: D5:7A:2F:BB:C8:75:78:6D:47:FE:CB:29:9C:7F:FF:30:9E:50:72:12
Certificate issuer: /CN=D623C38C2A127007F93E7C840DF875022E51C547
Certificate serial: 33
Authority key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1Xovu8h1eG1H_sspnH__MJ5QchI.roa
Signing time: Tue 31 Mar 2026 08:41:28 +0000
ROA not before: Tue 31 Mar 2026 08:41:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7668
IP address blocks: 210.167.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D623C38C2A127007F93E7C840DF875022E51C547
Validity
Not Before: Mar 31 08:41:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D57A2FBBC875786D47FECB299C7FFF309E507212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:ec:5b:e1:f1:b5:43:6f:e5:76:77:d9:7e:
f9:16:84:fc:98:6b:93:2d:57:90:52:49:ff:9c:e6:
29:ed:ec:96:23:29:0c:91:fa:dd:88:e2:82:ea:3f:
18:ad:d4:91:f7:08:a6:45:76:0c:11:30:ab:f2:4c:
02:9d:a0:b9:aa:a7:2d:48:c9:2f:7d:35:91:3d:3a:
75:d3:9e:11:7e:ca:75:2c:48:86:e4:bd:48:31:1f:
13:1e:e3:c3:80:9c:c8:ad:4c:a5:32:19:58:fa:bf:
46:49:7d:57:5d:50:41:f1:aa:35:82:9b:f8:7d:3e:
bc:22:c4:ba:dc:5a:5b:7c:68:73:f2:98:27:12:de:
47:75:11:57:e5:e2:dc:e8:ba:f7:19:64:be:29:8a:
3f:97:d4:a0:d9:b8:87:da:6e:43:10:3c:93:4d:a4:
29:53:a4:f1:33:5e:5d:5c:bd:d3:83:58:0c:5f:9d:
43:65:40:51:04:32:bf:9e:f0:f0:f7:4e:0b:7e:c1:
95:10:6c:9f:50:df:fe:67:f8:ef:e4:32:db:85:cd:
8e:2f:16:b6:59:ab:0b:ec:a7:cf:2d:0e:f4:8d:04:
37:b5:01:21:a7:6b:95:05:2b:b7:c6:45:c9:ff:0b:
9d:95:01:55:03:35:67:fc:af:f0:8d:f0:e3:31:48:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:2F:BB:C8:75:78:6D:47:FE:CB:29:9C:7F:FF:30:9E:50:72:12
X509v3 Authority Key Identifier:
keyid:D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1Xovu8h1eG1H_sspnH__MJ5QchI.roa
sbgp-ipAddrBlock: critical
IPv4:
210.167.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5d:88:3f:50:a6:e6:37:3f:58:e7:33:f5:f9:6c:b8:a1:37:64:
cd:40:c8:10:c3:2f:a4:4c:36:3c:89:c4:77:92:b8:2e:57:9d:
d6:b0:9d:bd:f8:db:a9:ca:a1:13:0a:b0:91:c8:f4:53:82:3d:
2a:9c:5e:8b:75:d5:9c:ed:c3:5e:45:2f:be:63:9b:90:90:11:
b5:5a:56:63:bf:60:fc:e3:58:79:76:95:6c:71:08:e0:1f:65:
96:e3:a9:3e:94:3e:56:d9:df:c4:f8:78:35:18:15:b6:64:44:
2f:ad:74:88:f7:4f:ad:7b:97:ad:39:5c:32:38:19:b8:5e:84:
f4:55:69:4d:7c:33:e6:33:ee:52:77:06:ea:4d:2d:3f:8d:75:
44:22:18:52:58:25:15:1e:a1:24:01:ba:45:50:3d:83:4e:dd:
11:d4:a6:8d:89:65:31:04:6b:45:f4:64:f1:44:de:45:29:ca:
34:04:42:bd:09:7a:c3:fd:36:7d:1f:23:8e:e3:00:df:9e:8f:
1f:ed:3f:e6:4a:f9:69:50:be:fe:17:e3:dc:79:2d:bf:37:79:
30:e1:99:3e:b5:4f:3a:7d:f2:d4:af:47:4b:d4:25:bc:dd:b1:
9c:0a:55:8b:89:28:5d:99:cf:5b:28:5a:d5:c7:3b:22:f2:15:
66:cd:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:20:07 2026 by rpki-client