
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/224/GutFSKYHwad2NbzKPHW6F0i_g1M.roa
File: GutFSKYHwad2NbzKPHW6F0i_g1M.roa (raw, json)
Hash identifier: AixFtjiF/0lCE6vtvhCMZjXPAuVvH7ILfKGOWFDFOB4=
Subject key identifier: 1A:EB:45:48:A6:07:C1:A7:76:35:BC:CA:3C:75:BA:17:48:BF:83:53
Certificate issuer: /CN=D623C38C2A127007F93E7C840DF875022E51C547
Certificate serial: 2F
Authority key identifier: D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/GutFSKYHwad2NbzKPHW6F0i_g1M.roa
Signing time: Tue 31 Mar 2026 08:41:26 +0000
ROA not before: Tue 31 Mar 2026 08:41:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7668
IP address blocks: 210.250.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D623C38C2A127007F93E7C840DF875022E51C547
Validity
Not Before: Mar 31 08:41:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1AEB4548A607C1A77635BCCA3C75BA1748BF8353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:b9:00:eb:9b:a7:af:49:60:33:af:14:fb:
f7:dc:a0:fc:72:eb:3d:de:18:8a:da:6b:8d:0b:28:
6e:fb:53:a4:dc:b6:b9:f5:30:4c:fd:97:74:03:4a:
d8:0c:d7:74:ee:0c:22:95:87:55:c3:4d:a3:1a:72:
0e:18:58:4b:d8:38:e8:28:b2:6c:4b:ef:c3:f9:44:
c9:6f:51:21:f0:03:f3:89:4e:05:c9:d7:cc:86:4b:
a4:6a:87:d6:f1:f7:72:42:dd:2c:6c:1a:a3:52:58:
c5:91:64:cd:b2:11:3e:7f:73:d5:98:9b:37:8e:e2:
d2:c7:85:9d:60:68:23:3c:7b:de:b0:09:24:67:30:
73:64:d7:f6:19:80:91:67:9c:67:72:aa:b5:60:41:
5f:2d:42:cd:f3:05:73:b7:25:29:8f:00:ad:35:a7:
a1:cd:01:b5:49:00:6b:55:bc:21:31:90:30:47:5c:
0a:a6:ec:18:b2:ac:4d:38:c3:fd:68:7a:85:22:b9:
ef:80:e8:0d:84:8d:51:dd:6e:9e:e4:28:2f:2d:a4:
ea:56:b7:21:d4:71:de:ac:77:9f:fa:4a:4f:a3:f2:
37:1c:5b:da:93:4a:a3:cf:a6:11:20:63:a8:37:ed:
b6:45:86:71:a9:23:1e:1e:31:26:b6:5d:fd:dc:29:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:45:48:A6:07:C1:A7:76:35:BC:CA:3C:75:BA:17:48:BF:83:53
X509v3 Authority Key Identifier:
keyid:D6:23:C3:8C:2A:12:70:07:F9:3E:7C:84:0D:F8:75:02:2E:51:C5:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/1iPDjCoScAf5PnyEDfh1Ai5RxUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1iPDjCoScAf5PnyEDfh1Ai5RxUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/224/GutFSKYHwad2NbzKPHW6F0i_g1M.roa
sbgp-ipAddrBlock: critical
IPv4:
210.250.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ee:0f:70:c7:6c:9b:24:b9:6c:0a:ed:3a:8c:d6:9b:14:92:
c7:16:9e:ed:aa:1c:58:68:17:72:eb:c4:8d:a1:30:53:c7:eb:
0c:c0:35:e1:51:17:bf:18:28:e7:fa:8d:c1:2b:55:1e:6d:f2:
84:45:0f:6a:ea:dc:ba:72:72:7c:82:bd:61:42:43:14:63:5d:
41:16:c6:cc:37:c3:89:5b:d4:4f:a1:48:18:d7:b8:45:e5:98:
32:db:23:68:3e:c5:77:ad:34:b4:70:63:87:37:1f:e1:2b:c2:
94:fb:78:5a:83:bb:9e:f4:00:86:e3:b1:02:4f:16:69:57:b1:
b8:fa:eb:52:ef:e4:02:ae:5f:41:78:2c:86:3a:37:8b:97:19:
b6:65:35:b0:2e:f2:a0:51:f2:4e:cf:db:8b:0e:f0:b6:a7:1e:
79:e9:90:3a:54:e6:eb:99:29:9b:06:9c:d0:61:9e:8f:f0:be:
f9:8d:83:1e:02:93:43:fb:3e:59:a3:35:54:5b:2e:a9:b4:d7:
92:0b:d4:f0:92:ab:45:fc:69:70:bd:37:54:e2:3e:04:d9:46:
e0:60:93:b4:7e:aa:b2:57:83:3e:72:a6:12:24:06:f9:98:ff:
96:c0:2b:46:8f:de:a6:9f:57:97:8a:61:53:e4:4b:c4:4f:2c:
3e:aa:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:20:12 2026 by rpki-client