
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2285/i0kAHMR2ddvL59LYmCxe2chULSo.roa
File: i0kAHMR2ddvL59LYmCxe2chULSo.roa (raw, json)
Hash identifier: qSSWGer24BSrYbd4T6Rna8XJW2+88JLCdL/WpMHyO3I=
Subject key identifier: 8B:49:00:1C:C4:76:75:DB:CB:E7:D2:D8:98:2C:5E:D9:C8:54:2D:2A
Certificate issuer: /CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Certificate serial: 67
Authority key identifier: 7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/i0kAHMR2ddvL59LYmCxe2chULSo.roa
Signing time: Tue 31 Mar 2026 07:32:24 +0000
ROA not before: Tue 31 Mar 2026 07:32:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 133.37.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Validity
Not Before: Mar 31 07:32:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8B49001CC47675DBCBE7D2D8982C5ED9C8542D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:f2:c2:11:a4:0a:8a:55:be:7f:8b:9f:7d:
23:a5:28:8c:9c:b6:c9:56:29:8e:27:81:a8:b6:50:
88:1f:44:b0:20:07:88:4a:4d:72:e1:9f:c8:14:b5:
35:1c:0c:99:d1:30:dc:c7:75:5b:cc:ae:30:e8:72:
4e:67:9d:73:6b:64:38:ea:38:c5:df:37:e8:b9:ed:
d0:d3:ef:5a:99:85:dd:0f:0a:1a:bb:82:01:6b:35:
c9:47:79:b1:ec:73:8e:ec:e3:15:38:cb:44:03:37:
ff:20:0d:33:de:00:fd:f5:cd:ae:b2:6c:77:12:5b:
66:e2:e6:d7:0f:e5:bb:45:92:d8:cf:2a:31:a5:f5:
0f:cb:aa:92:0e:6b:63:49:9b:50:0f:f2:04:db:19:
f2:a8:a0:35:55:c4:d9:89:1e:29:69:2b:c1:48:ac:
b6:ba:0c:1e:a4:c8:bf:80:bc:87:38:67:8a:80:60:
d9:d0:0c:10:f0:8a:22:cd:12:52:c5:e2:6f:22:ec:
71:14:ba:2b:f1:b5:3e:a4:83:be:fc:06:85:9f:75:
a0:07:ba:45:f4:ff:57:24:22:3e:8e:d5:b8:91:35:
04:23:87:bb:90:e2:5d:38:b3:b8:44:44:48:66:67:
a7:ee:40:36:24:f2:49:09:b8:65:78:8f:47:b0:60:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:49:00:1C:C4:76:75:DB:CB:E7:D2:D8:98:2C:5E:D9:C8:54:2D:2A
X509v3 Authority Key Identifier:
keyid:7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/i0kAHMR2ddvL59LYmCxe2chULSo.roa
sbgp-ipAddrBlock: critical
IPv4:
133.37.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:a6:b6:1f:de:f5:61:42:bb:91:d6:bc:fd:a5:86:bc:f0:b5:
34:88:07:6a:48:e1:77:74:2c:9a:e9:4b:d5:71:26:d0:ca:21:
e7:68:3e:67:42:3f:19:d3:cf:32:d8:12:59:e4:70:11:03:81:
a3:f1:82:5f:f4:3a:f8:e8:97:f2:65:4e:47:0b:d5:15:49:13:
fd:ef:00:66:3e:4d:e8:15:cf:4c:52:3c:8b:14:38:54:7a:01:
30:51:a2:0c:41:99:89:c5:0e:e2:4a:47:e2:63:40:21:df:45:
e3:11:55:e6:aa:1f:3d:8c:d5:2f:68:5e:9c:1b:10:39:0a:b7:
c2:f0:4b:b8:a1:a8:7b:b2:9b:ab:eb:e5:d9:e8:6d:f7:6c:c9:
6c:e0:91:8e:66:7d:8c:7c:2c:2b:14:54:c5:11:a5:3d:fc:5b:
83:3b:10:0c:b7:21:e2:dd:8c:4e:45:49:4b:8d:9a:5a:50:b2:
63:3d:c5:d4:75:a6:35:5c:92:16:2b:16:79:51:5c:0e:0b:6e:
44:ac:da:b7:03:d2:51:3b:54:d2:ac:72:36:6d:3f:10:69:0c:
ee:33:73:c6:d9:74:4e:63:8d:3c:c0:da:6f:c9:e0:e3:6f:7a:
bc:f1:8b:f7:82:70:4f:47:aa:01:28:3a:59:57:c4:c3:d3:26:
0f:fc:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:00 2026 by rpki-client