
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/Q_qT-boBn7LkT93oGzQJMeRthW8.roa
File: Q_qT-boBn7LkT93oGzQJMeRthW8.roa (raw, json)
Hash identifier: dNFZoKlzQHpZUOvPGxo4MddDYWfQ1MJdfOEVStbjsjE=
Subject key identifier: 43:FA:93:F9:BA:01:9F:B2:E4:4F:DD:E8:1B:34:09:31:E4:6D:85:6F
Certificate issuer: /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial: 5C
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Q_qT-boBn7LkT93oGzQJMeRthW8.roa
Signing time: Tue 31 Mar 2026 08:16:31 +0000
ROA not before: Tue 31 Mar 2026 08:16:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7672
IP address blocks: 103.225.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
Validity
Not Before: Mar 31 08:16:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=43FA93F9BA019FB2E44FDDE81B340931E46D856F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:bb:c9:d3:4d:8a:b2:a6:65:48:10:34:c7:
53:36:53:53:79:96:d0:52:d0:d4:2e:51:36:1f:2a:
b4:8f:6d:41:6d:a4:b3:34:e2:07:33:c0:61:66:df:
2a:a7:e1:e6:e6:56:6a:89:ef:4d:c0:64:9d:43:f5:
d8:4d:79:e9:be:0c:89:80:fa:6b:84:fb:44:9d:ea:
88:f0:91:5f:fb:31:7e:69:e3:f6:c6:7a:58:74:f0:
1e:b3:f9:4f:05:51:93:d4:93:f5:64:5d:10:d7:a6:
d3:9c:a9:b0:11:96:8a:3e:78:ea:24:ed:37:00:47:
cc:ad:f3:77:61:ab:42:5b:36:d9:e1:55:10:6f:dd:
0c:42:b3:86:ed:d0:58:93:92:7a:b7:37:19:f3:d3:
f6:a4:de:33:c2:3e:a0:11:14:37:dd:00:e3:9e:f0:
9e:fe:6f:4f:ea:e5:1c:3d:23:66:50:36:6e:90:5c:
24:9d:bc:43:1e:e7:b0:e6:34:8c:2e:cc:be:d8:71:
65:f9:6e:db:b3:15:ec:00:54:07:76:f4:b3:52:5b:
9d:2f:10:7d:5a:34:52:e6:29:ea:51:90:ce:e7:25:
a4:3b:ea:47:32:da:d8:40:b1:39:2f:b7:f3:3d:55:
f6:60:67:b4:20:e2:5f:5d:b6:88:32:9a:8d:1b:19:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FA:93:F9:BA:01:9F:B2:E4:4F:DD:E8:1B:34:09:31:E4:6D:85:6F
X509v3 Authority Key Identifier:
keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Q_qT-boBn7LkT93oGzQJMeRthW8.roa
sbgp-ipAddrBlock: critical
IPv4:
103.225.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:89:ad:57:69:21:de:35:00:8c:d6:7d:82:3e:57:7a:f3:9f:
8c:aa:bb:dc:c6:12:5f:5d:86:3c:92:dc:a5:9c:cb:78:cd:06:
5c:a8:70:46:9d:ad:f7:e0:b3:8f:96:8d:fc:c2:e6:ef:84:35:
47:26:67:ec:a4:6d:7e:d9:80:71:9b:99:21:f7:ba:6e:62:d3:
2a:25:f3:38:5a:0c:de:c9:b9:01:59:04:9c:9d:4f:c2:ea:36:
25:db:bb:e6:2f:3d:be:e0:92:71:c6:75:5d:00:6d:5d:99:92:
cd:e1:5d:6b:4e:d4:87:5e:cb:95:e2:a9:84:64:80:c6:17:b5:
19:55:bc:d5:ed:3c:71:c9:37:2e:f9:3e:eb:c0:56:24:73:74:
66:db:79:90:c3:f9:bb:b3:a1:82:b2:7c:3f:94:e1:b8:53:b2:
da:21:04:5c:10:0f:da:f2:2c:6d:a1:5e:ad:16:a6:d9:ee:11:
3f:11:5b:70:a1:e3:25:72:f4:4b:18:6c:2a:7e:ad:b0:4c:c2:
61:a7:17:09:38:86:f9:59:6e:f0:44:92:36:3c:d2:ab:8e:7a:
5d:9f:b5:ca:99:9f:dc:41:15:7b:b4:15:19:5e:68:3f:b1:61:
59:1f:a1:b1:ac:b5:cd:f5:c7:e5:20:a6:6c:78:35:8f:5b:4f:
48:59:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:21 2026 by rpki-client