
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/WtR9HFuEdD37t8jfgt-FSTZ3XNc.roa
File: WtR9HFuEdD37t8jfgt-FSTZ3XNc.roa (raw, json)
Hash identifier: QVf5iGAhHpew87UiGxgC4+qiZfJlmB6tQCdDCbR3L7g=
Subject key identifier: 5A:D4:7D:1C:5B:84:74:3D:FB:B7:C8:DF:82:DF:85:49:36:77:5C:D7
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: F9
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/WtR9HFuEdD37t8jfgt-FSTZ3XNc.roa
Signing time: Tue 31 Mar 2026 07:51:23 +0000
ROA not before: Tue 31 Mar 2026 07:51:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9351
IP address blocks: 112.136.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 31 07:51:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5AD47D1C5B84743DFBB7C8DF82DF854936775CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:52:e7:c3:46:5f:55:61:87:00:a1:b1:b2:e1:
9f:23:e6:75:28:c8:26:bb:0e:c8:bd:d5:94:a5:3e:
f2:70:61:99:44:5a:0f:66:b0:26:a9:de:ac:3c:08:
da:69:c7:1f:d6:84:9b:68:3c:4e:de:9d:9f:51:e6:
92:29:94:12:08:2c:7a:48:01:ec:3b:01:f1:b3:c1:
7b:c9:ef:4a:c6:ed:4d:1e:8e:ce:c4:f8:04:99:ec:
c3:66:8f:cb:ba:06:ab:db:e1:ea:e2:ea:2a:e9:bc:
86:bf:84:f4:b8:ee:11:9f:d3:7b:28:94:65:35:91:
96:e5:38:06:97:9b:b2:41:b4:31:0c:95:e6:a4:48:
d4:e6:6e:33:c5:51:48:1a:6e:8d:8b:40:54:b9:0a:
5a:79:af:1a:8a:fe:e7:f2:0a:6f:a2:0d:8e:aa:f7:
d4:3f:68:af:0e:e8:07:22:b4:e5:0a:bf:7e:09:e4:
0e:71:9c:2e:2f:6f:c7:f6:d7:ef:73:d7:28:b8:cd:
d6:08:f6:89:03:21:2c:4a:55:37:07:f9:d3:c0:08:
9a:48:c0:08:56:2b:b4:8d:97:8c:58:0f:fe:e1:84:
19:25:63:a1:3c:a2:ad:87:cf:94:40:3e:83:73:f6:
c0:6a:3b:7c:68:28:1f:da:e1:03:0e:2d:6f:e8:0d:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:7D:1C:5B:84:74:3D:FB:B7:C8:DF:82:DF:85:49:36:77:5C:D7
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/WtR9HFuEdD37t8jfgt-FSTZ3XNc.roa
sbgp-ipAddrBlock: critical
IPv4:
112.136.0.0/17
Signature Algorithm: sha256WithRSAEncryption
21:aa:b5:68:bd:ea:db:8e:ba:f5:50:3c:fb:6b:4c:89:69:79:
49:d3:44:70:16:20:a0:31:0c:70:ef:4c:ce:14:9c:95:75:16:
fe:97:bf:e0:3a:d5:97:2e:cd:af:f1:cf:d0:2a:39:31:72:e8:
68:1e:23:9a:9a:f3:1c:33:f8:1a:83:23:9f:9d:be:63:dc:71:
41:52:20:ee:ee:7a:80:c4:08:d3:8b:a4:4b:33:8f:0d:06:16:
4e:c2:d6:f7:48:78:1e:38:d3:cd:ac:39:72:e2:33:1d:00:e7:
0c:a9:ea:ba:ce:1a:a8:af:d1:a8:0e:d1:b5:78:24:23:8d:2c:
bd:06:fa:41:70:c1:2b:47:64:36:f3:3d:7d:f5:f0:de:f9:fc:
c9:37:f0:ec:a6:c5:ad:58:95:d1:06:d8:c9:ec:86:f5:87:53:
44:8c:86:4e:d4:2d:da:71:55:20:2a:4a:46:79:71:29:47:fc:
26:8e:0c:9c:a8:89:18:e4:fb:48:3a:df:07:9c:75:10:1b:fe:
33:f2:2c:38:4a:f5:f6:d0:77:76:1e:8f:3b:b9:f4:82:06:48:
ae:d6:7f:d9:1d:85:11:a6:b4:15:31:31:bb:80:35:89:c0:c0:
40:52:04:3c:9f:cd:dc:8b:db:2a:96:5a:03:0a:a9:90:82:fb:
6e:37:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:05 2026 by rpki-client