
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/igEtRbOjvZbbybEMwlPe1q4GTRw.roa
File: igEtRbOjvZbbybEMwlPe1q4GTRw.roa (raw, json)
Hash identifier: z9fZ89d98/7hmtzXcxFN/iUvaFtL9TQqljftmy8fgWM=
Subject key identifier: 8A:01:2D:45:B3:A3:BD:96:DB:C9:B1:0C:C2:53:DE:D6:AE:06:4D:1C
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: F5
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/igEtRbOjvZbbybEMwlPe1q4GTRw.roa
Signing time: Tue 31 Mar 2026 07:51:21 +0000
ROA not before: Tue 31 Mar 2026 07:51:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9351
IP address blocks: 219.103.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 31 07:51:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8A012D45B3A3BD96DBC9B10CC253DED6AE064D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fc:5b:f2:5d:24:83:91:af:70:d1:f1:51:a3:
ed:07:35:d6:7a:e7:4f:4b:27:94:fa:b4:57:db:0d:
ea:f6:66:f6:b9:61:2e:4a:82:c9:aa:56:ed:8b:b5:
71:b2:7a:4c:1d:e4:c1:f0:fc:e0:b7:f5:1a:06:aa:
f8:60:82:b2:61:0c:d8:ca:52:91:c2:85:16:ca:b0:
f7:72:9d:b4:0e:7b:84:dc:8d:b2:09:fa:39:0c:61:
c6:90:0b:15:9f:e3:81:77:c4:e3:d6:95:34:87:16:
11:5d:0c:8a:46:6b:b2:2b:4e:ac:62:70:c1:6b:8a:
87:b8:6d:c2:ae:ff:d4:6b:01:4e:fa:f3:84:0e:97:
17:12:08:2c:0e:de:18:ee:5b:52:09:d2:db:e3:ae:
c8:dc:fc:e1:16:9e:ba:9e:67:98:14:6b:7f:d5:9f:
45:57:2b:2f:3a:c6:c9:71:bd:ce:84:c4:ab:90:ab:
24:28:77:e8:87:9e:a0:22:f8:aa:49:2d:36:d4:27:
37:5d:b5:bb:1b:1e:41:14:ea:6e:6c:f7:bc:37:a3:
09:2f:9d:24:18:e6:45:20:99:d0:85:42:03:74:24:
f5:4b:84:f2:42:49:fc:00:a0:5f:ba:d3:23:00:d3:
1d:09:66:f4:0b:60:cd:32:3d:ba:08:82:4f:71:82:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:2D:45:B3:A3:BD:96:DB:C9:B1:0C:C2:53:DE:D6:AE:06:4D:1C
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/igEtRbOjvZbbybEMwlPe1q4GTRw.roa
sbgp-ipAddrBlock: critical
IPv4:
219.103.64.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:92:e6:aa:fa:76:ef:c9:3e:91:43:7c:63:ea:aa:41:c7:c4:
55:f0:e1:9c:dc:ad:58:90:c1:4f:1f:f9:e9:0d:4e:8e:0b:ab:
23:4d:67:59:1c:8d:c2:00:7f:3b:cc:e4:98:f7:17:91:1a:ce:
d7:5e:74:ab:b9:c4:00:74:b2:21:e1:b0:76:c7:02:61:2c:82:
cc:be:b0:3b:17:22:f1:8e:1c:ab:60:99:0f:11:73:3e:cc:05:
4a:31:da:90:d7:89:ef:a5:ab:0e:9b:69:c2:ad:48:a1:bc:7a:
a4:a5:f5:8e:a7:59:33:34:8d:85:a2:97:da:a3:6b:5a:70:9f:
6b:e0:a5:78:53:f4:b5:1f:07:4c:9f:22:2b:b4:6c:2d:dd:7d:
62:1d:59:be:27:b3:d1:79:2f:bd:7c:ff:93:b3:78:ab:2c:5c:
5a:f3:17:2a:2e:a7:f4:48:0a:04:97:f8:72:a8:dc:2f:1f:46:
3f:8a:75:2b:56:f2:67:c7:22:e4:46:34:90:78:46:51:6a:92:
5c:a9:85:83:e9:80:38:ec:36:82:9c:d3:d9:db:e2:e0:cf:70:
88:d2:e1:b2:a1:43:43:0c:84:2e:da:8b:0c:26:3c:a4:a1:41:
c5:2d:9d:22:26:40:97:e5:31:a1:a2:db:14:41:cc:62:be:b7:
1e:4c:1b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:11 2026 by rpki-client