
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/tHpOpbu1MK20AAGQspv97_fjvUI.roa
File: tHpOpbu1MK20AAGQspv97_fjvUI.roa (raw, json)
Hash identifier: PLwK3smg/GLADFEMmDgoDIfwQRVSSYi5yX2d97VoIhY=
Subject key identifier: B4:7A:4E:A5:BB:B5:30:AD:B4:00:01:90:B2:9B:FD:EF:F7:E3:BD:42
Certificate issuer: /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial: 58
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/tHpOpbu1MK20AAGQspv97_fjvUI.roa
Signing time: Tue 31 Mar 2026 07:51:01 +0000
ROA not before: Tue 31 Mar 2026 07:51:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55396
IP address blocks: 192.50.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Validity
Not Before: Mar 31 07:51:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B47A4EA5BBB530ADB4000190B29BFDEFF7E3BD42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:f6:62:3c:af:3a:96:82:7f:2b:34:37:a1:
0c:e5:5e:55:b3:83:3d:be:df:5d:3f:03:a6:8e:c5:
49:b0:a6:78:7d:ee:6f:73:bf:b2:5e:c9:b9:c6:88:
44:89:9f:e8:16:19:54:db:8a:11:95:e7:df:4e:98:
1a:bc:f3:93:15:67:9e:e1:e5:db:ab:e4:4d:5a:a5:
fa:d5:41:70:ba:0b:92:54:ce:a2:ae:73:b6:0f:85:
25:b3:8f:8b:76:3f:49:98:e1:67:9d:5c:a0:6f:ce:
b0:9c:93:6e:a4:d3:e5:28:f0:2c:bc:74:ca:b2:ef:
66:7c:f3:87:14:4f:19:65:00:45:88:2c:e2:38:bd:
76:a6:20:2e:da:66:3d:7b:3c:8e:6c:c3:a1:86:8d:
2d:c1:98:40:1d:01:78:52:cc:e2:55:2a:76:39:c9:
dc:a0:d2:62:67:36:59:95:dd:f6:0c:dd:13:97:14:
45:61:1b:db:59:55:47:16:a4:b6:62:63:c9:7e:42:
5a:1f:84:41:8e:e3:65:50:0f:88:92:8d:ff:d7:f3:
6a:9d:33:c4:b0:f5:7c:c8:0b:2a:1a:0f:a9:b9:c7:
51:c9:91:d6:58:0d:22:69:87:a7:2b:7c:a0:ad:b5:
7e:30:ad:71:d6:e2:af:78:70:6a:9f:18:9a:77:c2:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:4E:A5:BB:B5:30:AD:B4:00:01:90:B2:9B:FD:EF:F7:E3:BD:42
X509v3 Authority Key Identifier:
keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/tHpOpbu1MK20AAGQspv97_fjvUI.roa
sbgp-ipAddrBlock: critical
IPv4:
192.50.152.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b2:37:4f:de:7c:75:a5:1b:b0:ec:7d:83:96:ac:95:41:89:
ac:27:72:5f:cc:2e:30:ff:d6:7c:02:39:93:3e:21:84:c2:52:
b4:f1:c4:d9:46:78:17:5e:04:47:58:51:b1:ac:fd:60:a8:78:
6f:29:9e:48:e6:00:2f:5b:b7:bd:0c:c8:84:99:3b:35:66:24:
2e:59:00:24:ac:cc:31:a0:12:99:f7:b6:06:c5:4a:22:a5:b8:
52:68:1f:7f:3c:b8:e2:f9:8b:32:32:46:14:b6:2b:72:cb:34:
44:04:3c:f7:b9:ef:be:3d:ab:1a:93:b8:4f:ed:28:94:26:f8:
8b:d2:ce:db:f6:3f:b5:c6:85:24:d9:9d:59:10:24:dc:2e:3c:
1f:80:0a:4b:df:94:c6:f9:5a:c1:ff:84:69:40:c4:0c:e9:88:
cf:e8:03:98:66:c7:a6:cd:38:c9:fe:0d:42:64:df:b6:0a:e3:
80:3b:50:cd:6c:79:48:69:d9:0b:05:b1:d2:bc:74:36:a4:2d:
36:0b:3d:23:da:68:92:7e:ad:b5:f0:71:d2:39:d9:80:ff:c3:
e1:17:dc:bb:89:e5:b2:f5:fe:ea:44:de:ba:d1:34:9c:9b:54:
16:30:32:39:02:b8:31:a3:20:95:88:49:6b:76:42:ca:0b:c4:
df:50:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:53 2026 by rpki-client