
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/2B-Bhglk81ga3juz51LxOESlDH8.roa
File: 2B-Bhglk81ga3juz51LxOESlDH8.roa (raw, json)
Hash identifier: ztU/WxwXMMFXUQucB89xb8SU8JUcu3r5t8zA4/jz5pA=
Subject key identifier: D8:1F:81:86:09:64:F3:58:1A:DE:3B:B3:E7:52:F1:38:44:A5:0C:7F
Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial: 61
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/2B-Bhglk81ga3juz51LxOESlDH8.roa
Signing time: Tue 31 Mar 2026 08:34:09 +0000
ROA not before: Tue 31 Mar 2026 08:34:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9597
IP address blocks: 117.20.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Validity
Not Before: Mar 31 08:34:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D81F81860964F3581ADE3BB3E752F13844A50C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:ed:42:23:2d:b5:de:f4:a1:22:ac:7c:3a:
58:80:87:f2:03:97:ed:b5:93:65:29:36:3a:f6:9b:
6c:5d:5e:98:5e:ae:73:64:87:28:99:22:36:43:62:
15:c3:50:4e:1c:79:c3:b3:d9:a6:7b:7e:0a:92:fa:
2c:09:a2:26:00:57:de:6e:eb:5d:45:db:0a:4c:7e:
2d:4f:98:83:d2:9e:0d:cb:9f:07:83:60:15:8f:b9:
3b:ed:c9:27:15:eb:32:5f:4e:b9:7a:d5:d1:df:c5:
f7:92:4b:ec:7d:2b:03:e5:cb:c1:8d:b2:39:94:c9:
fd:d1:e9:5c:6f:df:a9:8c:41:88:09:5a:77:03:0a:
8d:d3:85:82:81:5b:f1:b4:d5:c0:df:9c:a8:8a:a2:
c9:b1:75:87:7a:65:d1:74:98:5f:54:b0:51:2f:66:
ce:fa:be:77:8f:84:09:ee:55:8a:cf:c6:75:47:4a:
fb:30:a4:4b:36:10:26:f7:d7:32:f2:8e:c6:ec:5b:
d6:c3:bf:46:22:5b:99:35:a8:03:a6:31:db:fd:9d:
b9:9b:00:da:69:67:ff:92:b3:a7:f5:4a:0a:3c:64:
e4:26:28:a9:1a:b0:bf:82:67:30:f8:6f:b1:6e:04:
b8:f5:3d:5b:b6:f4:24:e9:fe:f6:29:6c:5a:cf:b3:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1F:81:86:09:64:F3:58:1A:DE:3B:B3:E7:52:F1:38:44:A5:0C:7F
X509v3 Authority Key Identifier:
keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/2B-Bhglk81ga3juz51LxOESlDH8.roa
sbgp-ipAddrBlock: critical
IPv4:
117.20.96.0/20
Signature Algorithm: sha256WithRSAEncryption
85:41:09:67:44:0d:58:8e:66:e1:fa:3e:1c:0b:9c:48:94:7f:
5f:39:da:05:3a:99:67:84:eb:5c:b5:46:12:e0:19:d6:01:14:
6a:4c:5b:0d:98:f8:54:f0:9d:1f:51:91:35:53:54:fe:97:9f:
80:68:a0:76:b9:9c:6f:4b:55:97:dd:c7:d2:f0:18:88:76:de:
c6:f5:8b:1e:6c:f2:b9:e7:e5:15:57:62:87:14:2a:63:1a:2f:
c0:85:e4:0a:f3:02:8c:9b:5c:11:f9:58:ea:fc:fb:fa:5c:7c:
68:40:29:09:be:9f:12:fa:1e:4f:24:f9:63:90:a8:a4:64:4b:
b0:72:6c:8b:6e:4b:6d:8b:26:3d:f5:14:a3:f8:b7:da:84:fd:
c3:c5:f8:7f:04:21:20:a6:f3:a2:56:37:40:70:2e:3a:28:91:
95:ab:5f:3d:27:5d:97:f7:99:fb:56:1c:06:8b:2b:50:36:9b:
56:8e:16:08:fe:09:3f:1b:1e:3d:1e:23:69:6f:9b:1a:a2:86:
50:74:81:2e:da:9d:4a:63:40:a3:3a:f3:74:d3:17:02:9e:9d:
47:46:b8:ea:8d:98:ad:5d:78:fa:b6:bb:c4:be:72:c1:71:ae:
b8:8d:3a:4d:03:e1:8f:6f:45:99:e6:5f:93:28:80:44:68:43:
7f:7f:26:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:34:53 2026 by rpki-client