
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/D-8DnXUSpjuUH8d9oL1JauxKD44.roa
File: D-8DnXUSpjuUH8d9oL1JauxKD44.roa (raw, json)
Hash identifier: DCe2XVpJRLZ4sR0Ss/oCKktprJsIrhTe9oDmYbMLmrc=
Subject key identifier: 0F:EF:03:9D:75:12:A6:3B:94:1F:C7:7D:A0:BD:49:6A:EC:4A:0F:8E
Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial: 6A
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/D-8DnXUSpjuUH8d9oL1JauxKD44.roa
Signing time: Tue 31 Mar 2026 08:34:12 +0000
ROA not before: Tue 31 Mar 2026 08:34:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9597
IP address blocks: 202.74.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Validity
Not Before: Mar 31 08:34:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0FEF039D7512A63B941FC77DA0BD496AEC4A0F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:6a:d6:ed:0f:b5:d1:88:21:7a:2e:32:68:
02:41:5c:23:dc:84:44:e6:79:74:a1:32:6f:d4:ac:
0d:7a:8f:29:55:ac:91:2c:46:ca:a1:1b:36:3d:26:
8a:c4:f5:90:cb:99:9f:01:12:dc:9a:bc:e0:e0:e8:
26:ce:96:04:f2:03:39:48:36:92:9e:37:a7:5e:91:
a9:23:11:4f:1e:80:45:82:56:3a:31:57:bc:43:d7:
78:5d:d1:07:79:e4:8a:ec:35:98:33:e5:7c:2c:79:
8a:97:81:a3:30:9b:1f:83:6f:99:48:59:8c:4d:f6:
47:d0:b0:56:62:a6:42:fb:88:df:84:e7:36:73:4c:
d6:49:06:83:58:07:de:2f:16:08:b0:b9:0b:83:ad:
f5:8e:ae:d1:3a:f3:45:f5:21:66:a9:bb:08:e4:67:
32:16:bb:86:e6:55:3f:f8:3b:3f:f2:8c:89:e4:1c:
b2:c3:58:14:7b:3b:a8:85:47:74:3d:38:b2:23:05:
42:e9:a9:88:2a:82:f0:27:eb:be:5c:0f:df:53:ab:
15:12:5f:54:16:4f:c4:ac:88:50:c3:ed:8b:07:f1:
d1:a3:57:9f:82:5d:82:ae:ae:94:41:af:99:6e:17:
c2:a9:51:39:ac:8e:81:f8:16:37:e6:7f:f5:f0:86:
e7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:03:9D:75:12:A6:3B:94:1F:C7:7D:A0:BD:49:6A:EC:4A:0F:8E
X509v3 Authority Key Identifier:
keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/D-8DnXUSpjuUH8d9oL1JauxKD44.roa
sbgp-ipAddrBlock: critical
IPv4:
202.74.16.0/20
Signature Algorithm: sha256WithRSAEncryption
59:b2:ce:cc:0c:f2:27:f1:b4:b3:cb:21:4c:46:64:29:de:df:
c9:76:37:61:53:56:5a:72:e0:f5:11:b2:86:e1:33:e6:84:c6:
9a:ca:5c:7c:52:f9:6f:2f:98:98:96:62:4e:4b:d1:77:9c:a3:
09:b1:a2:e5:84:d4:f9:0e:09:6b:a1:59:4c:3e:a3:a9:b0:6c:
21:7b:ab:8b:29:ca:41:84:b4:b4:d3:97:25:0b:f2:f7:3f:6f:
d5:db:42:fa:c6:95:ff:6f:73:ac:37:af:89:88:50:73:40:a8:
88:37:6e:9f:46:f1:85:73:6c:ac:5d:4b:41:d2:33:19:f0:7e:
34:46:e0:d6:07:20:87:68:eb:54:52:66:70:63:98:5b:72:07:
17:c4:b5:16:3e:3a:f1:8c:cd:6b:61:f6:dc:70:ed:b1:f7:3a:
a3:ee:4c:05:08:6e:db:c6:de:b7:77:99:24:64:83:32:aa:ff:
74:44:67:b5:e5:29:cd:b8:97:eb:5c:ae:f6:3a:03:5a:a0:93:
d8:ac:92:b9:07:b9:ce:5b:e3:0c:89:f0:c1:14:7f:a6:af:ac:
48:60:ed:a4:65:de:6b:79:19:3e:8b:a5:5d:f5:89:35:b7:9b:
30:d2:84:bf:d9:02:c0:31:b3:46:a4:39:e7:29:42:2e:8d:26:
97:29:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:00 2026 by rpki-client