
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/DdqABEdO2gEkgq1kh2T9lAGbG1I.roa
File: DdqABEdO2gEkgq1kh2T9lAGbG1I.roa (raw, json)
Hash identifier: zTtjLz91eyVv6OHsU3fQmEOmc6pIe1SpaIdwTwBVACM=
Subject key identifier: 0D:DA:80:04:47:4E:DA:01:24:82:AD:64:87:64:FD:94:01:9B:1B:52
Certificate issuer: /CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66
Certificate serial: 2F
Authority key identifier: 9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/DdqABEdO2gEkgq1kh2T9lAGbG1I.roa
Signing time: Tue 31 Mar 2026 08:34:05 +0000
ROA not before: Tue 31 Mar 2026 08:34:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9597
IP address blocks: 158.199.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66
Validity
Not Before: Mar 31 08:34:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0DDA8004474EDA012482AD648764FD94019B1B52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:17:1b:8a:9a:ad:8c:47:68:0a:d2:69:bf:
ed:bb:7f:7f:0d:96:f0:bb:9f:75:13:99:47:82:8c:
c2:07:27:79:54:17:92:d0:b2:35:40:46:ea:d6:f9:
c3:eb:e6:bf:bc:55:44:f0:00:74:29:40:44:61:fd:
3e:91:12:25:c2:79:f4:1f:29:44:6b:40:d3:6b:01:
19:61:6b:e8:a9:a7:fb:fc:a9:2a:5f:7f:f6:2e:20:
32:52:59:b5:23:a1:86:f3:cd:c2:67:6a:74:3b:c6:
81:8d:42:33:d7:8f:40:68:ef:73:95:bb:a8:36:c4:
89:1b:4a:be:c6:61:3d:3c:1e:11:84:1d:fd:f3:e3:
76:1b:5e:d1:c7:ca:fd:ff:33:e5:66:5c:29:da:96:
ec:00:f8:b9:bc:fc:43:ec:64:f0:d9:d2:a2:89:81:
db:8e:24:d5:c6:2a:4d:e1:71:21:1c:72:2b:27:ba:
ce:6e:d7:81:8c:f1:f6:f7:15:03:9b:b4:d4:24:08:
18:2c:12:f6:a6:2e:04:3d:e4:28:3f:8c:0f:98:da:
50:f3:e9:56:78:83:e3:26:2c:a2:1b:58:bc:15:16:
5b:ac:eb:c0:10:07:ad:e5:96:07:4e:f2:98:dc:68:
5c:5a:ef:44:83:c5:82:63:1b:fd:0c:20:d5:2b:75:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:80:04:47:4E:DA:01:24:82:AD:64:87:64:FD:94:01:9B:1B:52
X509v3 Authority Key Identifier:
keyid:9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/DdqABEdO2gEkgq1kh2T9lAGbG1I.roa
sbgp-ipAddrBlock: critical
IPv4:
158.199.128.0/17
Signature Algorithm: sha256WithRSAEncryption
96:7c:26:92:f6:12:e1:e5:62:36:1f:d2:e8:5e:97:17:d9:f5:
80:69:1a:71:a7:95:3b:27:b9:f0:d4:ef:0f:32:f1:c7:78:3e:
f1:85:62:c5:ed:8b:3d:fb:21:be:b0:f8:ae:9a:16:cc:62:11:
7b:e6:2d:25:75:cd:eb:b1:de:f1:8f:4a:29:34:c1:3c:61:8d:
f3:6f:db:6d:0e:e7:d9:07:c4:92:26:91:75:f6:40:ec:e6:ae:
2b:79:a8:6e:09:24:6a:7a:7a:85:9b:01:39:5c:78:c3:ab:2a:
5c:d6:82:e1:56:b9:3c:65:06:31:31:31:16:4c:0e:1b:78:cd:
c6:d2:d7:70:8b:3e:6e:16:b1:23:7a:09:d1:db:9a:77:ce:c3:
97:e8:ca:c4:75:7e:a7:5a:59:a5:d8:1c:3b:1d:e8:e7:af:94:
b3:22:2c:41:6b:d5:90:bb:02:b7:56:bd:70:56:6b:2c:bd:66:
30:29:40:7e:35:cc:0a:2b:5d:a8:5f:a5:0d:b0:42:a7:5a:0c:
75:f1:c3:94:85:9b:48:f2:14:e6:93:29:01:f0:0b:ed:43:c3:
3f:e7:e6:dd:f1:31:3b:27:77:a7:0d:f0:c0:43:72:42:72:e1:
13:50:66:4e:b9:f0:71:30:3d:28:43:39:5e:bf:93:a4:d2:ad:
35:b6:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:20:11 2026 by rpki-client