
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/Kad6KOyjBjbQRKeJpH8mA-GZuCM.roa
File: Kad6KOyjBjbQRKeJpH8mA-GZuCM.roa (raw, json)
Hash identifier: wpfuCjkkgwD7RBzof33WzCxBevUqO2jjoDRlsNQMXtQ=
Subject key identifier: 29:A7:7A:28:EC:A3:06:36:D0:44:A7:89:A4:7F:26:03:E1:99:B8:23
Certificate issuer: /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial: 68
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/Kad6KOyjBjbQRKeJpH8mA-GZuCM.roa
Signing time: Tue 31 Mar 2026 08:34:11 +0000
ROA not before: Tue 31 Mar 2026 08:34:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9597
IP address blocks: 202.133.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Validity
Not Before: Mar 31 08:34:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=29A77A28ECA30636D044A789A47F2603E199B823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:48:c7:0d:e2:b6:81:db:fd:46:82:7b:ab:
44:4d:6f:62:02:3a:68:05:de:6b:f8:a7:51:f0:da:
3a:99:76:fb:ca:e3:69:7c:4d:8a:d5:64:df:c4:25:
50:59:db:1b:8b:3c:5d:61:8b:83:4f:df:6d:92:6c:
d2:0e:38:7c:7b:2c:32:56:9d:95:d8:bc:5e:0b:0d:
8e:c4:a7:be:ed:94:60:d8:73:bb:ad:73:ae:17:98:
b7:0c:ed:1d:c3:11:2c:fb:31:50:7f:71:32:74:6e:
da:9f:c9:30:4d:63:33:ff:d5:ad:b6:8a:fb:c0:f8:
7e:f4:15:bd:d4:9e:25:a2:49:02:7b:0e:09:0e:e5:
0d:3c:6c:0e:52:90:91:a5:a6:ca:ad:3e:04:65:3d:
ce:52:a5:b6:85:45:75:ac:ca:40:b7:d1:25:00:12:
5f:42:71:f4:db:1a:d5:ab:14:d6:80:d3:99:d5:3d:
38:b8:49:4f:fd:df:14:fa:d5:b8:6e:6c:43:95:7f:
c1:94:9b:6e:a6:eb:cc:67:ae:e4:a8:c5:a2:72:8d:
4b:2e:83:2d:9b:39:9e:a8:13:8c:8f:95:b4:e2:3c:
dc:6b:70:70:af:d6:42:01:fa:54:2f:eb:b7:eb:a4:
1d:63:a1:69:83:f9:77:0a:98:8a:49:e9:81:fa:b5:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A7:7A:28:EC:A3:06:36:D0:44:A7:89:A4:7F:26:03:E1:99:B8:23
X509v3 Authority Key Identifier:
keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/Kad6KOyjBjbQRKeJpH8mA-GZuCM.roa
sbgp-ipAddrBlock: critical
IPv4:
202.133.112.0/20
Signature Algorithm: sha256WithRSAEncryption
39:f9:ac:5d:85:35:fb:18:eb:af:06:ec:18:bd:09:7e:ef:34:
69:f9:2a:e4:d2:84:15:18:c0:6d:db:34:40:a5:36:94:e0:b5:
6a:fd:4c:a4:71:d2:92:2d:67:de:48:73:12:8d:88:f2:71:ff:
67:3b:ab:ba:d8:9d:96:cf:07:6f:12:ba:d8:3a:5f:0c:23:75:
aa:22:46:8f:11:fb:5e:43:af:1b:f7:d9:af:65:c8:95:57:e0:
7b:d7:7a:e2:e3:d5:a5:b5:c7:87:38:dd:b9:ae:8d:5f:2a:96:
06:78:ae:0b:be:6d:08:42:6e:49:98:ca:9e:e6:0b:1c:ab:5a:
63:5e:ef:f5:ff:98:4d:8f:08:68:33:d2:1d:8a:d0:26:f5:a7:
2a:ac:d0:97:9e:29:86:3f:f3:4a:cb:a5:f8:d2:10:cb:5a:78:
78:86:e8:78:94:c1:04:8f:9b:b7:06:45:22:6a:00:32:89:67:
e0:6d:72:36:e6:b2:40:9c:2a:af:f3:39:c6:1c:a4:85:bf:ca:
90:b9:b7:b8:e5:69:6c:fe:62:e8:a1:5c:67:4d:e9:c7:d1:fc:
eb:b9:45:54:8f:3e:2c:a8:23:7a:ec:cf:1e:4d:82:c5:47:ec:
d2:05:9a:8b:78:39:02:39:b6:d7:2c:05:aa:02:96:c5:56:c1:
21:c4:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:25 2026 by rpki-client