
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/Ldzb0qWnevoeBx8hrWibapE4gKM.roa
File: Ldzb0qWnevoeBx8hrWibapE4gKM.roa (raw, json)
Hash identifier: iSbRS0gRPw+hT8GN+bTEIZmoCCKwSCYd1mbP3gyq5yU=
Subject key identifier: 2D:DC:DB:D2:A5:A7:7A:FA:1E:07:1F:21:AD:68:9B:6A:91:38:80:A3
Certificate issuer: /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial: 0133
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/Ldzb0qWnevoeBx8hrWibapE4gKM.roa
Signing time: Tue 31 Mar 2026 07:36:45 +0000
ROA not before: Tue 31 Mar 2026 07:36:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9370
IP address blocks: 202.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Validity
Not Before: Mar 31 07:36:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2DDCDBD2A5A77AFA1E071F21AD689B6A913880A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:0a:6c:fd:10:90:df:cf:5f:87:05:49:c7:
5f:b9:a9:79:33:0e:92:f4:96:d5:4e:41:02:db:99:
45:84:e2:f2:a6:44:81:7e:bd:db:27:49:7c:eb:23:
f1:62:4f:05:64:bb:20:86:30:91:8c:84:32:b0:72:
36:5b:4d:09:b4:a0:ef:10:a1:5d:d3:aa:cf:7f:b1:
fc:6e:75:f0:4e:32:92:26:df:94:96:4b:f5:87:bd:
cf:49:64:99:70:00:7e:6d:1f:31:43:26:81:f3:f7:
fe:0f:03:ba:a7:10:00:cf:a2:10:3d:81:66:c4:20:
10:52:1b:73:2a:b3:67:b6:e1:d8:6e:bb:65:f1:df:
29:01:d8:ad:be:16:57:0c:4e:2c:28:5a:8c:5b:20:
21:31:b7:9e:cc:2e:df:d1:27:67:e0:f7:84:22:80:
f9:32:87:04:66:9d:c3:5a:04:a2:2e:5e:6d:2d:9b:
49:33:3b:a2:1c:d0:cf:d9:73:7a:cf:e3:db:cc:c4:
d1:64:69:b2:ed:8d:fb:d3:50:55:4d:e1:1e:f9:82:
cf:0f:45:41:f5:10:b2:cf:a7:4f:05:49:cf:4f:c4:
39:a9:1f:fa:74:07:b6:30:69:1e:36:0e:f2:b7:e7:
51:81:d5:44:9b:2c:03:47:f7:23:2a:fa:7b:bd:ec:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DC:DB:D2:A5:A7:7A:FA:1E:07:1F:21:AD:68:9B:6A:91:38:80:A3
X509v3 Authority Key Identifier:
keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/Ldzb0qWnevoeBx8hrWibapE4gKM.roa
sbgp-ipAddrBlock: critical
IPv4:
202.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
88:26:9b:70:33:61:f8:94:89:f1:b9:6a:b1:c5:e1:f2:c2:43:
2e:37:f2:29:e6:1a:01:86:12:4a:e0:9d:7b:d9:9f:ef:84:c5:
24:12:16:9c:be:04:b4:f9:66:4b:15:77:25:6f:f9:1f:86:25:
d4:79:b9:c1:ab:3d:d5:f8:bb:10:72:61:08:54:bb:d8:d9:1d:
59:7b:c6:02:e4:22:73:44:bc:30:63:b3:49:be:75:03:f5:71:
79:e2:56:eb:96:ab:18:5f:ab:66:b3:98:3c:00:13:b6:8c:7b:
ca:a5:c3:f1:38:40:e5:b1:67:ce:76:41:00:67:58:b5:4a:fb:
3d:af:c1:d2:6b:7c:5c:c6:e6:1e:dd:54:de:8b:d6:2a:dd:25:
5b:04:d7:d2:47:0d:17:71:23:15:f7:5d:cd:78:5d:f8:6f:43:
7e:1d:63:8f:07:23:7d:b9:ab:30:31:df:a3:6a:72:6c:cf:f4:
75:34:0c:55:14:0c:24:54:43:c5:ff:da:f0:4c:39:24:05:90:
43:cb:b4:a2:70:ae:98:26:c8:f2:bc:f4:d1:02:0a:55:17:83:
de:a3:55:7b:e3:a8:d9:76:5f:89:fb:22:1d:12:24:97:b8:1a:
d3:44:a2:f8:57:9e:cb:62:89:ed:a8:b4:e8:bf:7b:7c:f6:b7:
31:f8:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:34 2026 by rpki-client