
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/5K-yrL8oFGFb95U8tdIGR_yPxHs.roa
File: 5K-yrL8oFGFb95U8tdIGR_yPxHs.roa (raw, json)
Hash identifier: Wo4CQ2xRO8jQTK6WOUJtgeGXjw1SXvFMLItYYtL4Kyw=
Subject key identifier: E4:AF:B2:AC:BF:28:14:61:5B:F7:95:3C:B5:D2:06:47:FC:8F:C4:7B
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: B1
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5K-yrL8oFGFb95U8tdIGR_yPxHs.roa
Signing time: Tue 31 Mar 2026 08:17:38 +0000
ROA not before: Tue 31 Mar 2026 08:17:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 163.44.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E4AFB2ACBF2814615BF7953CB5D20647FC8FC47B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:27:d7:6c:69:68:4e:71:36:81:66:6e:c2:
ac:d6:54:95:bd:a9:e6:03:5b:7a:34:29:a8:d8:30:
5a:b6:e6:06:e6:e7:e4:ab:8d:89:e8:9e:a8:6e:b6:
e4:7f:11:72:ee:d7:40:6e:bf:42:fe:56:19:7a:ba:
91:85:86:67:b4:ed:25:64:18:d3:57:59:02:28:29:
47:1a:47:11:76:a1:bc:27:d2:db:dc:01:2e:ba:1f:
97:6c:f9:1b:ec:b1:01:fb:48:90:12:33:57:ae:df:
b9:f1:c3:20:c3:60:1a:07:c0:a0:5a:85:4b:44:2b:
18:32:43:0f:95:6e:69:ea:ef:46:c3:66:1e:3d:3e:
88:52:80:bb:cf:d0:69:dd:b1:1d:65:37:82:f6:59:
ef:fd:33:80:be:11:54:03:1d:05:de:0f:29:3e:48:
cf:1a:39:f2:bf:14:8c:1f:bb:31:93:da:ef:20:12:
c4:7b:4e:84:e6:06:bb:ef:a3:dc:7e:c8:f9:65:d8:
47:c9:0a:eb:65:3b:90:5e:37:01:94:44:32:af:c9:
8b:11:e7:36:db:69:41:df:dc:15:77:32:35:80:9d:
0a:44:1d:25:0b:d4:80:67:c4:29:cd:e2:61:72:82:
fa:51:47:91:57:2a:e8:ee:46:d5:32:c0:e6:d9:2a:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AF:B2:AC:BF:28:14:61:5B:F7:95:3C:B5:D2:06:47:FC:8F:C4:7B
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5K-yrL8oFGFb95U8tdIGR_yPxHs.roa
sbgp-ipAddrBlock: critical
IPv4:
163.44.0.0/18
Signature Algorithm: sha256WithRSAEncryption
98:65:54:d9:42:0d:60:0a:8f:e0:84:3d:7c:d7:b6:de:32:a3:
43:52:aa:4a:48:3a:28:26:a6:c2:d1:88:0e:0b:be:6d:15:ef:
f8:84:1a:71:36:ef:99:2e:65:1a:4b:02:93:f2:9f:7a:58:d8:
5b:10:0b:57:a4:2b:e5:12:6d:e0:f2:fa:5e:b8:90:25:e1:fa:
fb:37:d8:0b:6a:0a:47:62:cf:fd:7b:a0:37:6f:00:ea:6b:21:
76:4b:b6:74:8a:6c:3d:64:6c:7f:40:ce:7d:c0:bd:e9:1e:c5:
0a:23:b9:b1:f6:9a:57:4d:dc:80:0d:e2:3f:f8:38:61:08:91:
e4:22:b6:05:f1:fb:36:9e:b8:80:0e:28:64:35:b7:79:2e:9c:
7d:6a:eb:61:fd:1f:4a:eb:a8:dc:4e:51:65:fe:3a:c8:ac:32:
70:bb:6e:4a:73:76:75:e8:75:65:64:d2:93:de:6c:2c:c9:10:
00:d3:a2:85:6d:a6:bb:ef:4f:21:dd:3e:50:12:ec:94:49:13:
43:36:33:3b:c9:44:b3:05:c0:7a:19:0e:2d:99:c9:fc:3c:15:
cb:e4:8f:33:eb:f3:5a:72:4b:42:d9:1b:f2:87:39:3c:d6:f5:
3d:0f:0e:e6:1a:09:11:f7:ee:b8:3c:fb:ad:68:20:84:ce:2f:
68:ed:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:24 2026 by rpki-client