
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/A4ST_Vw4gUVamauLKIK8gFj7sQE.roa
File: A4ST_Vw4gUVamauLKIK8gFj7sQE.roa (raw, json)
Hash identifier: fwZTd+UMxpG1NSoC+GZfMKLSYm8M3RJlN0TFSWfrnkM=
Subject key identifier: 03:84:93:FD:5C:38:81:45:5A:99:AB:8B:28:82:BC:80:58:FB:B1:01
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 0100
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/A4ST_Vw4gUVamauLKIK8gFj7sQE.roa
Signing time: Tue 31 Mar 2026 08:17:11 +0000
ROA not before: Tue 31 Mar 2026 08:17:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256 (0x100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=038493FD5C3881455A99AB8B2882BC8058FBB101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:12:d2:57:5d:94:7f:a1:b0:0d:cd:20:7d:8a:
1b:34:67:61:4b:8b:be:88:f4:db:90:61:22:32:c7:
b0:6a:83:f1:80:de:b9:52:67:81:69:65:7d:80:ce:
f7:70:3c:a7:02:86:cd:56:19:1b:b3:05:71:e0:a8:
97:f8:72:57:21:06:5e:c8:c8:17:73:a6:03:26:ef:
1a:12:ae:4f:2a:74:53:e6:5c:42:f1:58:0c:b0:07:
0b:8b:43:55:c2:ac:4e:5b:43:94:3a:6a:76:ac:b9:
a2:43:aa:84:33:0d:a6:40:05:59:84:10:88:be:9d:
c0:d5:a8:be:64:63:89:34:6a:6c:1a:23:34:ae:1f:
53:b2:43:10:51:bf:22:b5:20:de:f6:83:be:81:45:
b1:58:1a:e3:f0:87:80:ee:df:1b:8a:f7:5d:20:2e:
ed:f5:53:d6:f5:87:61:f7:60:c1:2f:d3:79:ef:d3:
67:76:60:24:76:9e:55:84:82:01:b4:fe:67:1e:0f:
28:68:ab:c3:b1:51:1a:e3:a5:c5:2f:6e:bd:31:5e:
c1:1f:64:52:12:93:fd:7b:fd:88:c0:1f:6c:f3:f3:
9f:12:96:c1:90:6c:0f:52:88:4e:c5:6f:6f:7f:99:
3b:5d:b6:6f:84:29:da:98:ce:92:db:79:73:fa:71:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:84:93:FD:5C:38:81:45:5A:99:AB:8B:28:82:BC:80:58:FB:B1:01
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/A4ST_Vw4gUVamauLKIK8gFj7sQE.roa
sbgp-ipAddrBlock: critical
IPv4:
160.248.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:29:86:5d:cd:ee:de:3f:62:b3:07:dc:e2:cf:28:a6:08:4c:
fa:cd:41:55:9b:16:f3:55:53:f8:d6:71:f6:09:30:83:61:5c:
90:f1:35:c8:69:78:ed:d8:a1:22:48:b1:de:95:88:09:bb:b8:
92:3d:da:93:5e:38:0f:8c:4c:1a:9d:a9:13:9d:75:b6:ba:2f:
46:b6:24:64:44:d0:eb:98:d1:eb:69:32:75:ef:57:86:9c:e0:
1c:c4:3b:b3:ed:68:d5:90:6b:97:ef:b6:8f:d7:4f:3a:a9:15:
61:0e:e0:2c:d5:bf:0f:d0:a0:7c:57:d8:4d:c5:77:f9:ff:a1:
a3:a7:c5:4a:12:70:1e:8b:8c:db:68:3d:ec:c2:08:12:97:20:
a3:fd:50:fb:17:1b:d4:b5:ce:0b:9b:85:48:83:aa:cc:c8:7f:
60:ed:01:2b:5f:67:83:80:a6:86:2c:2b:10:3e:01:3b:85:a6:
7e:d2:a8:20:ac:9f:9e:1e:d1:b1:6c:cd:ac:5e:95:c9:b6:a8:
53:e0:f6:a0:57:75:09:3c:e7:fd:22:28:e6:ba:d2:88:7a:b8:
14:0a:f2:2f:b9:29:66:30:db:2b:45:14:f2:46:e3:3c:5e:43:
e2:89:75:df:0d:2f:9f:d6:c3:a6:15:49:74:87:3d:cd:93:88:
bd:9e:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:20 2026 by rpki-client