
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/C1PQk5TxLuR62jqiR5JI-aSahE0.roa
File: C1PQk5TxLuR62jqiR5JI-aSahE0.roa (raw, json)
Hash identifier: 74M3UBbytlFvcdWTujJiLTC1sWf0ufxXR89Ywfb2LSk=
Subject key identifier: 0B:53:D0:93:94:F1:2E:E4:7A:DA:3A:A2:47:92:48:F9:A4:9A:84:4D
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: A7
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/C1PQk5TxLuR62jqiR5JI-aSahE0.roa
Signing time: Tue 31 Mar 2026 08:17:34 +0000
ROA not before: Tue 31 Mar 2026 08:17:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 61.197.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0B53D09394F12EE47ADA3AA2479248F9A49A844D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:64:3f:fe:e4:0f:49:bf:5d:1e:54:fa:32:bc:
98:3c:4e:d7:e1:da:37:e8:6f:40:a4:f7:1c:6e:7a:
68:c9:94:cf:46:06:28:f7:1f:59:23:bf:4c:7c:57:
50:ae:6c:e3:ee:57:4d:97:7a:ff:72:eb:ff:e5:7d:
9b:d8:67:a6:ac:d1:2c:ed:51:72:32:4a:19:c5:0f:
10:40:94:8c:7d:f7:e0:72:de:16:15:23:4e:ab:2d:
9b:2a:e5:3e:e8:8f:32:b4:6a:96:3b:c0:2e:f5:82:
aa:bb:b8:63:b6:2e:08:08:0b:36:32:60:0a:a8:0a:
67:bb:ef:be:6c:ef:42:ab:95:a7:62:d2:31:e8:2a:
56:9f:93:11:1c:f9:57:00:8d:f7:59:f4:c8:b4:bf:
9f:c8:b3:8a:38:9c:26:15:48:29:0b:5a:dc:e1:9f:
52:a9:29:24:f8:af:83:e9:79:7e:d0:e7:58:39:ec:
da:91:37:c0:01:3d:5e:7b:f6:83:63:49:12:c1:0d:
71:71:96:6b:5c:15:e8:60:ca:5a:97:bd:5a:0b:2d:
ae:11:f4:a8:77:62:d9:3c:61:23:ff:74:b1:c3:90:
b3:31:5e:b0:29:f9:3e:e6:2e:b7:b8:ef:b5:64:6b:
44:d1:f3:ac:c8:66:92:3c:97:97:ea:7b:1a:17:47:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:53:D0:93:94:F1:2E:E4:7A:DA:3A:A2:47:92:48:F9:A4:9A:84:4D
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/C1PQk5TxLuR62jqiR5JI-aSahE0.roa
sbgp-ipAddrBlock: critical
IPv4:
61.197.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:07:1b:30:17:60:b7:86:58:03:7c:bb:84:0b:83:86:36:d0:
86:cf:22:40:79:5f:20:c0:4c:44:02:7d:7f:3e:eb:12:7b:dd:
8d:8c:7f:48:04:e4:9a:31:ee:09:56:22:85:f0:10:ff:ad:df:
d2:d2:24:b4:55:c5:9d:a6:a2:4a:77:f7:a1:2d:a5:89:84:70:
41:42:bb:f9:91:5d:35:77:78:e9:6f:f1:2f:c6:d6:3e:6a:f3:
66:87:b6:ec:98:16:ea:a5:13:d1:c0:4e:38:42:b4:fa:01:5b:
37:a6:ec:9d:66:e3:cf:d4:e9:ec:4e:e3:2d:e1:1f:0d:d8:0c:
a5:67:83:7a:4e:f7:9b:6d:1c:e8:a9:94:87:17:ac:e0:bc:52:
06:58:78:28:d6:cf:2c:ee:ad:40:0e:08:a6:a6:1b:fc:7d:0f:
f3:14:85:cd:a9:57:de:db:08:6c:49:6e:a0:bb:80:91:b0:ed:
18:fd:37:21:9d:49:67:c4:65:b5:c1:40:37:ca:82:35:f7:b8:
a3:8d:31:5e:f3:9c:21:10:90:e5:c3:ba:58:5e:d3:ee:40:14:
08:1f:19:d2:6b:3b:6c:5a:9b:29:74:35:9b:61:d3:b6:52:62:
d1:fb:61:c3:ff:38:dc:cb:02:45:e8:4b:f5:df:16:86:58:71:
8d:a5:38:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:14 2026 by rpki-client