
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/R4YYW4FjUbIKUGFqyS3HydzdP7M.roa
File: R4YYW4FjUbIKUGFqyS3HydzdP7M.roa (raw, json)
Hash identifier: vZY9HwbDJH48YH46DHH2ttNIE9rPZ+XwF43wtT5mels=
Subject key identifier: 47:86:18:5B:81:63:51:B2:0A:50:61:6A:C9:2D:C7:C9:DC:DD:3F:B3
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: C6
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/R4YYW4FjUbIKUGFqyS3HydzdP7M.roa
Signing time: Tue 31 Mar 2026 08:17:49 +0000
ROA not before: Tue 31 Mar 2026 08:17:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 133.130.128.0/17 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4786185B816351B20A50616AC92DC7C9DCDD3FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:26:bc:d1:86:3f:37:d4:40:6f:2b:31:b5:
af:14:fd:1b:20:2a:15:41:5f:b8:74:77:bb:e4:45:
c5:21:9f:fe:1c:ad:88:2a:e0:ee:b0:3e:31:72:e7:
d0:80:a8:53:27:82:50:77:57:50:bb:70:07:e9:ab:
2c:a7:97:27:71:e1:c5:ff:ad:94:f1:6a:76:35:c2:
f7:18:ed:41:57:02:99:c6:81:aa:ee:e2:37:d0:68:
91:05:ad:4b:1b:8b:70:7b:0a:46:f4:86:7d:e5:9f:
c1:e3:22:b1:9a:1f:98:cf:b2:1d:15:5e:97:96:85:
02:15:25:d9:23:51:16:2d:a3:f9:88:41:4b:44:1e:
91:88:a1:6f:18:69:b4:6a:94:c1:9b:6c:4c:28:15:
14:16:44:fd:a1:b0:55:d8:86:79:4a:98:c9:98:e8:
47:49:da:3b:1e:bf:bc:a8:4d:83:f9:1e:3a:48:66:
d2:2e:8f:ea:39:b2:c6:9c:35:a0:a9:c3:ce:06:51:
3c:65:15:19:3f:af:3e:d0:87:88:ea:26:a9:7c:4f:
5d:79:df:d7:76:b9:62:2d:34:25:49:2f:74:ec:de:
9d:cb:64:38:c0:32:db:92:77:07:87:97:06:67:4f:
6a:f5:a1:78:c2:ff:c1:8c:55:c5:f8:4d:65:d6:b7:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:18:5B:81:63:51:B2:0A:50:61:6A:C9:2D:C7:C9:DC:DD:3F:B3
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/R4YYW4FjUbIKUGFqyS3HydzdP7M.roa
sbgp-ipAddrBlock: critical
IPv4:
133.130.128.0/17
Signature Algorithm: sha256WithRSAEncryption
01:42:14:b2:c1:f5:a3:ac:75:97:34:8b:2e:51:36:32:c9:4a:
bf:2d:ad:a7:40:63:fc:19:8c:82:81:5c:33:d2:b3:fe:da:03:
9e:7f:54:9c:e4:97:b3:b5:b3:9f:36:9e:a5:9a:ef:92:f2:59:
b4:99:05:9a:8f:fc:02:a6:fc:33:df:ad:d9:02:a6:72:cc:54:
c4:4b:26:44:19:24:20:7a:a2:8e:42:41:fa:cb:95:8f:54:61:
39:fd:70:79:8a:80:c9:48:44:5a:62:d7:93:be:c5:31:29:05:
7d:e6:01:15:80:ff:c6:1f:7d:dd:e4:9d:b9:c4:86:60:a7:43:
22:6b:33:ce:f9:cb:90:57:65:47:1b:ce:98:99:d1:5a:79:b7:
40:c0:f4:f3:7c:53:59:c3:f0:b9:a5:d8:0e:e2:8b:92:de:4b:
4c:35:c6:3b:b7:f7:49:29:ed:c4:30:c6:bb:6e:c6:48:fa:84:
9a:47:e6:7e:07:40:81:b2:db:42:e3:dc:ef:7f:c1:66:60:23:
de:95:25:d5:bd:98:03:4c:81:f6:6f:df:e9:ea:0c:40:d9:d8:
f3:85:93:4a:6b:6e:18:04:72:07:b6:b4:cd:d2:49:a6:f8:59:
52:d7:3e:01:90:07:ca:bb:64:a0:fa:8a:bc:1b:98:e2:5d:15:
07:15:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:32 2026 by rpki-client