
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/aWIFEiHhHQdt-OfGkzUhyLtVOZM.roa
File: aWIFEiHhHQdt-OfGkzUhyLtVOZM.roa (raw, json)
Hash identifier: NHKX6ZcOV2U4oTCmIAzZedonPrAQbtge8ci8aYEus5o=
Subject key identifier: 69:62:05:12:21:E1:1D:07:6D:F8:E7:C6:93:35:21:C8:BB:55:39:93
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: AA
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aWIFEiHhHQdt-OfGkzUhyLtVOZM.roa
Signing time: Tue 31 Mar 2026 08:17:36 +0000
ROA not before: Tue 31 Mar 2026 08:17:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 111.89.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6962051221E11D076DF8E7C6933521C8BB553993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:4e:73:a6:7d:c3:67:ec:1a:dc:ed:81:1e:
16:14:44:fb:de:27:fd:e1:8a:53:e8:fb:67:5d:c7:
ce:ec:f9:73:6e:51:a0:a1:45:de:38:f0:cb:b7:c1:
33:cd:f6:90:27:62:39:53:c2:f9:9e:ea:09:14:01:
a1:50:c5:28:6a:56:b7:35:3e:62:c2:67:35:ea:44:
61:5e:16:df:63:25:41:d9:a0:6e:37:be:2a:8a:b7:
91:a5:28:c9:75:d9:49:0d:7a:7e:51:2e:75:62:37:
4c:81:e7:90:52:25:3d:aa:36:89:fa:2c:2d:28:81:
e6:44:10:1f:8f:d0:4c:62:37:7b:e7:09:87:54:f2:
da:bd:da:d6:fd:30:c3:63:33:d8:0d:96:54:c6:55:
41:2f:52:b1:eb:45:cf:33:7d:fc:9b:20:bb:48:0c:
2d:79:56:11:65:22:08:a1:33:15:cd:f2:9c:76:c6:
a4:f6:4b:ba:d8:34:50:90:5d:1a:a4:8b:97:7a:a2:
63:c0:ef:f1:98:ab:d7:8f:bd:22:68:6f:d1:a4:c9:
f2:a0:3e:81:e0:5a:e8:b0:bd:89:86:7b:20:d9:97:
fa:58:f1:e6:f8:d6:d2:5f:86:1b:e8:8d:6f:8f:ab:
f9:3b:6a:0d:3b:5c:23:d1:7c:7c:43:72:da:93:c9:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:05:12:21:E1:1D:07:6D:F8:E7:C6:93:35:21:C8:BB:55:39:93
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aWIFEiHhHQdt-OfGkzUhyLtVOZM.roa
sbgp-ipAddrBlock: critical
IPv4:
111.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:2b:33:48:2e:59:0c:b8:ad:39:f6:c5:c3:51:05:bb:42:c8:
da:d5:ca:c8:aa:8d:79:56:60:bc:e2:fd:6b:89:b0:fc:b4:d0:
5f:0f:90:7c:99:6f:f9:19:21:3d:b9:95:36:17:9a:59:ee:76:
17:2a:51:2b:16:54:95:6f:b1:9e:7f:d6:3f:7c:c6:7a:f2:d6:
a4:07:80:f3:91:a4:76:05:00:d4:7b:c6:e7:2e:30:99:a6:90:
ed:7c:a5:3f:94:df:66:a9:7e:2b:b2:be:02:4d:3e:d7:28:f2:
86:fa:f1:c2:89:22:79:3e:d7:77:d7:6a:19:1c:f8:11:69:f1:
07:24:8f:74:40:cb:fb:04:38:ed:35:ce:2f:eb:2c:26:b3:7d:
fa:51:68:24:ea:b4:1f:27:25:74:be:d0:f7:89:1a:be:e7:02:
6a:66:b2:5d:15:24:51:9f:42:02:86:6c:fd:5a:4b:28:06:8c:
a8:cf:91:07:a8:e6:84:e0:16:96:c4:12:e7:06:67:71:ff:df:
52:b2:36:22:d6:a0:3b:cf:da:26:1a:98:18:3f:b3:dd:c6:2b:
b8:88:82:90:5d:9d:61:67:2d:ec:95:57:a6:f6:1e:7d:ae:e4:
32:62:48:87:39:c9:fd:ca:b1:85:a4:7f:04:a1:50:e6:a2:97:
65:47:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:46 2026 by rpki-client