
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/b0jIICYdwyLpms7EIBiJyQML6oM.roa
File: b0jIICYdwyLpms7EIBiJyQML6oM.roa (raw, json)
Hash identifier: P81M+a+PwDXgw2PJwb2AJdec0XlXPGyCG7MAeHxRelQ=
Subject key identifier: 6F:48:C8:20:26:1D:C3:22:E9:9A:CE:C4:20:18:89:C9:03:0B:EA:83
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 011F
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/b0jIICYdwyLpms7EIBiJyQML6oM.roa
Signing time: Tue 31 Mar 2026 08:17:24 +0000
ROA not before: Tue 31 Mar 2026 08:17:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 128.28.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287 (0x11f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6F48C820261DC322E99ACEC4201889C9030BEA83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bc:66:4b:77:64:47:24:cb:ac:b6:9c:ac:a8:
71:cd:f0:3b:56:40:42:cc:c1:b6:61:c2:6b:a8:d8:
5e:59:6c:25:02:11:86:cc:98:05:02:b7:9d:40:73:
6c:9a:de:da:65:b2:a6:62:7c:1c:64:54:60:d8:da:
72:e5:1d:84:3e:8e:82:dd:7a:30:61:d9:df:5a:3e:
fb:aa:c0:08:2a:7b:04:fc:58:0d:9f:21:b3:6a:4c:
48:ea:1a:32:ed:3f:01:f2:91:8d:64:5a:e8:d4:60:
fe:49:66:68:42:4e:9a:40:77:6e:26:32:a9:fa:1f:
af:2e:10:97:42:f4:69:1f:21:51:b1:d4:0c:5a:4f:
a3:58:b8:af:76:48:37:e8:ba:5b:f4:da:2c:54:bf:
38:37:28:28:71:f8:d1:0b:d1:ca:78:d7:43:6b:18:
90:27:b9:86:5d:ab:d7:58:39:1e:46:c7:71:21:11:
b6:3a:6e:c2:84:45:6d:97:70:10:59:a6:37:8c:2d:
cd:d3:a6:db:78:44:0b:8f:09:12:9c:a7:51:54:c6:
60:cf:1c:20:cd:e8:b7:c1:88:11:f5:ec:28:bb:40:
61:10:aa:fb:aa:6a:a8:55:25:ff:07:73:dc:68:3e:
08:4e:e3:ff:c9:eb:25:0d:18:2c:98:70:94:15:48:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:48:C8:20:26:1D:C3:22:E9:9A:CE:C4:20:18:89:C9:03:0B:EA:83
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/b0jIICYdwyLpms7EIBiJyQML6oM.roa
sbgp-ipAddrBlock: critical
IPv4:
128.28.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:74:e7:09:fa:ff:28:23:76:81:79:18:49:da:67:ac:93:e3:
9c:a0:47:48:99:0e:c4:f4:a9:bf:cd:0a:b3:1c:22:34:07:09:
1e:5e:1a:05:8c:24:f7:62:8b:c1:76:ab:71:94:52:72:61:e0:
7f:fd:f7:20:b3:bc:b4:56:f4:55:4e:de:fb:af:09:c3:5b:45:
49:9b:7b:4e:3c:5e:fd:a3:cd:b8:a8:43:93:03:32:4b:c8:92:
b0:04:53:49:ac:30:a6:d5:48:27:97:cd:1d:1b:c7:4b:69:5f:
9c:2e:d4:fa:a4:6c:8e:e1:8a:bd:d6:45:61:ba:6e:88:6c:33:
4f:15:ca:cc:7c:46:d8:f4:62:ad:1b:20:22:6a:5e:bf:9b:ea:
84:0e:63:8a:10:aa:42:e1:90:da:88:02:0a:1f:51:61:3f:31:
2e:41:be:00:dd:56:7e:ee:22:c9:23:2a:1e:9b:20:ec:2d:ca:
f2:f3:6d:3c:81:ad:ca:98:b8:8c:ad:d4:0c:fb:02:e3:39:7a:
1d:0c:98:d8:68:30:ec:1b:99:06:e1:e2:6e:a2:1a:6f:2b:9e:
29:e0:71:5e:03:d0:df:48:2c:90:a5:71:f3:75:9a:a2:3d:4e:
72:32:52:79:24:82:f0:45:08:3e:a3:8b:5a:85:69:32:3b:54:
1e:36:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:23 2026 by rpki-client