
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/gQaOixUCQkMiRKqyoIwyR4BvmoA.roa
File: gQaOixUCQkMiRKqyoIwyR4BvmoA.roa (raw, json)
Hash identifier: ULCLVT49ahltzEMB2XaulVSzhLp371e0yR0g9ZG2UUw=
Subject key identifier: 81:06:8E:8B:15:02:42:43:22:44:AA:B2:A0:8C:32:47:80:6F:9A:80
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 011D
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gQaOixUCQkMiRKqyoIwyR4BvmoA.roa
Signing time: Tue 31 Mar 2026 08:17:23 +0000
ROA not before: Tue 31 Mar 2026 08:17:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 164.70.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=81068E8B150242432244AAB2A08C3247806F9A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:20:66:ef:00:a9:e3:f1:17:84:9e:2a:33:
a7:3e:a5:4e:9f:0d:ba:4e:1e:c8:02:3f:59:d7:8f:
cc:86:5d:fc:2b:86:7f:45:26:0b:1e:75:4b:11:9b:
a3:48:f9:f2:3a:10:fa:55:ec:39:d5:80:7d:4e:63:
25:4c:89:14:19:98:e4:22:5f:ca:53:9b:a3:ce:c3:
37:8c:9b:be:49:9b:95:f4:82:1b:e6:8b:35:f6:9d:
94:89:e8:37:e1:ec:bd:dd:84:84:cd:9b:3c:cc:a2:
86:ba:13:61:ae:d2:30:04:95:fd:2c:6d:3a:9b:d9:
7b:73:ac:27:d6:a4:7a:07:a1:e5:36:9b:55:ab:76:
55:a1:2d:db:07:79:f2:40:53:57:9f:12:9d:dc:bc:
24:90:97:3a:8f:ea:36:21:ee:8e:03:25:e6:54:81:
15:b7:25:06:f6:48:c9:53:0d:4e:93:8c:9d:e2:23:
b7:89:72:04:37:02:37:da:d5:0a:dc:6a:7f:c6:e4:
47:1f:c4:53:aa:87:c4:0e:53:2d:ac:f7:29:f0:b4:
d0:69:dd:95:6b:04:90:e4:f8:6c:d5:29:54:cd:e8:
54:8c:ec:91:76:5e:94:2b:cc:22:d0:4d:99:be:39:
ce:be:1c:8e:5b:48:66:b4:62:c5:75:af:26:79:6b:
4a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:06:8E:8B:15:02:42:43:22:44:AA:B2:A0:8C:32:47:80:6F:9A:80
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gQaOixUCQkMiRKqyoIwyR4BvmoA.roa
sbgp-ipAddrBlock: critical
IPv4:
164.70.64.0/18
Signature Algorithm: sha256WithRSAEncryption
80:62:69:48:1b:c2:f1:5d:43:ba:ef:13:44:c4:5b:e7:ee:d7:
aa:19:f8:f9:be:6b:09:6a:67:c8:45:89:eb:d7:ce:28:17:d1:
5e:57:42:16:23:94:f3:8e:0b:18:a8:40:f2:35:76:6f:9d:b3:
6d:cb:df:f4:2c:73:c2:0a:13:5b:9e:e3:27:ed:48:54:d2:43:
47:44:1b:7a:ba:e8:47:88:7a:a7:8b:3e:6f:de:d5:a6:fc:1d:
5c:02:c8:2b:b5:41:66:a5:48:bb:ca:c0:bf:8e:e1:f7:2c:b0:
52:cd:88:bb:a8:1e:24:33:b5:54:49:2c:cf:77:10:ea:99:56:
8c:7d:92:fe:8b:12:c3:b2:4f:ba:be:89:8a:05:a4:c1:49:86:
fa:7c:38:a8:47:7b:8a:c5:f9:cd:43:4e:ed:4d:29:b9:c0:c0:
14:41:7e:14:87:fc:f0:69:f1:dc:95:c2:90:b4:7d:88:8b:5e:
2d:bd:36:bb:47:ab:d3:05:ae:7b:05:77:26:d2:6b:6c:88:6c:
29:06:09:4b:36:21:0d:4d:0c:b1:02:54:8f:70:67:a5:d7:5c:
4c:ed:17:ae:15:3c:a3:69:e7:b7:b1:a6:a0:10:7b:0a:ba:bb:
c2:f5:5f:9c:2d:f8:7f:84:4b:7e:9c:95:fb:7b:c4:b9:d9:99:
4c:e2:21:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:20 2026 by rpki-client