
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/iDIqWkxDN1PIgm9Lp5EZ6UC-16Y.roa
File: iDIqWkxDN1PIgm9Lp5EZ6UC-16Y.roa (raw, json)
Hash identifier: 4KWBFNkhni7uNzPnoLSDJB3BiiF1bP7mzLeMift2bC4=
Subject key identifier: 88:32:2A:5A:4C:43:37:53:C8:82:6F:4B:A7:91:19:E9:40:BE:D7:A6
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: C8
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/iDIqWkxDN1PIgm9Lp5EZ6UC-16Y.roa
Signing time: Tue 31 Mar 2026 08:17:50 +0000
ROA not before: Tue 31 Mar 2026 08:17:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 202.229.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=88322A5A4C433753C8826F4BA79119E940BED7A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:96:27:ce:7a:29:29:db:6f:4b:ad:1a:0a:77:
a8:e6:b8:a8:e0:e9:2a:08:39:5c:07:38:e1:65:ec:
8a:e5:75:84:73:94:2a:71:b5:dc:f8:dc:7a:b2:f8:
6e:03:e1:aa:fd:d1:41:89:31:aa:bd:cd:e5:e0:de:
7c:20:95:73:82:7b:9a:f2:9c:1c:c9:08:88:0a:a3:
bd:d7:d6:9b:f7:ac:d6:cb:d7:e4:0c:86:e6:b0:00:
d7:dd:0f:f2:6b:4a:d1:94:52:a7:43:16:72:f6:fd:
6c:71:0c:63:1e:43:33:f9:31:47:95:4a:c2:36:3c:
42:24:df:09:f1:ec:47:27:87:67:ef:6e:2f:87:bd:
b5:1d:69:bc:4b:8b:8d:93:7e:af:f6:04:9e:54:74:
0c:3b:92:0c:70:16:55:bb:99:70:c4:d3:d6:b0:06:
72:0a:e9:8c:2c:52:70:97:7d:7f:e1:da:3b:88:d7:
a4:c9:b0:3d:19:38:7e:e6:5c:cc:a8:7b:52:d5:4a:
8e:bb:18:94:a1:2f:1a:59:1d:08:b5:33:59:3f:bb:
4c:1b:fd:1b:e5:99:8a:8f:28:0c:19:5a:11:f9:4f:
48:e2:52:3e:88:56:73:04:05:db:a5:47:ac:e9:8b:
5c:14:75:29:3b:17:a6:f8:b3:e5:16:ba:94:83:36:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:2A:5A:4C:43:37:53:C8:82:6F:4B:A7:91:19:E9:40:BE:D7:A6
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/iDIqWkxDN1PIgm9Lp5EZ6UC-16Y.roa
sbgp-ipAddrBlock: critical
IPv4:
202.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4c:7f:d6:c9:da:83:ec:5c:a0:2c:de:40:f1:f9:05:5d:e4:53:
6d:26:50:9e:cb:ef:8e:4a:55:2a:dc:c4:cf:76:3d:12:ec:bb:
ce:f1:cb:04:4c:a5:60:a3:a2:0a:36:4a:8a:6a:06:82:fa:e7:
98:b4:2d:ef:ff:6f:e2:aa:24:4d:ed:0d:d1:43:12:4a:a0:64:
50:a1:fc:64:47:51:11:d2:18:e5:c8:3f:07:5b:85:c2:b8:be:
c5:60:a4:0e:69:36:00:36:57:da:84:22:23:db:00:ce:6c:e0:
a9:22:b4:43:bb:fc:e9:2f:89:8e:dd:a7:1f:90:4b:42:d3:d1:
9a:53:05:ca:9a:5e:d2:12:28:32:d7:2a:1e:2d:a9:4a:9a:b1:
3c:52:7f:29:83:7c:22:ed:79:9c:c0:c5:de:86:bd:fc:67:f9:
41:ab:7f:5e:0b:de:a3:0c:1e:f8:ce:21:c8:19:c6:bf:ce:77:
2f:65:09:57:ba:7f:48:a1:40:bf:11:88:ac:30:66:ef:ae:bb:
50:e8:24:db:db:31:98:9c:83:c8:cf:b6:4e:3e:93:ce:36:18:
f4:82:d8:78:58:d6:ac:98:80:7c:2c:78:52:b5:85:f1:cb:3d:
6c:47:70:eb:2a:a2:28:c1:2c:98:08:a2:1f:f4:25:30:96:58:
54:0f:73:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:26 2026 by rpki-client