
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ke-dLJvDOJ1_rIgQ4ZmKiQKozWA.roa
File: ke-dLJvDOJ1_rIgQ4ZmKiQKozWA.roa (raw, json)
Hash identifier: wr6S5PhfUEvVM+z6yQsV72TVkh/9L0Hy9ZYgB6RZ6bU=
Subject key identifier: 91:EF:9D:2C:9B:C3:38:9D:7F:AC:88:10:E1:99:8A:89:02:A8:CD:60
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: C3
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ke-dLJvDOJ1_rIgQ4ZmKiQKozWA.roa
Signing time: Tue 31 Mar 2026 08:17:48 +0000
ROA not before: Tue 31 Mar 2026 08:17:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 119.245.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=91EF9D2C9BC3389D7FAC8810E1998A8902A8CD60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:c3:12:3b:c9:c1:d2:3f:e5:f4:b3:e5:14:
56:14:f8:bc:13:c2:17:2d:d9:8b:06:28:9c:3e:08:
c3:e1:4e:5d:a8:f5:d1:9e:46:40:3d:24:0c:8f:f9:
d8:b1:1b:38:1f:99:b4:7f:52:2c:26:ab:5a:bf:56:
5b:df:f1:c4:29:65:c1:93:73:8a:fa:50:75:49:b9:
65:04:ee:c2:b5:27:8d:5a:b1:ea:2b:12:7b:e9:12:
c5:3b:21:cb:c8:46:5d:64:4c:ed:be:59:b7:a1:c4:
5b:d9:91:c0:5d:cf:62:47:26:7b:47:6d:df:ee:79:
6e:28:c9:ae:29:68:ea:e1:bf:94:4f:79:d5:70:83:
e5:a4:8f:f9:09:5c:34:37:a4:74:20:b8:40:93:5a:
38:74:80:97:7a:9a:40:0b:87:52:0a:73:e4:34:89:
ba:15:36:06:dd:04:c6:44:ae:c3:80:ed:13:63:65:
3b:c5:9f:32:42:7b:4a:61:37:f2:9d:19:ed:b2:08:
45:39:04:6f:9c:fd:bd:c1:4f:a3:06:e3:8d:ee:ee:
c1:9b:91:68:aa:21:a6:4f:72:f6:59:45:58:10:9a:
c3:c7:a1:60:63:aa:43:63:aa:79:3d:ec:5b:33:e3:
69:38:c4:69:16:43:23:9d:33:8c:16:0c:4b:5c:6a:
7c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:9D:2C:9B:C3:38:9D:7F:AC:88:10:E1:99:8A:89:02:A8:CD:60
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ke-dLJvDOJ1_rIgQ4ZmKiQKozWA.roa
sbgp-ipAddrBlock: critical
IPv4:
119.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:ef:bc:93:4e:c8:6d:43:62:e3:d9:cc:2f:06:05:1f:e0:3c:
c4:50:44:9b:7e:5e:11:6d:ed:90:aa:7c:0b:4c:8d:d6:97:85:
bf:26:ba:33:13:74:df:42:64:28:16:db:cc:d6:0c:0b:ea:96:
cc:39:be:6f:dd:7b:09:82:75:2d:10:fe:b6:cc:b7:3a:0a:44:
08:1a:27:25:44:5a:5f:77:1f:9a:f6:85:e0:7a:d0:82:ac:85:
fd:ab:cc:25:b7:77:7e:77:90:5f:64:60:6d:f1:52:8d:de:e5:
25:e0:9c:be:f2:b4:c8:9a:f5:34:7a:d3:72:b2:48:3b:ee:6e:
13:91:fc:25:f1:c2:80:3a:9a:fc:eb:d0:0a:8e:87:65:67:0a:
da:38:91:95:02:0a:cb:ad:63:c2:21:16:10:7c:aa:66:f3:16:
e6:3b:9a:f4:6d:7f:66:bb:92:01:77:21:6d:57:09:db:76:b1:
61:0c:2e:c9:93:f3:ce:9e:77:c6:d6:a2:a7:25:40:83:43:f3:
9e:6f:7a:d7:b7:88:fb:93:17:9d:62:32:bc:ef:e0:6f:b7:c2:
ff:15:38:10:88:a1:29:36:41:39:be:79:64:72:c0:37:4f:fb:
26:3d:fe:26:61:a4:4f:17:4d:24:3c:14:8e:01:ef:d5:87:e5:
38:34:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:14 2026 by rpki-client