
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/qKWKQxNKfOebmEY6EzuRHP0Ifro.roa
File: qKWKQxNKfOebmEY6EzuRHP0Ifro.roa (raw, json)
Hash identifier: vgP+vWdHBGYvLauxnxlwwkSwatGT93pkAy5RxvATVXo=
Subject key identifier: A8:A5:8A:43:13:4A:7C:E7:9B:98:46:3A:13:3B:91:1C:FD:08:7E:BA
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 011B
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qKWKQxNKfOebmEY6EzuRHP0Ifro.roa
Signing time: Tue 31 Mar 2026 08:17:22 +0000
ROA not before: Tue 31 Mar 2026 08:17:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A8A58A43134A7CE79B98463A133B911CFD087EBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:39:84:aa:9c:f1:90:52:3b:92:74:5e:fb:
ce:bf:36:6b:6b:c5:41:57:87:cb:42:84:c9:83:f9:
f8:b9:c9:30:e6:d6:dc:f9:29:5e:41:2d:70:ef:75:
c7:f8:a9:c7:ea:fc:13:00:a1:93:f3:00:d1:d3:fd:
dd:c9:10:99:42:3f:41:00:9e:36:05:b7:13:77:14:
e3:d0:09:df:35:d2:80:70:b5:6d:98:1d:64:0c:34:
11:90:ee:33:d4:74:95:97:1d:cf:79:e9:88:14:c0:
69:73:d3:98:85:c2:17:17:da:6b:e8:c8:83:4b:5f:
bc:b4:17:78:c1:0a:9d:a7:52:82:53:3b:b0:24:05:
f4:eb:34:90:5b:5f:c1:65:62:80:9a:bf:64:87:a7:
67:b3:bf:d2:a2:c7:e0:05:69:53:b8:04:ee:3a:e0:
3f:7d:f2:b9:ec:12:34:52:c4:f2:54:3c:94:d8:d9:
ad:b3:4d:f3:59:df:c9:6a:a4:00:34:8c:1e:7f:c3:
66:ac:12:13:4f:fb:24:2e:e2:8e:ca:4b:5a:85:28:
f3:c7:52:50:e3:00:c6:de:de:18:ba:5e:d8:f0:9d:
32:a0:2d:1d:cb:8a:1d:88:1d:b9:06:2a:97:77:ce:
2f:e7:c8:2c:29:90:ae:3a:4d:6a:89:79:d5:95:7c:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:8A:43:13:4A:7C:E7:9B:98:46:3A:13:3B:91:1C:FD:08:7E:BA
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/qKWKQxNKfOebmEY6EzuRHP0Ifro.roa
sbgp-ipAddrBlock: critical
IPv4:
160.248.255.0/24
Signature Algorithm: sha256WithRSAEncryption
58:83:aa:d7:eb:cf:3d:4d:e0:27:c9:f7:86:73:74:88:2c:56:
38:c7:4e:6d:f1:44:4f:e0:de:98:ce:1f:5e:48:05:97:0d:f4:
11:73:11:11:91:40:67:cd:ee:0e:85:ac:be:cc:7f:ab:2b:db:
4a:49:23:4e:95:c3:7a:09:b1:50:c2:3d:3b:dd:8f:a5:3f:5b:
c1:f1:13:05:06:ec:53:4e:ac:94:57:a6:8e:71:32:4e:b3:57:
d5:4c:86:8d:ec:86:96:96:46:17:8b:89:d9:5f:95:50:b0:ce:
71:45:61:1a:a4:62:eb:af:9d:1b:9c:71:c8:44:05:91:0b:ee:
ce:35:e9:c7:a4:68:55:7a:80:66:6a:9d:02:66:ec:f0:e5:d6:
0b:8f:e6:c7:22:cf:22:d2:a6:c2:73:0d:64:3d:bf:3d:25:8b:
1d:d5:43:a9:27:bb:0f:94:a4:f3:68:fa:b6:e9:48:d2:4b:20:
11:b3:62:0b:81:66:de:4e:0d:cb:5e:f9:88:54:a5:8e:2e:ed:
1e:0f:99:6c:4f:aa:42:c0:06:8f:e8:e6:4e:1d:fa:00:02:cb:
52:a0:6e:9c:e1:91:83:48:33:3a:36:0d:35:77:18:8c:cd:bf:
0b:46:75:22:06:6a:a1:cb:34:52:d1:26:0b:36:69:79:88:f6:
75:ea:cd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:22 2026 by rpki-client