
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/iiojS5FpNjBJ_KF8UgQK0-XQtNw.roa
File: iiojS5FpNjBJ_KF8UgQK0-XQtNw.roa (raw, json)
Hash identifier: fAaHnGLqrjErVc5h3aoome3o6wdlOPSCe2SM7LywkzU=
Subject key identifier: 8A:2A:23:4B:91:69:36:30:49:FC:A1:7C:52:04:0A:D3:E5:D0:B4:DC
Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial: 32
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/iiojS5FpNjBJ_KF8UgQK0-XQtNw.roa
Signing time: Tue 31 Mar 2026 08:42:24 +0000
ROA not before: Tue 31 Mar 2026 08:42:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9354
IP address blocks: 221.118.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Validity
Not Before: Mar 31 08:42:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8A2A234B9169363049FCA17C52040AD3E5D0B4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:f3:09:43:38:a6:08:3a:98:ec:bc:86:c7:
db:96:f5:cf:14:cf:c1:5f:d3:c1:ce:f3:be:5d:95:
41:fd:4f:53:4e:75:d8:15:15:a5:73:94:b0:ce:d6:
97:f5:38:44:16:35:75:de:44:e1:b6:a9:da:87:37:
27:3c:d6:4b:37:68:22:4c:5a:b7:ec:1b:88:fa:99:
d2:ed:b2:2a:10:b2:24:05:80:92:34:f3:df:7d:0f:
bd:7d:46:b9:30:b0:b4:a3:59:5f:e2:cf:85:ff:27:
ee:03:cd:8b:03:64:b7:81:a1:9b:83:ee:eb:23:6a:
96:ca:9c:28:a1:19:ce:f0:85:56:1f:de:60:b7:fe:
05:0a:67:be:a3:cb:62:a4:dd:7c:a1:8d:b6:4c:e6:
74:07:67:46:0e:20:38:63:9b:69:80:42:e2:12:c9:
74:c4:4a:74:27:21:23:f4:9e:75:9a:00:82:1a:1a:
65:a2:50:73:c6:34:6e:e9:dc:21:79:a7:fc:c9:f6:
3f:be:63:4c:a4:b8:a3:7d:e0:44:63:d4:01:de:fb:
f6:d5:14:18:f1:27:6f:b3:14:9b:45:40:c6:d0:23:
eb:6b:6e:4c:a2:6b:c4:b6:d8:28:b3:a3:4a:a7:73:
78:c8:5b:0a:28:7f:3f:c4:8e:72:88:8a:d7:8e:5f:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2A:23:4B:91:69:36:30:49:FC:A1:7C:52:04:0A:D3:E5:D0:B4:DC
X509v3 Authority Key Identifier:
keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/iiojS5FpNjBJ_KF8UgQK0-XQtNw.roa
sbgp-ipAddrBlock: critical
IPv4:
221.118.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:da:53:5a:e3:29:da:d9:cd:6f:97:bc:36:40:04:31:de:06:
7c:99:66:9b:05:33:b3:0f:89:1a:d9:86:3a:2b:46:3e:2f:95:
75:0a:e9:4b:b1:43:f4:24:18:c8:ef:f9:03:75:5e:a9:54:e3:
64:b7:d1:13:c9:ff:c0:38:ad:8c:32:7e:0d:50:1f:ab:f7:51:
f6:78:44:b3:73:08:5b:ee:e1:41:d7:e9:b2:fd:53:3d:d9:82:
f3:7b:0d:dc:70:de:5c:af:2c:db:1e:53:e7:b9:13:fd:db:37:
88:c3:ed:60:06:3b:b9:6f:49:71:f9:fe:7b:46:14:6d:95:f0:
2d:4a:4c:f6:06:87:04:b5:be:2b:2b:b0:9c:7f:29:2e:1e:ff:
e7:f1:ae:df:a4:8c:20:ab:87:48:8f:ab:2c:2b:01:b5:a2:19:
49:24:00:e2:0e:8b:9c:22:ee:bb:a6:56:28:f6:a7:d9:0c:a3:
c6:6c:37:35:b3:80:18:c7:99:7b:89:5c:fb:91:ef:64:cc:4d:
f7:06:91:1b:c0:c2:db:34:3e:54:83:a0:de:5b:4e:e2:d6:bd:
5b:4c:8b:d7:b6:00:b2:19:cf:b8:bd:9f:b6:1d:3d:70:c4:a0:
b1:97:90:4a:ea:c3:24:21:35:e1:7d:88:07:6f:ef:c3:88:b0:
ba:b8:cc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:19 2026 by rpki-client