
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3412/EqIM4lF8zRQ40gcwdt4fg_9W9WM.roa
File: EqIM4lF8zRQ40gcwdt4fg_9W9WM.roa (raw, json)
Hash identifier: 7ZtBrAMVEEGYioUVLpJEjHwz19l7akvMS3OIrpoh8F4=
Subject key identifier: 12:A2:0C:E2:51:7C:CD:14:38:D2:07:30:76:DE:1F:83:FF:56:F5:63
Certificate issuer: /CN=E9E03429A2A962EF3E0A972A25F547A7CC133B6C
Certificate serial: 02
Authority key identifier: E9:E0:34:29:A2:A9:62:EF:3E:0A:97:2A:25:F5:47:A7:CC:13:3B:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6eA0KaKpYu8-CpcqJfVHp8wTO2w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/EqIM4lF8zRQ40gcwdt4fg_9W9WM.roa
Signing time: Tue 14 Apr 2026 08:08:45 +0000
ROA not before: Tue 14 Apr 2026 08:08:45 +0000
ROA not after: Tue 06 Apr 2027 09:19:49 +0000
asID: 290
IP address blocks: 202.17.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/6eA0KaKpYu8-CpcqJfVHp8wTO2w.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/6eA0KaKpYu8-CpcqJfVHp8wTO2w.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6eA0KaKpYu8-CpcqJfVHp8wTO2w.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9E03429A2A962EF3E0A972A25F547A7CC133B6C
Validity
Not Before: Apr 14 08:08:45 2026 GMT
Not After : Apr 6 09:19:49 2027 GMT
Subject: CN=12A20CE2517CCD1438D2073076DE1F83FF56F563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:fc:82:0c:94:be:51:c7:de:79:b7:54:98:
23:e0:80:75:79:a4:07:f5:0a:17:cb:98:d4:2d:78:
04:57:60:4b:96:df:17:7b:a7:42:0f:18:93:cf:ce:
b9:3d:9e:d9:48:a1:33:59:b6:81:ce:bb:38:69:c4:
99:8b:5e:1f:6b:b7:c8:7a:68:09:24:0e:c0:cd:55:
fd:70:73:87:82:ee:5c:6a:67:21:b0:06:0a:5c:bc:
11:64:d6:31:f7:64:d1:a0:34:dc:86:dc:6f:bf:08:
5b:76:8c:3a:72:7a:6e:25:84:41:45:e3:80:07:45:
bc:22:85:f3:9b:20:83:37:a8:82:6d:2e:18:b7:87:
33:fd:34:70:72:e4:a5:00:34:11:cb:24:82:10:a7:
35:4e:25:3d:55:c3:10:e6:fc:b3:9e:7f:1b:0c:7f:
09:d7:65:47:4b:4a:f9:26:b0:a4:ae:e2:ec:64:a2:
b0:5e:9b:58:c4:a4:71:90:e5:a4:a0:83:15:48:78:
9b:4a:26:f6:7c:4f:28:89:3f:1d:aa:65:50:17:ea:
f2:e0:87:30:62:54:bc:e8:38:6a:38:33:d9:45:0e:
fe:9a:a6:13:1c:c6:2b:d0:5d:39:40:7a:48:17:ec:
6c:b6:15:78:a7:41:df:9c:d7:58:49:86:18:29:8d:
c4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A2:0C:E2:51:7C:CD:14:38:D2:07:30:76:DE:1F:83:FF:56:F5:63
X509v3 Authority Key Identifier:
keyid:E9:E0:34:29:A2:A9:62:EF:3E:0A:97:2A:25:F5:47:A7:CC:13:3B:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/6eA0KaKpYu8-CpcqJfVHp8wTO2w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6eA0KaKpYu8-CpcqJfVHp8wTO2w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3412/EqIM4lF8zRQ40gcwdt4fg_9W9WM.roa
sbgp-ipAddrBlock: critical
IPv4:
202.17.220.0/23
Signature Algorithm: sha256WithRSAEncryption
99:3a:de:10:da:e6:f7:f9:a5:44:33:38:25:a1:78:a7:65:8e:
68:3b:6d:d4:cd:cb:32:93:ac:fb:69:4b:72:df:9f:50:a0:57:
60:8c:f3:50:6a:b0:58:0f:a0:a0:d3:69:94:76:4d:e4:6f:76:
ac:50:7d:41:93:12:d7:4e:78:7d:83:e8:9e:fb:57:01:e4:2d:
e7:fe:22:e4:dc:58:dc:02:06:a9:92:f3:76:ea:03:ea:56:93:
8f:bc:be:ca:11:67:0e:a9:aa:12:42:25:c2:87:0a:57:23:5c:
74:3b:b6:15:20:e6:4f:c6:97:88:45:e4:31:ab:a2:2b:ec:dc:
53:c6:eb:9d:13:99:00:83:d9:10:e8:33:64:a0:bc:96:9c:69:
87:ad:fe:70:56:a4:4e:b4:1a:51:50:46:e6:b3:84:f6:46:ee:
31:85:ea:c9:f1:3b:0e:e0:c2:84:bf:43:5c:ba:1e:9e:0f:1c:
a5:d1:f1:e1:75:72:9c:86:1e:a0:9b:5a:80:be:b2:ef:20:6f:
f4:9a:b3:aa:97:1a:6e:bf:db:46:7a:88:81:81:87:7d:da:c8:
c2:8c:c9:bf:f2:f3:1a:e7:6e:6f:37:46:68:88:dc:42:7f:64:
a4:57:72:f0:a8:8f:3d:dc:5c:f1:73:38:b7:84:50:4a:0f:91:
d1:8c:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:12:50 2026 by rpki-client