
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/NLcQUe1RNEmeCCmWQ70PyrngSyg.roa
File: NLcQUe1RNEmeCCmWQ70PyrngSyg.roa (raw, json)
Hash identifier: CtIvzNdzLyROduSPh0L5ObyrH0g16wUzJThsuSVs5Pw=
Subject key identifier: 34:B7:10:51:ED:51:34:49:9E:08:29:96:43:BD:0F:CA:B9:E0:4B:28
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: A4
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/NLcQUe1RNEmeCCmWQ70PyrngSyg.roa
Signing time: Tue 31 Mar 2026 07:46:41 +0000
ROA not before: Tue 31 Mar 2026 07:46:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9622
IP address blocks: 202.122.224.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Mar 31 07:46:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=34B71051ED5134499E08299643BD0FCAB9E04B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:de:53:2f:3e:a4:c0:f3:2a:f7:b8:77:da:
ff:dd:18:3b:d9:3f:63:c4:c3:03:b4:f3:f5:da:a0:
b4:e2:a3:7d:a3:db:7b:31:2a:b8:4c:fb:ad:24:e7:
8d:88:5d:21:8d:88:4c:c3:e1:68:1c:c1:55:2d:3f:
c0:c6:98:9e:3f:9c:4b:89:02:d4:77:41:c1:d8:22:
1c:7c:d9:4f:ba:52:e4:15:cf:3c:11:a2:35:e7:cf:
58:cc:b3:cd:b9:f6:4f:bc:7c:0b:61:52:30:33:7f:
d0:4f:72:2f:ca:88:0c:3c:cd:5f:6d:48:a6:3a:f7:
c0:84:84:a0:2a:51:f0:d8:0b:01:ee:99:cb:e6:12:
5a:91:3f:2a:db:f6:51:02:b2:f0:e8:22:92:70:f3:
58:c5:1f:24:ae:3c:d0:19:6c:a5:d2:12:62:32:ef:
c3:d8:3a:3f:c6:22:91:c9:05:4d:5f:d7:43:8c:6b:
eb:72:fc:ae:0f:60:03:90:c6:b0:25:dd:e3:1c:e7:
de:a5:a6:b6:dc:cf:e2:7d:5a:e5:26:53:2f:b1:16:
15:ec:10:79:9c:3a:36:4c:be:7f:0a:5e:cc:cf:9d:
64:ba:55:2d:82:07:05:94:b2:0d:cc:fe:69:89:fa:
e0:95:fe:c6:4a:6f:e9:a7:bd:e1:a2:6f:60:71:52:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:10:51:ED:51:34:49:9E:08:29:96:43:BD:0F:CA:B9:E0:4B:28
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/NLcQUe1RNEmeCCmWQ70PyrngSyg.roa
sbgp-ipAddrBlock: critical
IPv4:
202.122.224.0/19
Signature Algorithm: sha256WithRSAEncryption
36:3f:0d:86:7b:c7:2a:e0:16:da:22:bf:c6:a4:dd:1a:41:fb:
38:60:1f:44:aa:2a:30:70:96:b1:85:4a:d5:62:92:5b:fd:51:
e2:df:31:4a:9f:c9:ff:08:42:56:a1:c0:72:ed:0b:0e:cb:b4:
e8:be:ed:29:86:85:cd:1d:5e:d7:03:73:17:26:21:a1:35:26:
95:ab:dd:f6:44:02:58:2d:80:72:c8:01:f9:02:df:94:83:b5:
e0:1e:f2:94:fb:bd:96:84:3e:7c:9d:c0:c3:7f:36:a9:bd:07:
e0:c0:71:bc:2e:a0:99:cc:6c:5d:e1:0d:cf:ad:a0:0b:68:1c:
d7:40:39:f6:ab:f7:5b:97:19:86:d3:33:2a:f7:5a:96:fc:57:
79:7c:1a:1a:69:8d:94:fa:bc:bb:4a:68:75:31:f1:a4:76:d4:
6b:1a:bc:e9:ff:78:35:5f:1a:bf:a5:85:3b:24:bb:8a:9e:76:
12:46:8a:84:86:ef:c1:71:7f:4b:26:29:62:9e:3a:8b:1d:97:
e9:eb:66:db:37:d1:ec:84:9c:13:9f:9e:9b:94:6f:0e:62:ff:
c7:15:db:f2:75:16:f6:bd:00:3c:3a:2b:f5:c5:73:b5:05:fd:
da:ab:dc:29:8b:b0:65:52:08:64:4a:66:7d:96:ec:61:d4:af:
17:d2:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:21 2026 by rpki-client