
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/i_PK-TbOfvELN9j5gd0oEPIJ_30.roa
File: i_PK-TbOfvELN9j5gd0oEPIJ_30.roa (raw, json)
Hash identifier: KHygh++KxugHaJnxvVW9FBgD97FGfZfRcXUlCRFQhH4=
Subject key identifier: 8B:F3:CA:F9:36:CE:7E:F1:0B:37:D8:F9:81:DD:28:10:F2:09:FF:7D
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: B2
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/i_PK-TbOfvELN9j5gd0oEPIJ_30.roa
Signing time: Fri 17 Apr 2026 02:18:41 +0000
ROA not before: Fri 17 Apr 2026 02:18:41 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 9622
IP address blocks: 203.140.240.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Apr 17 02:18:41 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=8BF3CAF936CE7EF10B37D8F981DD2810F209FF7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:f3:d3:a4:3b:43:8c:70:9c:d3:86:90:31:
8b:d7:9f:67:d3:1e:52:c0:41:b5:a3:70:b3:85:b6:
b5:a4:16:5e:24:72:82:a2:bd:be:44:b4:8b:4f:3c:
b3:8b:29:f0:64:6d:80:2c:9d:0a:ef:05:a5:1a:33:
3d:a9:37:d5:7a:3b:45:17:53:6c:29:f2:78:c7:a0:
db:9e:dd:69:c9:26:f0:da:3b:32:6e:12:d8:cd:8d:
6e:a1:32:f1:ed:c0:79:a9:1e:43:b0:82:f5:73:93:
f3:e2:47:d6:53:26:12:46:7c:f9:29:80:04:1b:6a:
09:67:d8:09:bb:92:85:fd:46:b3:f7:13:63:71:3a:
fb:98:1f:49:e3:67:20:4f:e8:3e:da:2d:00:69:16:
44:a6:6d:7e:6a:a5:ba:99:80:62:03:21:e2:af:a0:
d6:1e:50:02:75:2a:f3:33:75:3f:e1:81:ab:0f:9e:
40:ec:ed:42:8c:f5:3d:c7:42:22:b7:bb:ae:8b:ba:
91:88:7a:08:89:fe:6e:f8:3a:4b:ba:eb:16:19:33:
0e:22:c9:25:63:59:ca:69:d9:b7:01:5d:09:fc:56:
f8:38:7a:42:01:14:7a:71:c0:b3:99:15:e3:fd:db:
b1:1c:9b:e6:cf:1d:73:41:8f:44:e2:f7:e7:3a:1b:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:CA:F9:36:CE:7E:F1:0B:37:D8:F9:81:DD:28:10:F2:09:FF:7D
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/i_PK-TbOfvELN9j5gd0oEPIJ_30.roa
sbgp-ipAddrBlock: critical
IPv4:
203.140.240.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:d5:44:14:61:eb:48:e1:29:73:c6:df:fd:c8:4b:25:6b:3d:
a5:3c:b3:ca:5e:46:55:60:4f:24:14:46:49:77:20:ec:d9:84:
b4:75:35:8c:02:65:d6:90:2a:9e:25:05:cd:c1:ce:bd:3b:c7:
3c:da:ae:92:b3:33:e6:c1:27:39:64:e0:04:09:da:37:02:11:
58:4e:d8:b7:87:90:c2:3b:f9:7b:8c:12:85:9f:1c:2e:7e:11:
f4:59:a2:57:e4:61:fc:14:6c:21:6a:69:44:d5:5d:19:a7:29:
98:cc:ad:a2:ab:f7:ab:19:0d:c3:bc:67:41:da:62:89:e8:47:
99:c6:dd:f8:16:2d:5d:53:62:d7:9f:14:f5:dc:4e:53:65:1b:
74:a6:c1:bd:1a:13:6c:d3:c7:c7:36:65:c6:28:ac:64:83:f4:
f5:17:57:fe:44:19:c0:39:6d:60:db:6c:ac:7a:e6:f5:7f:ae:
e4:1c:db:ac:75:e7:05:20:8c:0b:a4:40:32:10:0d:c1:f4:01:
9c:46:3e:f5:0b:b1:24:28:fb:5e:59:45:4b:4f:76:07:03:43:
a4:21:37:de:c4:16:d9:52:24:34:83:b3:a3:64:51:a4:72:db:
bc:db:24:70:b3:3e:bd:06:46:84:0b:22:72:a6:3e:e3:7c:35:
5b:80:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:30 2026 by rpki-client