
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/psNkmekOemLNnUTQ7kj3Fw9na1Y.roa
File: psNkmekOemLNnUTQ7kj3Fw9na1Y.roa (raw, json)
Hash identifier: dRqH1Su4AfpsFjwXEb0YA+kAE+pSqFx/e+2dIfy5HqE=
Subject key identifier: A6:C3:64:99:E9:0E:7A:62:CD:9D:44:D0:EE:48:F7:17:0F:67:6B:56
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: BE
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/psNkmekOemLNnUTQ7kj3Fw9na1Y.roa
Signing time: Fri 17 Apr 2026 02:24:47 +0000
ROA not before: Fri 17 Apr 2026 02:24:47 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 9622
IP address blocks: 202.52.16.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Apr 17 02:24:47 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=A6C36499E90E7A62CD9D44D0EE48F7170F676B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:85:e2:1c:46:fa:ec:36:78:dc:0e:34:a4:
dd:71:51:56:cb:a8:8b:98:d6:a6:60:16:f0:6b:fa:
b3:ed:ff:f8:a4:09:1d:bd:6c:77:e9:50:db:18:b5:
62:54:c9:a9:e7:54:0e:6d:8b:3e:41:b9:06:1e:7e:
7a:7c:c1:74:90:e9:08:21:21:68:f4:ae:6f:dc:94:
63:fb:44:ab:de:a7:ba:de:cf:c3:36:e7:9b:a4:ed:
83:3b:bd:6e:57:95:d5:b3:f2:0c:37:e4:b9:c9:4e:
25:c8:19:e2:c2:d0:c8:c5:97:3c:06:94:df:ec:96:
d3:73:c7:3b:35:81:5b:e4:ec:e3:22:02:87:4c:9f:
fb:23:11:66:23:14:a1:70:22:e5:a3:a9:10:1c:6e:
0c:a1:a6:08:84:88:06:74:c6:77:61:0e:f3:ad:9b:
7d:7d:99:d0:28:6d:88:3c:a1:de:50:60:c9:62:94:
23:da:ba:6d:0c:64:d3:98:bc:57:fc:e7:de:4f:d3:
63:47:18:f5:cb:d1:6b:af:5c:b0:71:6d:8b:59:df:
ca:ac:b4:77:14:62:99:a3:a8:5a:7b:37:d8:77:35:
21:f6:9f:b7:21:24:23:6a:79:8c:f5:bf:43:8a:6e:
21:79:32:14:20:19:88:59:c2:25:b2:f0:38:6d:08:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C3:64:99:E9:0E:7A:62:CD:9D:44:D0:EE:48:F7:17:0F:67:6B:56
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/psNkmekOemLNnUTQ7kj3Fw9na1Y.roa
sbgp-ipAddrBlock: critical
IPv4:
202.52.16.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:f3:2c:02:46:a5:a3:50:11:48:cb:3c:2b:50:37:85:11:2c:
f8:27:3a:d3:25:f9:0d:ad:29:3f:4b:9b:3d:b5:cc:b1:ba:25:
d0:75:ce:d5:c8:a0:6a:40:c4:2b:0a:51:46:09:26:a0:e0:ed:
4e:95:54:2a:37:28:d8:c3:65:d5:14:09:36:2d:66:d4:bb:2f:
fe:87:ce:6b:94:2b:af:b1:f6:af:1a:02:a8:0d:3d:3d:99:50:
bc:94:f5:7c:d9:cb:92:de:41:d8:1d:45:40:a2:98:22:e5:55:
0b:31:21:db:5c:1f:18:43:a2:de:49:44:57:8e:9b:c2:44:86:
4c:d9:68:bb:e1:a0:79:cf:96:66:ae:ec:27:18:a5:ca:5d:01:
d2:c7:8e:5b:59:a7:57:e8:02:7f:3d:f4:37:1e:3a:41:3b:86:
3d:f2:47:3f:4f:3d:9b:e7:57:40:aa:e8:82:74:85:da:29:e1:
a6:f4:da:68:17:53:8c:e8:e8:3e:02:3d:b2:74:ed:03:a0:1c:
30:db:4b:c1:d2:e6:b6:c1:cc:2b:cb:6d:cc:98:c9:33:c4:59:
bb:82:c6:21:c9:eb:6a:4f:9c:bb:43:05:16:0f:aa:31:72:a2:
95:d2:2a:93:2f:ab:54:a7:f6:8f:d7:97:f4:c6:ef:0c:64:78:
02:3c:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:03 2026 by rpki-client