
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/423/KUEU2nIXem5G2Wjw-T7u1Y9AF9o.roa
File: KUEU2nIXem5G2Wjw-T7u1Y9AF9o.roa (raw, json)
Hash identifier: lzb6q+C6j0LUaafr6xApiljGjIKOU9lAtqVW60UCVgk=
Subject key identifier: 29:41:14:DA:72:17:7A:6E:46:D9:68:F0:F9:3E:EE:D5:8F:40:17:DA
Certificate issuer: /CN=E4230C86AAFAEDA049EF7D676F631139BD461148
Certificate serial: 0D
Authority key identifier: E4:23:0C:86:AA:FA:ED:A0:49:EF:7D:67:6F:63:11:39:BD:46:11:48
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5CMMhqr67aBJ731nb2MROb1GEUg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/KUEU2nIXem5G2Wjw-T7u1Y9AF9o.roa
Signing time: Tue 31 Mar 2026 08:46:42 +0000
ROA not before: Tue 31 Mar 2026 08:46:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9999
IP address blocks: 165.100.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/5CMMhqr67aBJ731nb2MROb1GEUg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/5CMMhqr67aBJ731nb2MROb1GEUg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5CMMhqr67aBJ731nb2MROb1GEUg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4230C86AAFAEDA049EF7D676F631139BD461148
Validity
Not Before: Mar 31 08:46:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=294114DA72177A6E46D968F0F93EEED58F4017DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:ef:fa:3b:a9:23:83:2b:37:12:85:8f:56:
92:09:64:e1:98:96:f3:66:67:90:db:e6:64:a1:7c:
21:30:24:ca:62:e8:a5:22:06:29:f7:d8:29:13:3b:
b6:39:7c:36:a2:9e:07:70:53:10:dd:59:2f:7d:96:
6f:50:bc:05:53:a3:38:2f:30:c9:10:c2:41:20:4f:
a5:0c:dd:06:93:26:16:e8:b6:b3:02:e0:fb:74:aa:
4b:c6:45:71:41:c6:dd:d6:40:1b:a2:23:73:d1:e3:
59:3a:12:14:d7:b8:37:20:64:b9:4d:3f:ae:c4:01:
69:59:f3:16:62:b4:93:d8:84:aa:38:97:17:76:05:
5f:6d:d5:f5:47:81:93:79:1c:c4:77:a6:85:ed:5d:
41:05:47:be:a8:02:cb:8c:90:dc:be:c5:e5:03:65:
ea:f5:6a:d4:04:31:33:14:8c:46:37:12:09:c0:45:
35:c6:c7:2f:df:dd:69:41:87:07:0c:b3:72:dc:3c:
74:6d:f3:ed:0a:81:e8:74:a0:2b:72:e0:4a:34:3f:
6b:97:d9:b7:4a:94:59:e7:8b:98:3e:05:ae:05:4e:
95:a5:34:70:61:8d:c2:9d:3f:04:3e:d4:cc:1b:4b:
9d:e1:a4:81:ae:67:a8:4c:1a:85:9f:9c:94:80:01:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:41:14:DA:72:17:7A:6E:46:D9:68:F0:F9:3E:EE:D5:8F:40:17:DA
X509v3 Authority Key Identifier:
keyid:E4:23:0C:86:AA:FA:ED:A0:49:EF:7D:67:6F:63:11:39:BD:46:11:48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/5CMMhqr67aBJ731nb2MROb1GEUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5CMMhqr67aBJ731nb2MROb1GEUg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/KUEU2nIXem5G2Wjw-T7u1Y9AF9o.roa
sbgp-ipAddrBlock: critical
IPv4:
165.100.192.0/20
Signature Algorithm: sha256WithRSAEncryption
20:9d:1c:0c:96:2e:8e:bd:6d:9c:6a:a1:b3:af:82:03:81:df:
16:67:89:ac:a5:1e:fa:7e:ea:72:c1:da:bb:15:cd:d3:37:17:
35:40:d2:57:45:ca:bd:ba:b8:03:a2:a4:be:40:87:c7:35:50:
14:75:2c:7d:29:f9:01:57:44:dd:c0:49:e0:65:4a:61:58:e7:
14:7a:e4:25:d8:c9:96:5c:7a:42:5a:0a:94:a7:98:37:8d:1c:
95:a5:d2:33:48:70:49:9c:16:1f:55:05:2f:2e:4e:07:4f:03:
92:7f:58:5c:72:bc:42:61:91:c5:4e:6f:fe:88:8f:a0:86:7d:
00:ab:18:be:01:0a:9a:d0:3a:c7:1a:3a:40:0f:b4:76:37:79:
35:8e:cd:a3:ab:d7:84:be:55:a5:d1:0c:23:6d:af:50:6a:8c:
8d:64:67:24:ef:3e:b2:b0:db:62:fe:62:59:7c:e1:7c:f3:a4:
78:89:77:84:db:a2:f7:50:cd:e4:81:60:72:dd:30:b4:35:7f:
86:46:c2:38:b7:c7:42:6f:e5:f0:2d:60:b0:26:22:fc:f7:03:
27:39:a4:c2:40:b1:6d:81:a5:42:5e:2c:3e:b0:40:11:9b:4e:
27:d6:75:a6:de:33:07:9a:dd:f1:76:2f:bd:13:8c:b5:5e:4b:
9a:e4:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:47 2026 by rpki-client