
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/-doE8Y61pin06oVq3jdDajNNFPs.roa
File: -doE8Y61pin06oVq3jdDajNNFPs.roa (raw, json)
Hash identifier: JvIRuIP8QAj9MDqzcQ/FcXbS7NSZp9492+yKxrN1FxY=
Subject key identifier: F9:DA:04:F1:8E:B5:A6:29:F4:EA:85:6A:DE:37:43:6A:33:4D:14:FB
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: C6
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-doE8Y61pin06oVq3jdDajNNFPs.roa
Signing time: Tue 31 Mar 2026 07:39:41 +0000
ROA not before: Tue 31 Mar 2026 07:39:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 157.147.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Mar 31 07:39:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F9DA04F18EB5A629F4EA856ADE37436A334D14FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:c0:2f:0d:3b:ea:47:4c:87:ed:d4:35:2c:
03:45:23:94:15:cb:ac:76:db:d5:aa:48:98:ce:b9:
a7:18:86:40:9e:73:77:ea:45:40:d1:86:b3:89:67:
45:db:fc:5a:ed:88:9c:72:84:38:9c:54:61:8f:85:
a6:3a:0f:d2:00:98:ad:15:51:6f:5d:4f:a8:9b:2c:
b9:e6:d3:f5:6b:e8:38:ae:70:af:94:05:61:37:e4:
77:42:bb:50:97:2e:bd:43:ee:e1:97:94:59:85:8f:
0d:de:00:aa:74:49:12:7d:98:38:e0:e1:40:a9:cc:
d1:58:24:44:58:99:ef:f1:ca:1d:f2:1e:1f:88:33:
17:d0:db:1e:4c:aa:32:42:8a:e9:5f:4e:6d:25:98:
79:6e:94:93:01:ae:c2:93:7a:93:32:51:c0:b9:96:
fc:e2:c7:f6:56:d1:0b:c5:ba:aa:95:53:33:a6:81:
6c:69:d9:59:a6:6c:3b:b3:30:17:aa:8d:bc:e5:04:
5e:c7:4c:7b:f2:00:43:77:bb:27:70:39:d9:9c:f4:
b9:86:0b:06:bf:b9:6f:8f:d2:6b:c0:0f:57:19:e7:
71:1d:b0:2f:36:3d:5b:d1:6e:71:5e:e1:db:e7:f7:
9b:13:00:8f:c5:43:06:14:34:de:aa:a0:3f:92:2d:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DA:04:F1:8E:B5:A6:29:F4:EA:85:6A:DE:37:43:6A:33:4D:14:FB
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-doE8Y61pin06oVq3jdDajNNFPs.roa
sbgp-ipAddrBlock: critical
IPv4:
157.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ac:69:cc:ba:1b:fb:83:97:d2:5b:8e:c4:24:84:ab:dc:e6:35:
69:ef:33:a5:a3:dd:1a:f9:70:49:44:e3:9e:44:55:fc:81:a3:
f1:dd:6b:eb:32:1c:5f:8c:8b:3f:b5:36:74:b8:c8:b4:4e:47:
c4:36:f3:44:fc:52:13:75:61:97:a6:87:62:ba:49:51:2c:3b:
2c:e7:72:ce:1e:97:c9:3e:e6:94:52:fb:64:44:7b:95:8e:b5:
6f:fb:44:0e:84:35:fd:83:fd:94:7c:08:75:3b:a7:14:81:ca:
85:99:21:f8:be:c6:55:3c:a6:03:5c:7a:87:e6:bf:1a:e6:76:
5f:5f:3b:86:e8:d1:e0:79:1f:3e:3e:84:24:a3:28:6a:64:1d:
c7:42:4e:6c:3a:5b:98:ff:96:dc:ec:43:69:d1:46:5e:df:f9:
dc:4e:2a:d6:b2:a1:4c:75:53:1c:bc:99:89:ab:a7:5d:1f:5c:
72:a8:db:d6:1b:eb:0e:93:c2:ae:20:e4:3a:bc:84:ea:7c:ea:
5f:04:cd:df:82:be:fa:c3:a8:48:b9:3d:3c:d7:4a:5b:8f:d6:
5e:18:4b:fb:b7:bd:6a:4e:fa:05:f8:60:2b:65:76:19:76:21:
f5:b1:6e:8b:5b:dc:cf:6a:ef:b0:52:1a:d0:b9:94:c6:e5:42:
e1:56:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:50 2026 by rpki-client