
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/06WqWqKBGXO9IZ3DawA6LB9x2Ko.roa
File: 06WqWqKBGXO9IZ3DawA6LB9x2Ko.roa (raw, json)
Hash identifier: SDreBXL80f6vYSHLy19XyWFAnVhRsss5FX87ApFOjNE=
Subject key identifier: D3:A5:AA:5A:A2:81:19:73:BD:21:9D:C3:6B:00:3A:2C:1F:71:D8:AA
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01E6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/06WqWqKBGXO9IZ3DawA6LB9x2Ko.roa
Signing time: Tue 31 Mar 2026 07:39:54 +0000
ROA not before: Tue 31 Mar 2026 07:39:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 202.238.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D3A5AA5AA2811973BD219DC36B003A2C1F71D8AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:1c:87:57:d9:08:f5:5b:e7:ec:5b:c2:a7:
22:a5:8e:81:32:62:d8:df:a9:55:5f:4b:42:de:84:
31:97:90:ab:e7:44:f4:da:fa:57:8f:d1:7f:9e:d3:
96:4d:74:4f:75:2e:49:7e:28:e0:eb:32:be:99:97:
72:39:cd:7e:9e:2f:3f:42:1d:26:ae:b9:f1:20:6d:
53:9c:93:78:c0:12:06:91:86:4a:7a:ad:51:1b:8c:
ff:b6:ce:09:9d:47:f0:da:7a:da:4a:e5:86:b3:4b:
d1:19:00:ec:cc:38:e9:c9:26:aa:31:d9:db:50:bf:
14:f1:76:20:b6:5a:5c:0a:71:62:65:8d:dd:84:b7:
29:38:c3:9f:8d:f2:35:d0:17:10:94:52:ea:25:52:
8d:aa:8c:40:ef:04:58:d5:5d:bc:a7:9e:fb:9e:76:
22:06:d4:d8:37:87:b7:63:2b:39:56:e8:60:93:34:
d3:a9:7a:fb:5d:3d:c6:3c:6b:9a:ed:28:80:7b:ea:
cf:89:17:be:5a:ab:de:53:b5:f8:88:ae:76:e2:02:
ba:d7:b4:31:71:e2:c2:32:c9:6a:84:14:19:2e:8d:
f3:50:c0:10:17:dc:e5:b2:93:11:ca:3f:bc:8f:66:
d6:e7:a9:41:95:94:30:77:69:0b:96:08:cd:b6:44:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:AA:5A:A2:81:19:73:BD:21:9D:C3:6B:00:3A:2C:1F:71:D8:AA
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/06WqWqKBGXO9IZ3DawA6LB9x2Ko.roa
sbgp-ipAddrBlock: critical
IPv4:
202.238.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:53:f7:49:7e:b7:05:03:b0:c1:2b:07:b1:7f:ea:3e:41:74:
13:57:7b:27:36:84:22:af:f7:43:f3:c8:d6:b0:79:5e:3d:ea:
df:89:9f:7b:5a:3f:1c:d7:64:17:f3:9c:87:43:a7:56:c0:bd:
e4:f9:d5:a6:91:7f:4e:de:bb:33:a0:c7:16:f7:19:61:c5:b2:
d0:88:f8:7e:89:4e:68:af:fd:9d:c9:bb:8e:55:d3:ac:4e:f6:
b9:c0:20:c0:a7:7b:9f:8c:d2:ef:6b:8f:c9:f1:93:90:ae:0a:
c4:5b:5c:e3:f1:63:81:04:3c:da:ba:9d:9c:c1:be:de:1a:cf:
40:8a:c4:dc:01:0f:90:54:06:54:10:6a:18:ac:d2:6a:44:23:
89:c8:ca:e6:37:16:0a:58:90:bb:53:7e:21:de:c0:fc:3d:f6:
12:c8:bf:21:8c:65:93:e5:81:fa:30:53:18:f5:01:c3:b7:05:
73:5d:55:c5:89:d8:e3:64:40:32:04:a9:7e:65:5a:96:79:a5:
26:ad:fe:d4:30:13:c8:05:d5:1f:45:6c:06:a4:90:16:41:c6:
b1:c8:ed:4c:74:59:19:a1:c9:25:59:0c:69:06:bc:9d:a5:cf:
62:7a:85:8a:53:71:88:79:e6:13:b4:ac:d4:58:19:02:f0:90:
d3:67:42:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:57 2026 by rpki-client