
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/2A1uwMdMyjV6zJXZcNoIG8Bjxc0.roa
File: 2A1uwMdMyjV6zJXZcNoIG8Bjxc0.roa (raw, json)
Hash identifier: +gegfuIV+FcRblXeL5bjntLvh4Uvjc2QOKX8BIS/dVQ=
Subject key identifier: D8:0D:6E:C0:C7:4C:CA:35:7A:CC:95:D9:70:DA:08:1B:C0:63:C5:CD
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 0200
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/2A1uwMdMyjV6zJXZcNoIG8Bjxc0.roa
Signing time: Tue 31 Mar 2026 07:40:10 +0000
ROA not before: Tue 31 Mar 2026 07:40:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 36.2.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:40:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D80D6EC0C74CCA357ACC95D970DA081BC063C5CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:d0:c9:32:1f:96:8f:24:86:7e:8a:e3:e2:
7f:a8:09:b6:4f:30:14:8e:dd:1d:cb:2e:f4:81:27:
ba:f2:26:c5:35:fc:bd:1a:d4:6b:d4:20:ab:40:52:
01:43:60:46:f9:6d:8c:00:35:e9:3f:6f:50:64:8a:
2c:c6:40:b8:d0:6a:5e:32:d7:0b:17:bc:3e:fd:52:
51:9c:d4:33:97:53:6f:b9:b7:c8:9c:0d:2c:e5:3d:
b2:f6:58:7f:29:6c:5c:dd:4a:20:1b:9a:77:94:8f:
79:1e:d7:82:01:8e:b6:15:1e:e4:1a:f3:7e:33:e2:
64:bb:8a:10:3b:2a:ee:67:f5:d9:89:bc:b0:bb:79:
be:8d:e8:68:f7:da:e6:19:bc:cc:b9:cc:18:d5:e1:
ca:fd:08:25:8a:54:5c:15:47:c0:56:b2:85:06:cf:
1d:74:ab:7c:d5:89:7d:a7:eb:0a:6e:02:ff:9e:f3:
87:96:b7:85:bf:ca:76:49:6a:78:a9:e9:af:90:36:
62:a2:16:6d:0d:f3:67:a8:af:e1:1e:de:c1:98:1b:
ef:28:3e:85:b2:66:58:6e:f6:88:8d:c3:f0:31:5d:
10:a4:a3:a0:b1:54:98:9f:ff:d2:0c:4c:e4:01:e3:
da:6a:6f:2f:63:92:52:16:46:f8:3e:7e:cc:49:62:
45:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:6E:C0:C7:4C:CA:35:7A:CC:95:D9:70:DA:08:1B:C0:63:C5:CD
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/2A1uwMdMyjV6zJXZcNoIG8Bjxc0.roa
sbgp-ipAddrBlock: critical
IPv4:
36.2.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:4c:b6:e0:06:a4:de:84:57:36:98:f6:61:0a:b2:a3:ee:bc:
21:a9:d7:ec:80:61:af:2a:a5:2f:b9:04:cb:76:79:f3:1f:bf:
7a:ad:6f:ac:24:73:65:02:d2:6a:8f:5e:86:1d:27:b4:3b:f8:
2d:12:bf:6d:56:0c:ca:3e:17:05:0b:5e:bd:bd:18:b4:dd:a5:
b2:da:97:3d:e3:35:64:6d:26:01:6c:8b:69:eb:c1:c4:82:8c:
04:3a:53:92:b6:0e:4b:ca:9b:4a:90:19:c1:06:4f:e2:e3:96:
6d:07:87:56:e0:f9:51:48:67:3d:7a:44:53:aa:2c:82:c2:8d:
40:70:4c:69:25:85:fe:c0:43:aa:ea:75:d4:81:e1:a1:48:1a:
a2:9c:43:98:73:9b:90:40:b9:a7:af:1c:85:b2:fa:73:99:58:
93:05:ca:b1:a2:2e:b8:1e:92:3a:b7:40:96:ed:85:e4:5b:0a:
e6:d8:c0:bc:a7:1c:ff:f3:03:e7:de:00:52:44:52:d0:ff:8f:
95:d8:9e:08:17:67:fb:5c:bd:88:1b:5d:f7:fe:0a:27:87:4e:
57:3d:99:49:a7:b4:c8:a1:c8:a5:76:27:c8:20:3f:ca:c5:f9:
3e:b2:8b:77:73:b4:a2:96:a8:fc:54:b5:57:cb:27:e1:e3:c8:
15:26:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:43 2026 by rpki-client