
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/A90yEnh_rVev0mbrqLRzoHTx-Gk.roa
File: A90yEnh_rVev0mbrqLRzoHTx-Gk.roa (raw, json)
Hash identifier: S2o4CYqI+lJq5DxeZteMOsPaB2r2WyY9TsLjnd2ULZQ=
Subject key identifier: 03:DD:32:12:78:7F:AD:57:AF:D2:66:EB:A8:B4:73:A0:74:F1:F8:69
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01CA
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/A90yEnh_rVev0mbrqLRzoHTx-Gk.roa
Signing time: Sun 01 Mar 2026 01:28:45 +0000
ROA not before: Sun 01 Mar 2026 01:28:45 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 2527
IP address blocks: 36.2.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 1 01:28:45 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=03DD3212787FAD57AFD266EBA8B473A074F1F869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:88:a8:d7:b3:78:37:9c:83:7d:e5:ca:1d:
6b:63:eb:b8:af:ae:47:8e:16:b7:58:77:57:31:f4:
ca:d2:fe:46:60:dc:1b:24:cf:7e:44:50:93:7f:be:
79:c3:2b:87:9e:48:73:2d:41:c5:5b:c5:a4:c0:c1:
25:47:f1:92:ab:2d:c7:eb:0c:86:9b:1b:11:81:be:
bb:c0:a7:eb:b1:27:f3:56:fa:71:11:c0:87:d2:c9:
a0:1f:2f:e5:0f:f7:64:da:62:27:d7:9e:6f:e9:33:
d9:ab:b8:4a:06:50:fc:ce:62:1e:8b:05:96:b1:1f:
f0:ab:2d:48:61:c8:e5:2f:c4:a6:16:59:4a:c8:05:
bd:d1:d4:96:57:fd:c1:17:dd:8e:58:2e:5f:60:45:
47:5e:19:e5:7a:d4:1b:fb:a9:06:91:33:72:eb:35:
9c:41:8c:b2:0c:a5:ff:13:14:be:78:0f:9f:71:e5:
cd:c1:cc:ca:ba:ce:04:2b:1b:c9:06:fc:98:63:fb:
00:11:77:e8:59:e8:75:f3:53:9f:28:37:f6:4e:1b:
04:bd:98:ce:05:d9:93:be:ed:69:ca:ab:57:b4:61:
2e:7e:ac:c3:c1:d8:1b:29:06:0f:a9:b1:79:16:61:
8d:85:19:9f:85:62:d2:8d:5e:5d:71:fc:a4:b2:6e:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:32:12:78:7F:AD:57:AF:D2:66:EB:A8:B4:73:A0:74:F1:F8:69
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/A90yEnh_rVev0mbrqLRzoHTx-Gk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.2.192.0/19
Signature Algorithm: sha256WithRSAEncryption
33:e9:8a:bc:25:82:72:6c:0f:3c:ca:0f:70:d7:a7:6a:bf:9d:
43:4a:4c:39:55:26:bd:06:89:34:35:8e:cc:fd:4d:3f:99:77:
13:c1:38:45:2b:c0:65:af:5b:0a:dc:0b:1d:5a:e4:b8:e8:cc:
dc:22:e8:51:b4:11:4c:25:21:0c:fc:0c:52:d9:6c:b2:1d:d3:
38:8a:21:d7:5b:b5:c7:89:86:7d:1a:94:ca:e5:73:82:35:87:
e3:2f:c8:37:d9:fc:bd:fe:18:5c:b2:50:f4:22:17:41:7e:0d:
06:0a:d5:c8:44:6e:23:d7:c8:bd:dd:18:9d:b1:5e:21:c7:af:
1b:47:2e:f4:21:1d:10:b0:6b:49:35:fc:8d:4a:05:79:97:fc:
f1:52:b4:f0:5f:fa:f9:a2:d4:54:63:82:b1:70:30:74:13:17:
a5:bc:01:9f:b7:14:ca:fc:aa:7f:eb:96:80:49:d9:08:75:eb:
13:dc:be:aa:14:0e:51:b8:65:36:b4:b4:61:70:11:b0:0e:fb:
46:8e:61:2d:ec:96:21:96:09:ce:52:35:e0:96:29:34:18:4e:
85:96:c8:e3:bb:00:81:ec:54:06:dc:e5:0d:25:04:fc:a3:78:
97:23:a9:38:9d:0b:e8:c1:21:1a:2c:de:2b:0c:b9:63:22:42:
c9:85:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:07 2026 by rpki-client