
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDAflxfbuBw9HQodiXR9PLD8keI.roa
File: CDAflxfbuBw9HQodiXR9PLD8keI.roa (raw, json)
Hash identifier: +e18DtJAfGXGNHmZauhHSgEuhpZuR1aUu50KZhbmipE=
Subject key identifier: 08:30:1F:97:17:DB:B8:1C:3D:1D:0A:1D:89:74:7D:3C:B0:FC:91:E2
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01EC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDAflxfbuBw9HQodiXR9PLD8keI.roa
Signing time: Tue 31 Mar 2026 07:39:57 +0000
ROA not before: Tue 31 Mar 2026 07:39:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 218.41.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=08301F9717DBB81C3D1D0A1D89747D3CB0FC91E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:72:02:5f:ec:90:0a:e9:f6:6e:35:cf:5e:
67:c3:c9:5c:f6:69:55:b1:9f:6d:8c:68:3f:ed:04:
0c:d4:80:ff:a3:c4:9e:3d:9a:00:ef:b0:b2:03:f5:
c4:88:56:b0:c8:c4:50:56:bf:55:8b:23:b5:6b:32:
2e:a6:6b:e6:35:13:c0:f8:14:53:00:dc:05:54:7e:
9c:fc:41:94:08:db:eb:82:bf:a0:47:22:b3:95:1b:
1e:44:14:b7:bb:02:d2:bb:1b:ba:af:d6:28:55:a3:
f3:25:40:80:4b:0c:d6:fd:47:4f:09:53:e5:f1:91:
02:55:1e:32:19:8e:2c:14:75:dc:b4:24:07:72:dc:
ab:91:7b:17:a1:50:97:47:7e:1f:1b:47:ee:8c:11:
9a:85:78:34:c9:d7:15:b0:64:0d:ca:58:65:a9:05:
0a:ff:a1:39:e4:67:cc:e2:96:a0:63:55:fc:4a:c2:
25:1c:ea:00:42:2c:b1:16:44:c7:b3:02:3b:9d:51:
28:98:4b:4e:31:76:6e:a8:c7:4e:2e:92:26:3e:fa:
e1:6d:6e:8c:0c:b7:ce:54:85:a6:0e:70:bd:0b:13:
91:77:8a:80:0b:e2:48:e9:0f:0a:b7:54:37:5a:1d:
4b:cd:aa:7f:d9:0a:b0:97:3f:d2:08:21:29:75:0c:
85:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:1F:97:17:DB:B8:1C:3D:1D:0A:1D:89:74:7D:3C:B0:FC:91:E2
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CDAflxfbuBw9HQodiXR9PLD8keI.roa
sbgp-ipAddrBlock: critical
IPv4:
218.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:74:0b:1b:45:8f:bd:06:1f:dd:a7:79:87:a1:6b:c4:dc:5a:
de:1b:33:b3:97:16:81:30:5f:9f:dc:33:18:a4:35:97:72:78:
52:2e:76:cd:02:2c:80:fc:05:d2:fe:8c:fe:79:18:5e:65:01:
8f:06:5b:4a:1e:1e:15:a1:ea:a9:d3:c7:80:be:f1:ea:0c:39:
a5:bb:4b:e6:3b:5c:75:e4:b1:34:5a:d0:db:30:0a:9e:12:98:
90:7a:92:53:ce:7a:2d:ad:11:58:c0:d7:d3:d4:f3:8f:6c:4d:
bf:a1:4c:98:21:33:c7:4d:0c:92:75:63:86:65:c4:a9:0b:4e:
33:f2:1c:99:23:a8:41:6d:ed:00:dd:ac:15:12:52:2d:09:db:
3b:d7:c7:11:93:2e:80:1d:71:8b:20:3a:dc:69:63:e8:33:66:
cc:47:1b:b0:ae:f9:0c:3c:98:dc:eb:af:9b:76:7c:67:07:d3:
57:b7:c6:47:45:5f:85:b0:f9:5f:6d:ad:ba:77:aa:bf:a2:d7:
67:e9:7c:3a:4d:74:4e:08:0f:e3:1a:42:75:49:c5:8d:9c:a8:
12:bc:06:c5:37:47:1e:08:f8:f1:e1:1e:cc:40:4b:1d:48:1d:
31:f7:75:3d:ff:97:ff:0c:fc:83:0b:81:34:a8:2b:01:ff:28:
a7:99:7b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:01:46 2026 by rpki-client