
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Opd_sknzPyo5e9zb3EXwRiQyC1g.roa
File: Opd_sknzPyo5e9zb3EXwRiQyC1g.roa (raw, json)
Hash identifier: k/g6rzA0xtjwmik7mwZXMVmkkNgoJ8kJahPgBdr9WDg=
Subject key identifier: 3A:97:7F:B2:49:F3:3F:2A:39:7B:DC:DB:DC:45:F0:46:24:32:0B:58
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01C9
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Opd_sknzPyo5e9zb3EXwRiQyC1g.roa
Signing time: Sun 01 Mar 2026 01:28:45 +0000
ROA not before: Sun 01 Mar 2026 01:28:45 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 2527
IP address blocks: 36.2.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 1 01:28:45 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3A977FB249F33F2A397BDCDBDC45F04624320B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:57:a9:50:28:85:0f:c7:85:49:64:82:06:
9d:b3:92:81:c5:e4:f2:b8:27:52:04:56:50:bf:15:
26:96:ad:52:c0:40:cb:c4:cb:40:a1:01:18:38:f3:
91:e7:9d:a3:b2:b1:37:08:c8:87:88:af:35:5f:a1:
f7:69:2e:8b:08:bb:dc:ec:22:f1:eb:53:f8:41:55:
32:c5:5f:5f:5d:f9:e0:ef:ca:25:56:bb:c4:7a:c5:
fb:54:4f:f7:5d:47:1a:ff:48:b4:55:59:cc:f8:81:
d2:f9:41:68:cc:2f:46:0f:38:6e:4d:f3:83:34:d5:
92:7c:e4:5e:63:03:7a:46:f8:62:b2:66:52:d6:91:
52:80:ba:f0:b9:17:21:57:24:27:6e:e8:96:98:2b:
05:8d:32:40:ac:03:8b:72:1a:91:d0:bc:28:c6:2c:
29:8e:fd:f2:1d:46:33:9e:13:04:c6:bf:ed:bf:3a:
a3:9d:da:36:c2:f1:3a:da:ed:fd:f9:6d:97:6f:59:
07:21:31:5d:b9:2f:55:cc:72:e1:7e:1e:01:2d:b6:
6f:93:26:e8:42:8a:3e:2e:52:c0:2c:85:0b:88:76:
68:80:2b:30:29:59:d6:fa:30:fd:05:54:e6:e4:22:
e7:71:0c:51:32:0b:12:b2:a2:12:ef:81:29:c8:43:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:97:7F:B2:49:F3:3F:2A:39:7B:DC:DB:DC:45:F0:46:24:32:0B:58
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Opd_sknzPyo5e9zb3EXwRiQyC1g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.2.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:6c:58:b5:47:bc:cc:34:51:1f:ee:37:45:69:15:a4:34:7b:
76:0a:9c:2c:cf:dc:15:77:f3:c5:62:75:f0:76:75:66:92:af:
52:44:d9:2d:25:39:08:f4:3d:ef:f7:04:9f:89:b9:f3:81:c0:
ce:25:92:3f:b9:d8:f2:a7:78:c0:90:21:4e:0e:3a:19:7c:12:
84:13:63:ec:86:d7:7e:ae:4a:ab:aa:fb:b8:45:86:01:ce:ff:
5e:77:ff:24:7e:cc:e2:23:fa:7f:76:48:45:fb:0c:07:6b:31:
7a:37:48:cb:3f:78:a3:a3:b4:6c:4c:20:b3:93:f0:94:88:e4:
62:7f:6a:d4:3a:3a:06:07:19:68:bc:87:c2:7c:11:45:b8:b9:
ab:a0:66:71:d8:37:bf:f9:1f:f0:e0:3b:9d:60:3d:33:cd:b5:
3a:e0:85:05:2a:9b:bc:97:d0:69:23:f0:d7:2c:af:da:49:14:
85:28:2d:da:42:59:06:38:c2:b4:e3:58:49:01:87:5c:fc:9d:
8d:1b:83:0d:d5:a2:a6:2d:d8:62:b9:cb:44:2b:70:fb:d4:e7:
8f:fa:a7:e1:97:84:e0:52:a0:b2:dc:61:44:67:a3:34:8b:e7:
81:e5:52:de:ad:b3:e6:2e:0b:76:83:3f:57:db:75:da:c3:14:
c6:27:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:24 2026 by rpki-client