
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/_twNNapc_VjeozDxjeNiTCfxR9k.roa
File: _twNNapc_VjeozDxjeNiTCfxR9k.roa (raw, json)
Hash identifier: 1Sh4AHf0kfG+a/H/YlOdLwJHtLImKHPo6VIfS0gOrp4=
Subject key identifier: FE:DC:0D:35:AA:5C:FD:58:DE:A3:30:F1:8D:E3:62:4C:27:F1:47:D9
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01D4
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_twNNapc_VjeozDxjeNiTCfxR9k.roa
Signing time: Tue 31 Mar 2026 07:39:48 +0000
ROA not before: Tue 31 Mar 2026 07:39:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 202.213.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FEDC0D35AA5CFD58DEA330F18DE3624C27F147D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:42:02:19:0b:e0:1e:46:6e:62:a5:e3:b1:e4:
f0:cc:a2:43:1a:cb:3b:5e:a1:f8:eb:68:67:92:46:
08:a8:6d:27:64:45:6d:9d:94:68:71:28:1c:35:48:
6f:ee:dd:a7:f3:f7:47:5c:09:27:9f:9d:67:ef:87:
d3:9c:d7:12:8e:d9:dd:ae:30:1c:0f:7d:93:46:a8:
54:a5:df:02:54:a7:8a:ab:7a:09:4e:37:d2:2f:c5:
08:02:b2:51:1a:c8:3c:2b:3f:70:27:95:4e:ea:8a:
2c:f0:f8:b0:57:cd:00:61:ae:4e:d7:b5:2a:8d:b5:
68:43:e0:93:4b:b6:80:df:3d:23:e9:58:8e:5a:7b:
22:74:6e:d4:54:a6:91:a3:2e:0b:d3:60:2e:17:9b:
3b:37:6a:6c:00:67:bd:d3:1f:83:da:f9:13:36:b9:
e0:91:c6:f8:87:79:6c:de:ef:e3:47:d0:7b:77:b8:
e5:0b:08:23:5a:fe:07:d8:dc:16:bb:ba:ff:11:f9:
da:93:c8:f3:f7:63:20:76:cb:d5:89:72:f7:7d:01:
49:42:2c:ca:80:03:d8:5f:0d:de:4a:04:6b:fa:34:
a9:f8:54:c2:77:77:bb:3b:70:02:f2:5f:fa:6c:88:
e5:ed:7e:f3:35:8e:57:e4:c8:0f:ac:0b:11:f8:f1:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DC:0D:35:AA:5C:FD:58:DE:A3:30:F1:8D:E3:62:4C:27:F1:47:D9
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_twNNapc_VjeozDxjeNiTCfxR9k.roa
sbgp-ipAddrBlock: critical
IPv4:
202.213.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4f:a4:94:75:f9:48:0a:94:b0:e2:cd:e7:49:61:d0:06:e3:5d:
0f:a2:e7:6e:57:38:b3:80:7f:e5:af:eb:28:a8:8c:25:fb:d0:
e2:e0:5c:b6:7d:b9:24:25:80:65:9b:30:0b:4c:b2:c7:08:4c:
84:63:89:59:cc:d0:0d:a6:8f:56:5a:79:ba:27:f5:fe:a5:2b:
04:64:19:43:7d:86:68:e2:4b:44:92:12:13:ea:df:ed:b2:9f:
71:e4:46:49:11:69:7f:fd:3e:fe:6a:c0:ee:d3:0e:26:cf:76:
41:ae:00:5b:27:bb:7b:f6:91:c0:d5:17:81:6e:26:e4:26:97:
ba:e1:41:69:ed:14:c7:cb:a0:f7:eb:03:39:be:fb:16:e2:4f:
bd:94:9a:a7:38:be:c9:04:fa:87:44:ba:32:4b:a1:a2:eb:c3:
3d:49:b7:f0:49:dc:18:69:ae:5e:bf:12:9b:d8:88:66:20:ef:
ad:24:1c:4e:cb:81:8e:38:d1:fc:13:6f:21:0d:f7:10:a0:6a:
9e:3b:a8:c2:92:c8:3b:b3:bb:f3:15:1e:1e:76:2b:cb:7e:ec:
f7:01:3e:11:f8:28:11:41:be:f9:d7:f3:0c:d7:59:41:6f:b7:
f8:b9:5c:d2:34:c3:51:6e:91:66:8a:e5:0a:79:fd:83:6f:fc:
8e:4b:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:13 2026 by rpki-client