
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/h9t1aP7NhuP_7Pn89qtLqe2w2C8.roa
File: h9t1aP7NhuP_7Pn89qtLqe2w2C8.roa (raw, json)
Hash identifier: 3brUnjzmrVDVInMi/n44+WNXx7i+54sXNcoiuWFdB5Q=
Subject key identifier: 87:DB:75:68:FE:CD:86:E3:FF:EC:F9:FC:F6:AB:4B:A9:ED:B0:D8:2F
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01E2
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/h9t1aP7NhuP_7Pn89qtLqe2w2C8.roa
Signing time: Tue 31 Mar 2026 07:39:53 +0000
ROA not before: Tue 31 Mar 2026 07:39:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 219.98.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=87DB7568FECD86E3FFECF9FCF6AB4BA9EDB0D82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:25:1e:24:09:25:46:be:d7:97:cd:24:77:
99:c9:66:52:c8:44:15:93:22:63:0c:3e:1c:40:00:
6e:0e:ff:fb:62:04:02:f0:b1:08:0b:71:13:b7:ba:
48:67:f5:2c:aa:b9:b6:58:77:e8:48:01:8a:08:fb:
e5:12:fc:ee:93:ac:c6:74:49:30:03:60:b5:85:ee:
a6:01:71:92:d3:fd:1e:c5:55:2e:68:ec:10:66:97:
3d:09:a8:0f:f4:cb:7f:8f:c9:f2:01:9a:c1:06:3f:
dd:3b:3d:cb:76:6a:67:c8:de:64:67:5a:79:a1:c0:
8b:a7:79:67:4e:31:8c:60:38:4f:39:99:25:a4:4f:
e3:4a:9d:74:c8:45:4c:fd:45:ee:47:75:20:c1:fd:
88:af:8c:d6:ab:65:f7:f3:c5:11:2e:f3:27:7b:90:
93:ce:66:67:1e:11:e0:2e:a8:b7:f6:a9:df:53:9b:
0d:a1:00:ee:d1:1b:29:86:d9:97:00:a5:82:95:cb:
84:79:9c:98:b7:72:fa:a3:cc:9a:34:7d:e4:df:f8:
a3:a3:1f:8b:c4:4f:2b:9a:fe:18:8b:8e:97:3f:4b:
6d:3d:b6:d2:de:68:6b:76:f3:bb:85:fc:bc:35:65:
79:8f:a8:b7:63:38:ab:83:15:77:80:ed:ce:31:ed:
3f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DB:75:68:FE:CD:86:E3:FF:EC:F9:FC:F6:AB:4B:A9:ED:B0:D8:2F
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/h9t1aP7NhuP_7Pn89qtLqe2w2C8.roa
sbgp-ipAddrBlock: critical
IPv4:
219.98.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:b3:3c:74:11:fa:4b:f5:ba:a5:2e:1c:17:02:05:eb:04:0c:
76:54:28:90:8e:62:83:a5:9e:9a:93:9f:6a:62:7f:b6:db:d4:
ea:c1:95:5d:b2:e5:77:a4:35:27:ee:cb:7e:d5:71:a6:e0:92:
4f:70:29:ad:00:7f:9c:51:72:d1:9d:d9:3e:53:d3:f1:44:c2:
df:dd:da:e8:e7:5c:5e:8b:24:6e:c8:df:1a:61:aa:52:79:2a:
69:2a:ef:e6:26:8e:d4:ff:25:ec:7a:43:b5:49:51:e5:2d:6e:
de:76:d0:65:20:fd:1d:b7:07:3b:e0:72:d7:dc:a2:04:a4:9f:
99:90:75:a9:08:3a:68:a6:22:f1:41:e7:ac:40:ce:8e:68:9e:
ff:c5:ef:5e:69:b1:80:df:86:59:5b:e7:8c:96:76:9a:ac:aa:
11:95:62:10:22:a3:93:4e:79:3f:b5:14:4f:0b:e8:7c:69:c3:
9a:f4:a6:16:ae:06:89:79:ed:5f:e6:ed:d2:9e:aa:9b:68:8f:
12:c2:c7:36:0d:6b:23:9f:4a:eb:15:97:f5:c0:57:7e:44:47:
87:71:a3:ce:61:79:b8:c6:cd:19:0b:6a:5f:f2:4b:12:9d:6a:
ee:dc:7a:16:42:d8:22:d0:96:50:2e:5d:a8:87:d6:bf:f1:e6:
03:e6:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:18 2026 by rpki-client