
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/jmnPIUPeI89v6Rhxymb7JvPAR4Q.roa
File: jmnPIUPeI89v6Rhxymb7JvPAR4Q.roa (raw, json)
Hash identifier: /C9RTViVa4yK0lepdt4mqlctz1IZ1k9s4Ne+zJ6W5OI=
Subject key identifier: 8E:69:CF:21:43:DE:23:CF:6F:E9:18:71:CA:66:FB:26:F3:C0:47:84
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01D7
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jmnPIUPeI89v6Rhxymb7JvPAR4Q.roa
Signing time: Tue 31 Mar 2026 07:39:49 +0000
ROA not before: Tue 31 Mar 2026 07:39:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 210.250.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8E69CF2143DE23CF6FE91871CA66FB26F3C04784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:aa:d8:56:2d:6d:b0:8e:b5:46:4f:ee:ae:
4a:62:60:1c:a2:63:e4:d4:7e:26:c9:f6:2e:64:06:
54:ef:ee:83:8d:ff:07:58:14:0c:08:d0:d7:ba:5d:
a7:a0:3b:74:9b:aa:4d:a9:30:03:91:03:c2:76:e0:
e9:2d:1e:eb:7f:73:d4:40:17:70:9c:d8:2f:8a:36:
7e:9a:09:b1:75:93:62:08:44:63:4c:7d:c2:8e:f8:
87:2f:a4:fb:cc:82:6b:37:9d:2b:f4:4d:3d:ad:54:
57:fa:c1:8e:d5:cb:43:72:e5:b8:c4:f8:d4:96:9a:
b2:b9:01:5a:01:75:dc:85:8c:f4:c9:23:90:82:e4:
d0:d6:36:33:5f:b4:0d:30:d4:c4:29:2b:af:8d:f1:
41:71:83:b5:ae:2b:a7:4a:4e:f8:cf:1d:6b:23:bd:
1d:e1:ac:9e:a2:ee:90:92:de:23:26:9e:f2:88:1a:
75:29:12:25:ff:98:86:51:20:58:70:ca:c0:a2:11:
a3:a0:cd:6f:88:86:8e:da:2d:61:9d:f9:0c:95:01:
12:58:f8:0a:44:57:c0:cd:ba:ab:b5:11:1f:9b:f4:
5e:5c:6a:af:d4:c1:be:ba:5a:06:12:be:e2:fb:03:
d0:6a:e2:db:44:95:08:8f:e3:2e:4e:59:e0:e1:76:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:69:CF:21:43:DE:23:CF:6F:E9:18:71:CA:66:FB:26:F3:C0:47:84
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jmnPIUPeI89v6Rhxymb7JvPAR4Q.roa
sbgp-ipAddrBlock: critical
IPv4:
210.250.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:0c:f0:e4:29:75:28:b5:d4:8c:07:89:80:8c:f3:a7:0d:32:
41:bb:8c:8f:ed:57:21:07:ba:59:5b:e7:70:58:f8:1a:a0:ea:
df:9a:9a:fd:e1:fb:2f:f5:3c:90:51:e4:67:5c:45:98:47:36:
0f:8b:38:a7:36:e9:32:e8:76:70:84:50:6b:77:0f:83:9b:32:
e3:f4:20:48:90:67:2d:1e:59:dd:80:fd:c6:ea:f1:d4:06:00:
09:4a:42:a5:ac:09:35:52:09:7c:9f:d2:0f:d8:a0:78:e8:49:
23:a0:c7:ae:0a:a5:3b:7b:dc:f8:5b:9e:db:69:2f:e4:aa:50:
53:d8:30:19:1e:30:5c:90:c8:d8:44:86:86:8e:5d:db:4b:14:
70:34:1a:cd:f0:df:ba:6d:80:1c:17:4e:aa:09:50:57:71:3f:
e3:38:dd:f3:a1:20:55:a8:71:80:ff:ca:22:f1:fc:a8:d0:f6:
c0:25:6a:cb:98:ca:a0:e7:81:a0:78:56:69:0e:88:ea:31:f4:
b5:3e:98:29:3c:53:4e:8c:96:df:62:54:1c:65:3f:a0:42:dc:
28:e9:92:8a:81:e3:bb:6d:c2:9a:49:26:f3:a2:0d:44:9d:bd:
d6:83:74:e7:42:70:13:66:d4:59:3a:88:f4:0e:82:53:54:f8:
c3:bd:b4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:11 2026 by rpki-client