
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/aRAfV8MfZ14aFLfMHJRFHSCS7nk.roa
File: aRAfV8MfZ14aFLfMHJRFHSCS7nk.roa (raw, json)
Hash identifier: 2CqHwE0IRQiruRMClxK5zI5cduigUuE6kFUKPcCS61g=
Subject key identifier: 69:10:1F:57:C3:1F:67:5E:1A:14:B7:CC:1C:94:45:1D:20:92:EE:79
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: A6
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/aRAfV8MfZ14aFLfMHJRFHSCS7nk.roa
Signing time: Tue 31 Mar 2026 08:14:43 +0000
ROA not before: Tue 31 Mar 2026 08:14:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17676
IP address blocks: 61.203.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 13:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Mar 31 08:14:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=69101F57C31F675E1A14B7CC1C94451D2092EE79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:ec:d9:3a:6f:49:71:85:ba:1e:84:52:3e:
49:21:7b:2b:c5:b9:31:5d:fe:4c:23:85:2d:65:ca:
7d:6b:97:39:9b:1b:88:68:6b:0f:4f:73:f7:f6:81:
e6:e2:bd:10:a2:d9:a6:49:31:d6:d5:61:f3:52:fd:
e9:ee:e9:13:5f:b6:10:79:89:71:37:02:03:98:a1:
c8:60:24:a9:a8:a2:de:09:fb:74:c1:7d:dd:9a:89:
ec:14:c4:64:5e:fd:9e:a9:73:67:36:44:c1:68:33:
b3:04:e6:64:2b:0c:fd:1e:02:ef:a6:82:d4:12:bb:
84:df:c4:01:98:4e:a4:a0:07:b2:78:47:14:a8:e3:
b1:6b:86:b1:19:68:b5:33:cc:a4:c9:d9:06:44:6b:
18:92:18:43:21:a7:79:5a:97:3a:15:e5:f0:8a:c9:
9e:97:fc:2e:0b:5e:c3:80:3b:17:45:53:7b:dc:64:
37:53:d3:12:bc:a4:11:02:ac:23:56:38:50:4f:92:
40:31:da:f1:85:c7:ab:3f:f9:72:f6:5a:f0:ff:d9:
e2:6b:78:0a:7d:10:ab:8a:49:e9:49:7e:50:58:a7:
15:91:d0:06:89:f0:22:96:3f:4a:3a:ba:30:25:28:
a1:42:ae:45:c7:1c:56:93:09:11:94:3c:7c:cb:99:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:10:1F:57:C3:1F:67:5E:1A:14:B7:CC:1C:94:45:1D:20:92:EE:79
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/aRAfV8MfZ14aFLfMHJRFHSCS7nk.roa
sbgp-ipAddrBlock: critical
IPv4:
61.203.128.0/20
Signature Algorithm: sha256WithRSAEncryption
e0:b2:8e:42:57:09:da:61:bd:8d:e3:47:a6:d8:cb:2b:05:87:
05:d0:03:eb:bf:51:9f:b9:e4:75:f0:6f:32:b7:38:0d:f8:19:
42:38:2d:5c:3d:6c:e6:e1:cb:7b:a3:0f:be:38:8e:93:3d:ee:
eb:63:64:48:27:c1:9d:9c:7a:9c:16:cf:9f:57:f9:3b:24:5a:
6c:e8:76:a2:ec:e6:78:65:9d:bb:2d:12:32:ad:1e:0c:9e:e3:
eb:29:ba:d6:f9:12:b7:7d:32:a7:f8:7e:37:dd:1d:d7:31:9c:
84:bc:b4:6b:12:e2:97:f8:08:33:54:19:56:2a:17:71:f5:54:
7e:cc:e5:21:a7:6c:f8:a6:4a:5f:74:ae:76:f7:c2:23:67:81:
40:b2:05:a5:12:ae:5b:49:4d:27:93:d4:9c:20:40:4a:d6:c5:
af:31:04:5a:27:76:e9:a8:0b:9b:68:9f:a6:50:87:c2:e0:16:
75:78:7d:64:2a:5c:a5:6f:3c:ec:3b:34:b3:9f:4d:6a:bc:30:
66:b1:a6:3b:28:30:d8:0d:75:e0:97:17:b7:77:b0:c9:5b:e3:
90:8a:bd:2a:03:b5:54:2f:01:6e:7d:fd:de:4d:ce:ac:ef:b4:
49:85:c3:0c:81:f4:24:6d:a1:b6:11:01:6c:e0:3b:03:3e:f4:
e0:8a:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:33 2026 by rpki-client