
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/rk-J5ggHAFRol2W5mZTAqCw1SHs.roa
File: rk-J5ggHAFRol2W5mZTAqCw1SHs.roa (raw, json)
Hash identifier: b+kHGrOdNLRcWqwtfVlowOCniiFGXzNUJaXuQQKxmHI=
Subject key identifier: AE:4F:89:E6:08:07:00:54:68:97:65:B9:99:94:C0:A8:2C:35:48:7B
Certificate issuer: /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial: A3
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/rk-J5ggHAFRol2W5mZTAqCw1SHs.roa
Signing time: Tue 31 Mar 2026 08:14:42 +0000
ROA not before: Tue 31 Mar 2026 08:14:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17676
IP address blocks: 61.213.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Validity
Not Before: Mar 31 08:14:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AE4F89E608070054689765B99994C0A82C35487B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:b2:a5:16:02:0f:81:80:a7:2b:19:c3:3f:
50:a4:5f:20:ce:cc:a8:34:18:d6:c7:cc:8d:31:b9:
cc:0c:82:89:67:af:8b:bf:b6:75:5d:b8:19:52:c4:
0e:b8:c7:66:b4:e4:50:14:3b:a3:92:32:6f:71:5a:
9d:e0:c4:c6:96:be:14:ca:fb:81:b7:c2:3d:93:ed:
33:db:4b:cb:02:89:fb:1e:e7:8a:e6:b3:8d:c9:f1:
50:6c:1c:b6:1f:f7:11:26:97:f8:c0:72:51:b1:0b:
76:ed:eb:58:79:26:60:91:15:d4:c8:09:e1:ac:2f:
a8:9f:3b:77:2c:e8:56:f0:6d:eb:b3:8f:5b:b9:c4:
0c:2e:1b:44:df:88:07:6a:33:6b:d9:38:6e:59:96:
6c:5b:b8:9a:dc:95:03:93:3e:f2:44:f9:27:df:07:
01:79:bf:d3:e5:e7:5a:2a:0f:2a:a9:b7:13:94:3a:
2f:b3:f6:e2:2c:2b:3c:44:57:31:3f:7e:c0:51:ef:
f2:77:62:76:db:6b:9c:75:08:c2:93:e0:9f:88:b5:
e9:d0:6b:1e:22:49:d0:8c:a4:b6:b9:70:72:b5:ce:
8b:50:a5:88:f3:72:c1:6f:0a:36:42:28:2a:d3:11:
84:9f:47:38:45:34:61:e3:cf:26:67:98:1b:7f:ab:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4F:89:E6:08:07:00:54:68:97:65:B9:99:94:C0:A8:2C:35:48:7B
X509v3 Authority Key Identifier:
keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/rk-J5ggHAFRol2W5mZTAqCw1SHs.roa
sbgp-ipAddrBlock: critical
IPv4:
61.213.0.0/20
Signature Algorithm: sha256WithRSAEncryption
00:be:a3:99:a5:c5:fc:e5:c1:51:cf:09:8a:a5:80:30:74:65:
bf:e2:3d:f1:36:51:e9:61:56:a1:8c:64:2e:f4:41:55:5f:76:
21:76:51:e2:d0:d8:64:98:f2:a5:13:5f:a7:ab:38:76:9a:d1:
ea:d0:93:49:c2:f5:ad:b3:2c:9a:40:20:46:84:73:e4:2d:d7:
f0:1b:81:d6:df:49:f1:11:eb:7d:5b:64:36:65:04:f3:e6:0f:
dc:e3:c6:35:73:30:84:85:05:23:fc:fd:6f:40:7f:8c:1c:0d:
21:e3:db:59:a7:ae:8f:bd:d7:88:2f:24:5b:93:a6:6f:da:70:
67:d9:99:d2:b1:81:fb:ac:f2:ea:28:01:67:4b:a5:20:82:d6:
56:bc:b4:e9:76:4c:4a:ba:67:05:94:77:74:7b:12:e6:bf:16:
2c:f0:03:86:c3:84:0d:4d:ec:c6:58:ae:57:65:c6:b1:c1:1e:
55:9e:a5:61:d8:b1:5d:de:df:b4:12:c3:a8:a2:dc:e9:ac:18:
ca:5e:c3:f3:bd:8b:81:26:18:39:29:e4:80:ed:ec:dc:c9:f5:
f9:b1:20:79:0b:89:92:45:02:67:38:50:9f:1c:ae:52:0a:e7:
6b:b6:b2:01:2f:4b:29:8c:cb:bd:27:ed:0d:96:75:40:71:88:
04:07:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:19 2026 by rpki-client