
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/JBav2nPEPto814xK1ZZj1tU8ZYo.roa
File: JBav2nPEPto814xK1ZZj1tU8ZYo.roa (raw, json)
Hash identifier: 6CNuOsPKbxs0w5ViX9F3ZTcyiq9r+DzF7gUlGSvtB1g=
Subject key identifier: 24:16:AF:DA:73:C4:3E:DA:3C:D7:8C:4A:D5:96:63:D6:D5:3C:65:8A
Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial: 45
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/JBav2nPEPto814xK1ZZj1tU8ZYo.roa
Signing time: Tue 31 Mar 2026 08:43:36 +0000
ROA not before: Tue 31 Mar 2026 08:43:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9354
IP address blocks: 202.157.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Validity
Not Before: Mar 31 08:43:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2416AFDA73C43EDA3CD78C4AD59663D6D53C658A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:c3:54:14:c2:c5:49:01:b7:bc:a4:6e:5b:
d3:cc:24:58:8e:0c:f1:74:a1:61:53:cd:15:3c:52:
62:c3:06:14:81:52:fc:42:79:0d:c3:2f:59:83:9e:
1b:37:a6:87:67:71:7b:25:00:2b:93:18:0f:df:59:
9c:3b:03:13:34:d9:14:df:95:25:fd:06:d4:d1:5d:
3e:43:dc:23:92:be:26:0c:09:b8:46:ac:c6:41:64:
e2:dc:7b:b5:bf:b9:7d:7c:48:78:bd:26:08:22:f4:
82:d8:0b:af:60:33:50:ef:79:42:69:76:b8:fd:77:
8c:91:01:a2:40:20:96:f9:fd:33:ce:5e:f9:0c:af:
50:56:3d:a1:cf:3f:06:39:e7:61:f0:82:cd:c8:a3:
8c:85:07:8b:d0:82:34:ab:7b:13:60:1e:d1:67:0e:
aa:0a:78:9d:5b:df:43:a6:ac:c5:27:5a:dc:c7:87:
94:63:1a:70:7f:c8:e6:30:8b:f0:5e:7d:c4:af:2d:
6d:56:58:88:bb:a6:05:77:b9:33:76:92:2f:c3:e9:
56:ed:d5:2b:f2:fb:0d:fb:80:bf:63:b6:96:59:7b:
99:21:19:81:9a:3f:ef:e7:d2:1e:f6:1b:e9:c4:80:
ea:a6:97:2c:05:3a:09:3a:ea:26:9e:a6:99:df:63:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:16:AF:DA:73:C4:3E:DA:3C:D7:8C:4A:D5:96:63:D6:D5:3C:65:8A
X509v3 Authority Key Identifier:
keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/JBav2nPEPto814xK1ZZj1tU8ZYo.roa
sbgp-ipAddrBlock: critical
IPv4:
202.157.236.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:7a:62:28:e8:74:7f:bc:17:b4:a9:c9:c3:79:70:4b:65:b0:
4b:8c:4f:10:e3:d7:b7:1c:c1:10:48:b3:43:39:f4:b7:c1:bc:
5d:17:93:cb:b8:b0:22:ec:d1:79:b6:da:c3:84:35:4b:89:fb:
bb:b9:ff:10:a1:ca:96:fc:f8:1e:2c:f1:84:13:0b:7a:e8:dc:
ed:e7:98:da:1c:18:b1:b9:d6:f9:ef:ec:01:0b:25:37:b0:07:
97:00:d5:99:21:19:eb:b0:1e:55:43:38:61:71:a3:b5:d2:d9:
7b:ea:92:3c:7d:0b:0b:0f:77:22:df:80:ac:d2:78:aa:bb:ea:
be:62:29:97:a2:4f:3c:04:32:e3:98:2b:b4:8e:fa:9e:c0:7c:
0a:49:5c:e0:4b:72:40:2a:4b:db:69:59:65:85:62:81:bd:88:
68:d7:a6:ff:46:d3:a8:66:f8:30:b6:9a:e2:d4:e0:47:ec:fa:
0c:f8:4d:d6:54:07:be:8b:46:59:4e:eb:79:f5:e0:b2:84:b4:
b9:18:b4:38:bc:24:56:72:02:e4:7a:4b:27:a6:25:a7:a8:d9:
4f:08:fc:f6:db:74:97:43:7d:b4:8e:21:2d:4b:18:d0:5b:a5:
c5:77:e8:4c:15:49:d2:3e:61:c6:54:be:7c:84:7c:94:97:6c:
b0:47:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:39 2026 by rpki-client