
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/O6HlkYuGiq10-HRlIno3gxsmelU.roa
File: O6HlkYuGiq10-HRlIno3gxsmelU.roa (raw, json)
Hash identifier: Y40JUNuxntpDVkMC9BBRpKma/mg2bqY0q42V9GDsGc0=
Subject key identifier: 3B:A1:E5:91:8B:86:8A:AD:74:F8:74:65:22:7A:37:83:1B:26:7A:55
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: FA
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/O6HlkYuGiq10-HRlIno3gxsmelU.roa
Signing time: Tue 31 Mar 2026 08:30:01 +0000
ROA not before: Tue 31 Mar 2026 08:30:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 219.121.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Mar 31 08:30:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3BA1E5918B868AAD74F87465227A37831B267A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:b1:e7:94:c3:95:5f:87:79:ed:ca:67:8e:
15:1f:5b:95:4a:7c:be:9c:a5:97:13:f3:45:28:99:
b1:5a:56:c3:d4:69:a5:4f:29:78:97:5b:ed:95:fb:
75:3e:d1:d4:0a:f6:5c:cf:24:31:7f:bb:e4:29:86:
41:19:22:ad:0b:0d:be:74:42:b1:b0:5e:81:f3:03:
0f:09:33:f8:e6:74:25:bf:50:b8:a2:87:d9:de:23:
2c:78:fe:80:76:5c:b4:c0:a1:4b:26:3f:d5:81:56:
bf:88:d3:80:48:3f:9d:91:42:f4:03:21:31:e4:40:
40:d9:c1:7d:11:c7:3b:40:59:c7:1e:1c:35:39:d1:
05:19:38:80:f8:b5:c5:cd:89:eb:e2:e8:a7:d0:90:
b9:8f:a1:36:7e:41:21:d9:3a:a3:23:a6:8c:09:21:
69:18:a8:59:16:fa:de:81:db:b8:75:4b:84:00:ed:
a9:b5:4b:71:e5:a5:c2:46:3d:1f:2f:92:8a:cb:25:
4f:c4:b6:62:72:d7:dc:18:81:2a:be:bc:ae:91:28:
9f:8d:ce:49:52:09:b1:ca:a4:9f:e0:3b:77:06:64:
bc:d6:5e:47:5d:8e:6b:b5:20:9f:c8:7c:41:55:a0:
ff:df:ad:98:8e:55:4b:24:6b:aa:5e:0a:11:e6:33:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A1:E5:91:8B:86:8A:AD:74:F8:74:65:22:7A:37:83:1B:26:7A:55
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/O6HlkYuGiq10-HRlIno3gxsmelU.roa
sbgp-ipAddrBlock: critical
IPv4:
219.121.0.0/18
Signature Algorithm: sha256WithRSAEncryption
64:e9:66:02:f0:8f:4c:b0:ab:0a:d7:6b:8d:77:f1:51:fc:72:
0f:4a:4e:45:ce:57:e2:00:60:08:e9:5d:0d:42:1f:0a:0e:a5:
9b:7e:ed:39:2d:a9:7c:d4:99:59:b2:27:eb:33:6e:d9:82:fc:
27:e9:52:1d:06:5a:73:70:3c:45:db:01:3e:26:0e:c2:79:2d:
69:62:85:e3:19:47:2e:67:1b:5f:5b:b4:8a:a6:61:78:65:f4:
21:b3:6d:da:f3:7b:90:9b:14:bd:cf:a7:6c:33:3e:7a:e1:c5:
38:5b:54:b6:23:c8:7c:0f:23:34:42:35:8d:df:79:3e:08:9e:
7e:0e:c4:9c:ce:f4:31:9b:36:c2:e6:c3:f9:b0:b7:1a:96:8c:
87:8b:31:fa:ac:74:6d:09:9e:41:2c:9d:d6:06:e9:79:d8:be:
87:3b:30:0f:e7:9a:15:e2:8f:a6:0f:cb:dd:8d:85:a1:5a:40:
42:f1:e9:5a:24:d5:22:e9:6f:d8:5f:2f:c9:18:1d:fe:0d:ba:
10:7b:34:18:21:eb:ab:ae:04:41:d4:24:c9:05:af:88:53:31:
34:e0:99:9d:da:de:1c:00:a7:58:90:af:9c:f1:2f:f5:ca:74:
8f:6c:77:83:e4:2b:e2:24:6b:1e:b6:d4:3a:55:01:d4:0f:12:
23:7b:7b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:53 2026 by rpki-client