
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/UgNzI9TtYBWMba7CxyNi8QqJ5dk.roa
File: UgNzI9TtYBWMba7CxyNi8QqJ5dk.roa (raw, json)
Hash identifier: NwJgC2K/8P7Zdeqnu9Kh1pRdOrF2W36dSdzg9Tw7MIw=
Subject key identifier: 52:03:73:23:D4:ED:60:15:8C:6D:AE:C2:C7:23:62:F1:0A:89:E5:D9
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: 0115
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UgNzI9TtYBWMba7CxyNi8QqJ5dk.roa
Signing time: Tue 31 Mar 2026 08:30:17 +0000
ROA not before: Tue 31 Mar 2026 08:30:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 220.150.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 277 (0x115)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Mar 31 08:30:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=52037323D4ED60158C6DAEC2C72362F10A89E5D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:ec:55:72:60:62:29:23:0c:60:9c:55:a5:
76:c6:f7:02:ea:db:b9:e8:8f:8e:4a:ce:b0:87:3b:
ec:ef:99:59:32:a5:f3:ab:d7:b7:4a:51:8c:7b:90:
46:88:a9:8f:21:d9:b3:56:f4:17:8a:46:bb:38:91:
93:f8:8c:9b:8a:83:c0:cf:c6:4a:85:a9:b5:b5:98:
9d:e8:47:18:f0:2c:0b:a2:c0:77:f3:57:3d:fb:ff:
47:d1:60:3b:94:33:b6:e8:04:72:36:ba:3b:ce:14:
49:ea:56:72:3c:63:4c:ee:e1:f7:84:01:bc:0f:ee:
5e:4b:60:42:47:40:5c:c3:e2:3f:69:66:7e:05:17:
c3:eb:b4:fa:19:8f:84:e8:d7:af:90:3a:a4:95:b8:
e6:1d:f3:95:5f:34:6f:f7:69:7d:93:1c:73:e8:2c:
d4:4a:1c:39:bc:dd:95:9e:ca:62:e1:33:e5:18:b9:
6a:0e:19:a3:75:bd:65:29:9d:48:0a:a3:8a:d5:b3:
23:cb:4a:0d:b9:43:00:8a:52:fb:ef:b5:77:db:be:
54:0f:69:ad:e3:36:d8:1f:83:7e:65:42:da:13:89:
1a:85:94:c7:3b:7b:54:27:29:d6:85:93:b6:b9:b3:
9f:d4:43:87:00:93:a9:31:f3:19:7b:72:c7:f2:f0:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:03:73:23:D4:ED:60:15:8C:6D:AE:C2:C7:23:62:F1:0A:89:E5:D9
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/UgNzI9TtYBWMba7CxyNi8QqJ5dk.roa
sbgp-ipAddrBlock: critical
IPv4:
220.150.128.0/18
Signature Algorithm: sha256WithRSAEncryption
73:eb:ba:a9:79:79:05:a2:96:89:1f:bc:0e:dc:c5:fb:04:c9:
11:6c:ce:54:4b:69:5b:f2:e6:59:27:e9:bd:18:18:33:b9:c9:
ea:30:ed:5b:cc:e4:64:30:8f:30:8c:9c:7e:ad:91:19:ad:d1:
97:23:06:f7:45:12:ff:ca:31:4e:d2:74:4a:8e:d1:f5:00:79:
9f:41:7d:92:53:a5:41:97:2b:43:33:e8:f1:50:58:d9:b3:0b:
ea:68:24:94:a6:47:00:be:37:81:fd:1e:f1:fb:5f:86:e8:1f:
cc:e5:fa:3c:07:05:ca:c6:36:a6:f3:7c:5c:fe:19:8e:2b:f3:
bc:21:a6:79:1f:72:9e:d3:df:82:8b:95:5f:c3:c5:7a:da:47:
7b:8e:05:bd:48:4b:bd:a9:d3:65:1b:54:8a:48:e0:4e:e7:67:
d1:13:c3:56:fd:25:3f:73:dc:c5:fe:09:3e:f5:0a:bc:b6:cf:
98:19:02:fb:c7:cf:99:83:bc:a1:10:bc:a9:91:62:ee:83:53:
d3:24:d1:ab:88:12:b6:a1:98:45:10:25:b3:71:be:ec:a6:e7:
95:0d:15:ce:d6:03:a8:1e:88:04:f8:b6:04:fc:d8:a3:b7:4b:
0d:74:e7:b5:e0:b3:1b:85:b9:fa:56:01:28:0f:37:02:9e:6d:
7c:0e:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:46 2026 by rpki-client