
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/t-OwWhP_l7OzfWRjB2wqppadB2M.roa
File: t-OwWhP_l7OzfWRjB2wqppadB2M.roa (raw, json)
Hash identifier: kGPEQcDUBJvw+3OyyqMHC8qRbYxBkSbD8tLiIQHbE9Q=
Subject key identifier: B7:E3:B0:5A:13:FF:97:B3:B3:7D:64:63:07:6C:2A:A6:96:9D:07:63
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: 010C
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/t-OwWhP_l7OzfWRjB2wqppadB2M.roa
Signing time: Tue 31 Mar 2026 08:30:14 +0000
ROA not before: Tue 31 Mar 2026 08:30:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 202.208.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Mar 31 08:30:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B7E3B05A13FF97B3B37D6463076C2AA6969D0763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a6:9b:4e:68:0f:09:ba:59:fe:9e:e2:27:2c:
12:56:dc:88:dd:af:a4:de:ed:58:56:a5:95:fe:56:
f9:ce:53:f6:12:df:72:b6:fb:86:20:53:ff:23:7d:
ae:4d:ac:8a:0b:bb:e3:7b:e5:a1:f0:fc:60:fe:bf:
c1:21:52:7a:6e:e7:a5:6e:ca:5a:c6:93:1f:66:15:
c3:2a:41:10:7c:62:b5:12:a0:d5:4d:95:b0:96:bd:
0b:fc:82:19:dd:7a:bb:af:79:93:36:3a:a4:d7:22:
8d:2d:60:81:c2:9c:eb:45:5a:f6:b4:26:ab:78:1d:
60:db:63:30:b8:67:a4:e3:5e:6f:09:ac:5b:51:f3:
3f:da:bc:27:9f:98:03:7b:32:c0:40:e6:83:10:54:
f5:e3:3a:02:81:89:f1:a7:68:bd:05:54:d2:b0:ce:
f4:58:25:b2:9e:d3:cc:e7:85:f0:3f:77:53:bd:64:
93:e0:cc:b5:22:2c:c7:46:23:89:1b:f5:1d:19:0b:
19:5f:73:a2:34:5f:9d:98:3f:fb:fe:f3:78:4f:d7:
01:be:c4:42:71:d8:e1:a7:5f:5a:e1:b8:a2:d8:aa:
02:a3:2e:ab:1a:f9:94:8f:b5:b7:78:cc:71:5a:66:
21:3a:73:ee:be:c8:88:a1:ea:54:29:6a:6f:59:36:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E3:B0:5A:13:FF:97:B3:B3:7D:64:63:07:6C:2A:A6:96:9D:07:63
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/t-OwWhP_l7OzfWRjB2wqppadB2M.roa
sbgp-ipAddrBlock: critical
IPv4:
202.208.128.0/19
Signature Algorithm: sha256WithRSAEncryption
50:c5:45:f3:cd:6e:b4:cc:c4:85:34:3c:c4:97:b1:3c:9f:b8:
a8:a1:74:d4:8c:67:de:14:66:98:57:bc:31:db:fc:ba:e6:e4:
9c:cc:fa:1d:8d:e5:8f:6b:3a:23:14:b6:a0:b7:49:6e:7f:fd:
21:d7:b0:da:da:74:3e:4a:1c:73:0d:7b:09:8d:2f:18:82:94:
d0:9d:79:a7:d0:30:37:54:ff:cf:04:13:72:49:e9:7a:2c:f1:
5f:f8:a6:3c:9f:a0:56:1b:f1:0e:06:cb:a2:76:26:4a:5e:f7:
c7:14:46:d3:24:00:e6:ed:fd:b8:f5:72:cb:e0:11:0a:c7:bc:
d5:8c:0b:5b:7a:b0:45:00:6e:a2:bf:80:34:05:12:b2:a9:79:
e6:0e:d3:56:3f:7e:ec:05:d6:e9:76:62:f9:dd:ff:2c:a7:40:
20:00:5e:6e:b9:a6:ff:89:39:7a:bb:c5:03:47:6d:fc:a2:16:
40:e2:1c:0e:b6:87:de:b9:d3:7d:43:0b:a6:fa:f0:85:6d:03:
b1:ca:64:f6:0a:34:cb:84:da:3f:57:43:1d:3a:07:28:3e:d7:
0b:77:e2:57:28:3d:56:f5:44:02:0e:a6:49:ca:eb:f4:23:40:
1e:cf:2d:16:7d:6e:cd:dc:04:a4:58:a8:1c:f6:d3:d5:f0:56:
4c:d1:70:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:03 2026 by rpki-client