
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/zkEYUpgZfXAu5WR4boa9r7KXBtM.roa
File: zkEYUpgZfXAu5WR4boa9r7KXBtM.roa (raw, json)
Hash identifier: mJ0ooW5NF3YbEppJLeJootDckLdHN3M+59pZKklhGYc=
Subject key identifier: CE:41:18:52:98:19:7D:70:2E:E5:64:78:6E:86:BD:AF:B2:97:06:D3
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: F4
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/zkEYUpgZfXAu5WR4boa9r7KXBtM.roa
Signing time: Tue 31 Mar 2026 08:29:57 +0000
ROA not before: Tue 31 Mar 2026 08:29:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 211.132.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Mar 31 08:29:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CE41185298197D702EE564786E86BDAFB29706D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:1c:e0:f1:19:97:67:70:4f:b2:14:3b:3e:
13:ae:c0:c9:9a:89:fc:fc:f3:54:a6:38:9f:c8:e3:
43:2a:23:5f:81:40:c0:84:25:a6:d3:aa:78:95:bf:
68:10:4a:b3:20:34:15:df:b4:71:f3:b3:17:07:3f:
41:49:f1:c2:4b:4e:61:80:f6:e9:4b:24:c4:a2:b9:
9e:ed:c0:b6:bf:ae:2c:c6:d1:14:09:9f:0b:4e:86:
b5:16:a3:7e:b0:64:d3:b8:d5:a2:4b:ba:30:c4:c1:
bd:57:b2:ae:7c:0d:25:57:92:dc:58:97:15:8e:1f:
48:24:56:74:bd:73:b1:35:52:2b:9f:85:48:fd:bb:
3e:b5:0e:63:68:d7:58:a1:e0:93:b6:81:b7:05:60:
83:0b:1b:51:61:ec:b7:54:5b:7a:20:ed:21:7e:e8:
f4:c1:30:ca:c1:95:a5:29:79:d4:82:39:72:e0:65:
85:f4:ba:25:e1:fd:75:7a:e9:1d:a3:77:97:c0:5f:
08:a2:43:73:73:9f:f3:97:af:36:e0:5e:df:2c:81:
76:16:6b:86:4c:47:e4:6a:90:76:f1:76:58:fc:3c:
a1:58:78:46:cf:4e:47:d5:a3:92:74:ff:84:a1:9d:
cd:a3:b3:00:4f:54:35:59:9b:23:dc:56:bc:76:ca:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:41:18:52:98:19:7D:70:2E:E5:64:78:6E:86:BD:AF:B2:97:06:D3
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/zkEYUpgZfXAu5WR4boa9r7KXBtM.roa
sbgp-ipAddrBlock: critical
IPv4:
211.132.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d5:7f:28:7f:04:f8:9f:db:bc:1c:c0:b3:0c:fd:31:f1:13:3d:
23:0c:79:3d:cf:20:20:12:c4:31:ca:4f:bd:d9:8c:07:10:58:
8b:7d:d7:c1:42:0c:95:ef:64:13:5f:44:f1:46:6b:b3:75:94:
ac:74:a7:37:70:86:ae:6e:47:92:84:21:03:05:f2:75:42:13:
e8:f6:34:ef:60:70:7c:cc:df:fb:fd:f1:ec:01:f4:b3:2f:73:
68:9a:9e:79:f0:c5:0a:c7:c7:4f:89:d0:56:e0:5a:0b:4c:e3:
3b:c2:ca:f3:1b:93:04:f2:1b:4d:75:cc:b1:8a:50:ac:fe:49:
63:f7:b3:83:f4:f0:22:d2:1a:a7:39:de:83:00:d3:16:4b:80:
4d:c6:22:1b:f9:7f:ac:0d:ee:64:c3:3f:c8:92:51:8a:96:90:
4a:5c:9c:65:1c:df:cd:a5:56:32:4d:8e:a1:45:36:03:7b:0d:
4f:0f:5e:7b:e2:aa:26:ef:30:ae:5d:4a:f0:19:f4:31:11:a0:
30:f9:4a:98:bc:42:2f:11:3d:61:00:82:02:94:d7:bc:b6:b3:
ac:9e:06:d7:8b:8b:f5:2e:da:61:78:af:7a:5b:5c:80:19:9b:
7c:07:f9:63:8b:be:3d:67:bb:59:43:98:1c:a5:63:8b:2c:43:
52:2a:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:26 2026 by rpki-client