
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa
File: RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa (raw, json)
Hash identifier: dH+Y/x6ELostYuMejTzsZsr0zbDF4lJpW1+RlbGhtjQ=
Subject key identifier: 47:18:8D:F2:1F:E9:08:DF:EB:AE:CF:BF:36:7F:50:66:E5:E2:75:40
Certificate issuer: /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial: 7A
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa
Signing time: Tue 31 Mar 2026 07:30:56 +0000
ROA not before: Tue 31 Mar 2026 07:30:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 16509
IP address blocks: 103.23.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Validity
Not Before: Mar 31 07:30:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=47188DF21FE908DFEBAECFBF367F5066E5E27540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:32:30:66:a4:5f:7f:dd:42:0d:5b:01:02:
0e:b5:b4:aa:1b:94:70:34:8c:0a:f7:d1:d1:33:90:
02:83:98:90:d2:79:b6:09:4f:27:04:fc:cc:0a:f9:
c7:1b:f6:9c:c5:af:e0:8d:86:df:9d:95:f7:dc:d0:
65:29:ff:1c:4d:12:68:d5:2d:b5:eb:f6:bc:d0:86:
52:f3:48:47:d7:c2:2f:2d:89:aa:09:8d:9a:25:f9:
ca:2c:1a:8a:fb:13:78:b0:1c:e7:1c:5d:27:b0:3f:
69:1c:3f:19:58:c0:91:70:c5:3a:fd:4d:e5:c1:22:
06:36:85:ac:5b:af:03:d5:af:59:a3:9a:f3:8a:f7:
6c:f0:76:fd:a1:af:46:c2:cf:83:ff:11:e4:13:54:
2d:b2:38:38:b6:49:e5:a3:59:0b:b7:87:3a:9e:c6:
b9:fe:38:41:87:da:4e:36:c3:54:f3:0c:34:3d:63:
f0:e7:ca:c0:5f:c9:54:f3:cb:6e:bc:d8:5a:81:2a:
08:84:55:41:ba:47:f0:e2:d7:61:88:04:e9:29:82:
8b:96:5b:c1:d5:1b:1e:ba:dc:be:d9:18:26:1e:6f:
50:7d:f9:39:ad:db:4b:44:24:00:c7:43:1d:66:71:
db:c3:ac:3a:13:ba:c4:c9:9c:32:3b:67:fa:e5:8f:
d2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:18:8D:F2:1F:E9:08:DF:EB:AE:CF:BF:36:7F:50:66:E5:E2:75:40
X509v3 Authority Key Identifier:
keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:72:a9:d8:bc:a3:1e:08:e2:44:91:bc:d5:62:ea:97:d4:a5:
51:81:ce:f9:bc:19:a7:95:1f:c7:ba:e6:45:3b:b9:d7:52:a5:
cc:2b:58:9f:6d:1d:03:04:9b:99:7e:be:fe:3f:c7:87:84:29:
b2:6a:5f:8f:75:ad:33:59:f9:c2:4c:17:11:c3:91:ae:18:b1:
af:d7:7c:ab:41:0e:9e:1c:a5:8e:48:2f:bc:ed:8f:00:11:85:
45:4d:1f:8e:3b:90:9b:e7:42:dc:f0:39:e3:1c:a6:b4:02:45:
23:50:9f:96:a5:8d:cd:8c:8d:30:5e:ce:54:93:e7:9e:f0:d4:
08:a5:e5:c3:a1:53:06:23:39:9d:f1:37:fd:1a:bf:52:fa:8a:
d5:b1:8b:22:53:a2:d0:ea:b4:66:37:cb:4d:83:8e:39:c9:fd:
61:ba:37:e3:43:dd:af:2b:0e:3a:d1:99:cf:0d:df:23:9f:55:
41:ef:ee:7a:4f:fa:8a:98:d9:d8:aa:6b:e4:43:4a:8f:b0:92:
71:8e:e9:cb:03:bb:71:17:21:0f:11:26:ce:43:83:54:20:4a:
18:74:5e:02:1b:3d:b4:de:17:5d:46:3a:6f:2c:44:e0:92:71:
e8:16:87:63:77:ac:99:f7:7b:24:25:b3:5d:6d:c5:87:7b:d9:
30:47:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:52:47 2026 by rpki-client