
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/s2s-63cnF58GKKrrSns67PA45bs.roa
File: s2s-63cnF58GKKrrSns67PA45bs.roa (raw, json)
Hash identifier: +fY9V/5nmlXNCXL9z6KT75+ptaeHdgg6EXqM/z6Hj/I=
Subject key identifier: B3:6B:3E:EB:77:27:17:9F:06:28:AA:EB:4A:7B:3A:EC:F0:38:E5:BB
Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial: 6A
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/s2s-63cnF58GKKrrSns67PA45bs.roa
Signing time: Tue 31 Mar 2026 08:31:42 +0000
ROA not before: Tue 31 Mar 2026 08:31:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24257
IP address blocks: 202.90.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Validity
Not Before: Mar 31 08:31:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B36B3EEB7727179F0628AAEB4A7B3AECF038E5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:c8:a2:ae:96:db:f3:ad:fb:db:52:38:1a:
5a:a5:dd:b3:13:df:11:e0:cf:43:4c:60:d1:45:74:
c7:ae:d7:b3:05:02:c8:fc:84:12:eb:cc:e6:de:76:
6e:8e:71:c1:62:03:58:a7:69:4e:8a:d0:ac:a1:c6:
1c:63:c4:19:9f:db:27:aa:75:d2:27:9a:db:3b:45:
07:37:b5:8a:d8:22:c2:57:49:c0:d7:6c:a7:c9:f0:
d5:b9:05:62:1a:2d:a5:29:c1:45:e9:24:d0:8f:f0:
8a:bc:db:a6:fe:af:98:68:bc:86:a4:5c:32:22:0a:
ad:54:a8:df:8b:68:71:2a:6e:c4:7e:5b:e7:43:df:
9e:89:b9:62:ec:89:d7:01:f1:51:c9:5c:22:b6:b3:
60:6f:06:86:29:ef:0b:31:cf:a6:2f:44:fd:b4:23:
e0:1c:c5:ca:ed:c6:ad:cc:27:07:e5:35:ed:38:ff:
0d:c6:68:9c:eb:9c:f4:34:3a:fc:49:1e:54:3f:08:
fc:68:b2:23:99:0e:28:20:6a:84:59:aa:23:ad:53:
18:a8:b5:17:37:e5:c7:ca:7e:12:9e:4d:b0:9e:34:
1a:5b:1c:86:c5:6f:da:fa:e9:12:81:0b:b8:5a:bf:
71:ce:ea:8a:c2:95:41:d5:3d:19:df:20:f0:f2:6a:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:3E:EB:77:27:17:9F:06:28:AA:EB:4A:7B:3A:EC:F0:38:E5:BB
X509v3 Authority Key Identifier:
keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/s2s-63cnF58GKKrrSns67PA45bs.roa
sbgp-ipAddrBlock: critical
IPv4:
202.90.11.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c4:d2:e1:38:df:e5:8d:bc:dc:24:5d:45:d4:3d:d8:eb:e5:
55:f5:6d:4c:8c:d3:3f:6c:85:1f:37:9e:66:da:9e:4a:eb:05:
eb:c9:17:88:ee:73:fb:12:20:54:ad:10:20:ae:de:dc:7e:bf:
44:9c:99:10:eb:26:41:d0:31:34:39:f9:0d:2d:07:e8:7d:c9:
ff:9d:3f:3e:93:19:58:cb:2d:46:bc:95:43:84:3f:e8:f9:fa:
63:39:19:02:83:89:e9:c3:6b:b5:ef:72:c7:2a:01:8f:c0:03:
24:17:6f:fd:f4:45:e8:3c:ea:de:d1:7a:09:ef:56:b0:59:c3:
53:8f:52:ac:a6:80:af:4b:52:12:13:c9:3e:9f:b6:aa:cf:71:
4a:7b:ac:40:eb:d3:79:8e:21:a0:b9:12:3b:36:f5:db:49:2b:
a3:12:7c:78:5b:db:81:38:31:69:20:72:9e:83:56:44:a9:84:
b3:a4:b3:f0:29:15:7a:44:a8:cb:d7:9c:cb:eb:6e:ac:e6:96:
be:a8:4e:47:49:00:98:98:1d:63:f6:83:19:02:f9:a2:cd:35:
5b:bf:74:b3:5e:cb:6e:9b:04:b6:92:c2:60:bf:fe:64:47:77:
d1:a0:cb:df:ba:29:5e:89:83:43:cb:f3:b6:8e:64:60:ff:2d:
17:73:27:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:16:17 2026 by rpki-client