
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/CQMvGxvB3RIw3tlfqJbuHdCEbPI.roa
File: CQMvGxvB3RIw3tlfqJbuHdCEbPI.roa (raw, json)
Hash identifier: xIverMDhJKmycv/RdHC/h6gPVltLQ9B3oaIDaCurvZw=
Subject key identifier: 09:03:2F:1B:1B:C1:DD:12:30:DE:D9:5F:A8:96:EE:1D:D0:84:6C:F2
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 069D
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/CQMvGxvB3RIw3tlfqJbuHdCEbPI.roa
Signing time: Tue 31 Mar 2026 07:28:16 +0000
ROA not before: Tue 31 Mar 2026 07:28:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 219.126.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1693 (0x69d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Mar 31 07:28:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=09032F1B1BC1DD1230DED95FA896EE1DD0846CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:ba:7f:20:c5:36:df:7e:23:69:74:ee:1b:
66:14:c3:b7:a8:91:b7:8d:e3:95:d8:b5:63:0b:3a:
d6:16:d3:13:a0:ba:43:97:a7:8e:3d:6f:02:bc:8b:
82:21:c0:a6:60:e9:6b:0d:57:07:2f:e7:b5:08:ef:
21:08:08:4b:b9:34:b3:c6:ce:7b:5c:5a:ff:8a:71:
5e:20:ac:17:84:da:6c:e7:48:3f:6e:8a:8f:d3:d7:
9e:c3:2c:58:a1:f9:ad:47:2b:e6:aa:ff:fb:bd:30:
46:3d:29:b5:b4:34:62:4c:fd:57:02:4d:08:16:8b:
26:49:b2:a6:f1:67:92:e6:18:f9:1d:bd:d9:e7:c2:
40:d2:17:a0:89:54:ef:c6:f4:6e:fe:e2:c1:13:e9:
04:c2:e2:8d:08:c4:aa:6d:c5:a3:d0:ee:b7:20:27:
16:ff:b8:4c:d7:48:80:7e:72:0d:a5:1b:07:21:f5:
3c:5c:cf:c7:38:76:63:ab:39:0e:e1:26:f7:d4:2d:
a9:0e:ea:9c:04:2f:cb:ee:c4:d2:2d:57:1e:7d:97:
b7:c3:c1:27:b1:62:0c:40:4b:85:2b:36:4b:23:5f:
a7:35:c7:d5:37:f8:81:06:5c:6f:bf:cc:2c:42:b2:
8b:76:64:ae:a5:04:e8:ac:da:b5:ae:53:87:ec:00:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:2F:1B:1B:C1:DD:12:30:DE:D9:5F:A8:96:EE:1D:D0:84:6C:F2
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/CQMvGxvB3RIw3tlfqJbuHdCEbPI.roa
sbgp-ipAddrBlock: critical
IPv4:
219.126.96.0/19
Signature Algorithm: sha256WithRSAEncryption
42:df:43:66:2b:ec:8a:f1:cc:49:28:b7:b2:f6:d8:11:01:18:
5b:c3:bc:fb:8b:6f:e0:9d:cb:73:07:36:a7:b3:be:21:4c:c5:
1c:f6:29:0f:b1:54:f0:65:fb:57:e1:fa:d0:ee:7a:d7:40:0b:
5c:cf:d1:86:be:f4:cf:df:bb:de:da:0c:de:05:25:5a:a1:3b:
03:93:fd:f4:08:87:a9:f6:fd:e8:78:2f:3d:c9:60:26:69:21:
95:b8:6c:94:12:4b:3c:8b:be:59:5e:69:08:5e:af:ce:2f:98:
06:5a:ce:10:bb:64:1e:a8:bd:a6:f8:12:6a:33:d0:66:e8:1f:
0a:4d:03:2f:7f:8f:40:45:85:aa:19:1f:41:c6:9d:4c:4e:7a:
45:5c:eb:6a:e7:cc:8f:4e:62:e2:61:ab:3e:f8:c1:d0:ff:30:
30:c0:0e:86:86:6c:6d:ea:e5:37:8e:96:98:db:fc:20:2f:09:
c7:21:0c:ff:78:fc:90:0b:d7:57:14:16:da:40:4c:d9:d2:f6:
36:0a:4f:9d:6b:c1:55:95:04:e8:18:e0:5d:46:10:4d:ba:0c:
64:48:67:7d:91:e7:1b:d7:75:f9:46:89:97:b0:d0:b8:c2:fe:
cc:97:16:27:2c:d0:56:80:4b:d6:9a:0a:9d:7e:72:d8:b2:d3:
63:a5:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:08 2026 by rpki-client