
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/4MRLP5mGcPivwtVKiQiLNlWUBFk.roa
File: 4MRLP5mGcPivwtVKiQiLNlWUBFk.roa (raw, json)
Hash identifier: t9UC57Y7ne+sqAcJPJ2Wh5kxGV5gnKmMASFXUGyHYaQ=
Subject key identifier: E0:C4:4B:3F:99:86:70:F8:AF:C2:D5:4A:89:08:8B:36:55:94:04:59
Certificate issuer: /CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5
Certificate serial: 3B
Authority key identifier: 28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/4MRLP5mGcPivwtVKiQiLNlWUBFk.roa
Signing time: Sun 01 Mar 2026 01:32:00 +0000
ROA not before: Sun 01 Mar 2026 01:32:00 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 17958
IP address blocks: 157.112.160.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28CD95AF0B878E0161E628A0CC240CEADA9198B5
Validity
Not Before: Mar 1 01:32:00 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=E0C44B3F998670F8AFC2D54A89088B3655940459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:57:46:e2:f5:d4:7e:ac:6e:19:23:b9:24:98:
82:39:7f:fc:ce:9a:4a:e6:d8:4c:c7:d9:a1:6f:a6:
93:81:81:9a:89:61:22:d0:cf:1b:c9:e6:32:40:1d:
39:07:cc:9c:5f:d3:ef:21:9e:93:55:a4:b1:7d:0e:
a4:8a:91:6c:b6:3b:ba:7d:79:35:fd:6e:21:40:76:
41:09:87:8a:55:bf:3a:ee:59:7a:e7:20:23:92:c3:
4a:d0:39:69:8b:5b:bf:cb:f7:f8:3e:0e:b6:c9:f8:
bd:c6:6d:22:59:61:d8:64:af:94:01:cf:f5:27:37:
88:9d:3f:5c:12:67:3a:6e:c8:40:7e:fd:f1:cb:0c:
2d:f2:fe:e4:7c:34:89:58:ec:da:4b:71:ce:54:be:
db:e6:23:76:c9:79:34:34:5a:69:e3:07:90:6e:c0:
ea:e3:c6:76:6f:16:64:29:06:97:e8:1e:04:34:c0:
cf:a5:26:70:74:a8:95:33:13:a4:36:17:b9:b4:bf:
a2:ec:e3:2a:99:70:73:7d:0e:4d:c8:d5:87:a9:20:
00:1d:57:c5:a0:0b:a8:55:14:a6:68:a4:b3:20:3f:
6c:3c:9f:ef:c5:c7:e8:f6:a6:24:47:95:48:36:de:
13:71:e9:66:df:bb:4d:75:38:b6:f0:3f:f7:83:55:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:4B:3F:99:86:70:F8:AF:C2:D5:4A:89:08:8B:36:55:94:04:59
X509v3 Authority Key Identifier:
keyid:28:CD:95:AF:0B:87:8E:01:61:E6:28:A0:CC:24:0C:EA:DA:91:98:B5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/KM2VrwuHjgFh5iigzCQM6tqRmLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KM2VrwuHjgFh5iigzCQM6tqRmLU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/4MRLP5mGcPivwtVKiQiLNlWUBFk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.112.160.0/20
Signature Algorithm: sha256WithRSAEncryption
91:e3:24:88:60:49:e7:ae:0a:65:f5:4f:7d:a4:2c:5f:d8:dc:
03:3c:13:3e:f5:c5:2e:3c:83:46:61:1b:00:91:5e:9d:77:ff:
6c:16:79:b4:0f:8a:5f:64:d6:6b:3d:cb:bc:78:24:87:44:11:
ab:da:19:75:8d:2d:b4:e6:ab:42:65:7c:3c:b2:e6:1b:9c:ac:
a3:f1:ee:80:58:c1:93:49:4a:dc:29:60:43:dc:aa:65:f5:02:
ed:fb:4a:13:46:75:4f:4a:4e:a3:33:c7:ff:5b:4c:e9:d6:e4:
c0:58:bf:22:19:6b:ec:05:25:93:50:4d:96:c7:b5:e0:25:9e:
b1:eb:a1:73:f8:bc:9e:3e:95:8f:e9:d6:a4:fd:4a:ec:d0:b8:
1d:4b:19:70:5c:e1:98:0c:eb:e8:41:4a:58:76:01:30:e2:a3:
36:4d:cd:62:d8:bc:9a:e9:26:b3:cc:3a:cb:90:0e:25:8f:7e:
75:4b:eb:3e:af:a4:63:f9:75:d8:98:a1:d5:78:ea:54:d5:22:
dc:c8:55:a1:e2:49:ec:76:69:2d:bd:15:98:56:f0:25:69:59:
b8:0a:4e:cd:28:82:ee:51:43:dc:55:de:05:b9:47:6c:d8:e4:
87:b9:66:38:a6:20:f4:dc:6e:e5:29:d4:88:a3:35:f0:84:fc:
98:5b:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:18 2026 by rpki-client