
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa
File: cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa (raw, json)
Hash identifier: oewNT4H07OFLMBGt5efmbiEEK9CDu+f3WmFip/axGqI=
Subject key identifier: 71:34:5E:D5:BC:13:27:EA:E8:CE:F9:A5:C3:51:DC:49:34:EC:54:2C
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 325F
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa
Signing time: Tue 31 Mar 2026 07:30:47 +0000
ROA not before: Tue 31 Mar 2026 07:30:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7671
IP address blocks: 219.111.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12895 (0x325f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Mar 31 07:30:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=71345ED5BC1327EAE8CEF9A5C351DC4934EC542C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:3c:a6:fe:80:9e:e2:0d:cb:59:d3:91:2f:
e1:8c:f3:41:4d:58:f1:14:78:16:2f:5c:9f:77:2d:
73:c6:28:dd:fd:1b:f4:fe:3d:71:8c:18:d5:c1:03:
1d:25:95:ab:93:f6:e9:d5:60:31:2e:e1:16:11:c5:
37:2d:4e:d0:55:7c:cd:3f:8a:95:6d:df:45:ae:9c:
2e:f4:57:3f:8d:42:bb:51:91:7b:be:af:23:7f:54:
0b:e1:76:4c:68:26:97:dc:56:52:18:76:b3:f7:2b:
39:41:1b:42:f4:97:83:1a:bb:ab:ea:fa:c4:cc:56:
1b:43:e5:6c:37:6e:09:d7:4b:bc:9d:f6:2c:1d:e0:
b0:34:00:c9:65:e2:18:15:76:b8:5f:ca:f5:a0:69:
71:44:eb:6f:eb:12:2c:a4:78:48:cf:55:31:0b:c4:
89:60:51:9a:ca:c2:81:04:6f:98:cb:9f:72:c4:30:
b7:b1:f4:9d:ef:64:64:d9:67:76:03:92:ab:fe:e9:
11:d7:1f:04:fc:c3:65:6a:bd:47:cc:8a:2c:27:2e:
01:f0:ef:11:10:9a:e0:b5:76:c4:65:6e:32:82:ce:
6e:b3:20:1d:7b:46:07:bb:72:80:2d:dc:e4:d5:25:
36:c0:d3:74:94:59:b3:e4:1f:78:cd:83:a8:f0:9a:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:34:5E:D5:BC:13:27:EA:E8:CE:F9:A5:C3:51:DC:49:34:EC:54:2C
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/cTRe1bwTJ-rozvmlw1HcSTTsVCw.roa
sbgp-ipAddrBlock: critical
IPv4:
219.111.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:47:bd:b5:b5:19:ff:82:3c:d7:64:ed:82:76:15:ff:9c:4a:
dd:de:00:1b:ae:36:06:6a:a3:bc:d3:3c:e5:a7:1e:bf:f4:5a:
ef:3b:7b:f5:d2:2b:63:6c:ec:52:5b:cb:f0:2f:f4:0a:e8:7f:
42:78:a9:02:74:b6:08:c4:09:d3:c0:40:86:db:14:c3:a3:63:
cd:eb:26:68:b0:5c:a2:fa:ac:00:46:89:48:af:9b:60:7b:7c:
40:1b:b8:cb:e4:bf:b1:53:fb:ba:63:b3:1b:6d:46:24:32:ec:
38:c6:05:f7:e5:ff:37:fc:b3:6a:37:41:51:98:29:f7:52:af:
6d:02:3b:da:f8:dd:19:87:23:85:4e:de:98:f0:ac:95:c5:55:
20:f6:5b:b0:c5:da:85:25:65:ab:b4:85:b9:18:16:47:0b:6a:
dc:ed:f0:ab:0d:ca:ab:4b:c9:0c:53:b7:35:18:7e:3b:78:5f:
72:25:00:15:78:14:ce:a6:bb:c8:7a:06:a1:db:2b:d1:f5:0d:
72:58:dc:38:95:c6:dc:48:34:c1:42:76:b6:25:2f:0c:6f:fd:
b3:66:e1:54:fc:89:e9:36:de:c9:78:7d:87:d0:3b:1e:ab:3a:
d0:a3:51:92:04:ac:db:3b:34:86:04:75:31:8d:c4:5b:b8:14:
03:fe:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:27 2026 by rpki-client