
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/KgIRAl9r0FJtMelEP8VLNFIW9RY.roa
File: KgIRAl9r0FJtMelEP8VLNFIW9RY.roa (raw, json)
Hash identifier: +iS+G+kMwl56VOOIATit8NVGmZVdikSMMDL8Fjdg0Zw=
Subject key identifier: 2A:02:11:02:5F:6B:D0:52:6D:31:E9:44:3F:C5:4B:34:52:16:F5:16
Certificate issuer: /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial: 30
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/KgIRAl9r0FJtMelEP8VLNFIW9RY.roa
Signing time: Tue 31 Mar 2026 08:40:03 +0000
ROA not before: Tue 31 Mar 2026 08:40:03 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131931
IP address blocks: 110.4.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Validity
Not Before: Mar 31 08:40:03 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2A0211025F6BD0526D31E9443FC54B345216F516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:07:a9:b1:01:92:57:b4:d6:20:99:4b:18:
bf:af:4f:0b:69:71:0f:d5:69:b0:72:de:46:c2:c7:
ec:f1:c8:b7:23:a5:b9:0e:ba:9e:d4:8f:1a:2b:7b:
27:24:7c:74:f7:7f:11:11:66:08:df:3d:fc:9c:3c:
a3:b9:d7:7a:4c:3f:5c:fd:8b:2d:74:a9:1f:55:de:
1a:0a:19:bc:b2:04:51:4f:3b:6a:4f:0f:68:76:d7:
51:b2:18:b0:bf:30:bb:7f:fe:25:ff:a6:bc:a2:35:
44:50:f9:77:a0:21:18:16:76:39:6a:e4:40:ba:5b:
bf:03:bc:de:5b:66:75:53:d0:cc:aa:53:c3:f3:75:
f0:01:65:1d:8d:ed:3f:52:cb:e0:ca:41:73:4f:e2:
ce:b5:5a:0c:9e:00:90:69:fa:4e:3e:98:25:df:41:
17:68:99:50:1d:86:8c:e8:56:62:ad:e1:d1:47:28:
c0:f4:4e:74:f2:9e:b2:b1:41:23:5e:03:62:e9:c5:
e9:c2:3a:d3:b5:66:36:da:32:79:1d:85:1f:30:a9:
cd:04:48:d9:f6:da:ff:67:1e:81:f4:e6:87:1b:78:
8f:f7:bc:c8:66:e0:c7:89:e9:14:23:72:a0:3c:6b:
e0:95:64:ee:06:04:61:9a:35:f6:9c:9e:fc:bb:72:
84:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:11:02:5F:6B:D0:52:6D:31:E9:44:3F:C5:4B:34:52:16:F5:16
X509v3 Authority Key Identifier:
keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/KgIRAl9r0FJtMelEP8VLNFIW9RY.roa
sbgp-ipAddrBlock: critical
IPv4:
110.4.32.0/21
Signature Algorithm: sha256WithRSAEncryption
cd:e2:32:84:e3:29:83:b3:45:da:63:6f:95:9b:67:1c:48:cf:
29:27:43:90:9e:e1:77:55:77:58:09:78:02:d6:83:ce:7c:e0:
3b:3c:66:33:da:16:07:62:65:aa:4b:80:67:06:f9:aa:fe:5c:
2d:55:e6:5f:b4:0b:a9:1c:ce:b6:35:68:ef:18:30:b7:8e:32:
e8:44:ac:24:4b:c5:44:2c:68:57:dd:3e:2b:a9:8c:f1:90:c2:
ac:bc:8b:62:10:a7:ec:fe:42:61:75:1a:44:3e:fe:05:4b:1c:
db:f5:05:3d:ad:d1:fb:ed:f8:b6:11:43:46:1f:64:4f:5b:83:
e3:bf:86:d4:24:79:32:98:b0:01:f7:f0:7e:a8:22:bf:60:d1:
00:3f:8c:90:b1:56:9f:10:5c:95:48:3d:55:3c:1c:c4:78:49:
e0:89:b9:e2:24:58:38:d7:23:64:1b:13:02:06:84:1b:3c:1c:
03:f2:2b:ee:2c:7b:57:bc:76:eb:50:71:71:2a:db:1f:4b:d4:
09:c2:18:2d:82:36:98:0c:ce:cb:6c:fb:89:9a:88:1c:61:79:
12:b5:fb:57:76:0e:f7:4f:f5:38:8b:81:b0:74:11:76:5b:ad:
64:16:a4:87:e9:37:42:a8:89:dd:70:cf:5f:08:f2:a1:51:89:
7b:a5:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:31 2026 by rpki-client