
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/zwYEyPcQOWGGZj9Y-JDBvQ3UaJI.roa
File: zwYEyPcQOWGGZj9Y-JDBvQ3UaJI.roa (raw, json)
Hash identifier: 6qIENLEW73aEcvvI2+RM0agYyYIyYB+80/XeWl5p7EU=
Subject key identifier: CF:06:04:C8:F7:10:39:61:86:66:3F:58:F8:90:C1:BD:0D:D4:68:92
Certificate issuer: /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial: 33
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/zwYEyPcQOWGGZj9Y-JDBvQ3UaJI.roa
Signing time: Tue 31 Mar 2026 08:40:07 +0000
ROA not before: Tue 31 Mar 2026 08:40:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131931
IP address blocks: 133.117.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Validity
Not Before: Mar 31 08:40:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CF0604C8F710396186663F58F890C1BD0DD46892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:93:66:6f:62:8b:70:3c:2d:12:4c:42:d7:
d7:e5:b6:33:b8:90:f8:e4:ca:e8:85:71:2f:46:57:
82:4f:c8:b4:a5:cb:bc:7f:bb:84:d5:08:0b:3f:20:
7e:a7:51:0f:e7:47:cc:36:89:b5:c5:f9:df:99:c3:
37:81:8b:3a:fa:d8:ed:f8:ab:b9:eb:0b:38:e6:68:
c5:fe:13:7f:e9:b9:9d:4f:0f:6d:36:b3:0a:a5:4c:
0a:05:ee:1d:33:de:d3:ef:81:3f:8a:2c:53:53:da:
a5:b5:b6:39:d6:db:b1:24:3e:2c:69:15:db:75:a3:
40:53:ad:fa:43:dd:05:6a:30:ad:05:9e:75:e4:80:
21:39:1d:3c:e5:f9:2d:fa:70:cf:0d:a4:fe:c4:0b:
89:fc:7f:77:ca:b3:2e:7c:ab:e1:8b:31:38:4a:8b:
47:35:54:53:d6:7c:67:a2:25:a4:6e:62:72:83:e7:
8d:ee:c1:db:2a:06:0f:f9:6c:ba:78:7f:4a:c8:6e:
6f:13:a2:79:c5:cb:c5:f4:a4:81:04:63:2b:43:c8:
61:f2:ee:91:b0:42:4d:d8:dd:87:0d:5b:55:3c:9e:
79:1d:5f:ae:86:7e:0f:b7:41:02:22:d5:a5:bf:7d:
bd:7a:47:a6:73:a6:3e:23:1f:68:0d:5c:a5:7e:9a:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:04:C8:F7:10:39:61:86:66:3F:58:F8:90:C1:BD:0D:D4:68:92
X509v3 Authority Key Identifier:
keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/zwYEyPcQOWGGZj9Y-JDBvQ3UaJI.roa
sbgp-ipAddrBlock: critical
IPv4:
133.117.144.0/22
Signature Algorithm: sha256WithRSAEncryption
44:80:c0:b5:52:48:de:0b:59:05:53:79:d5:92:25:a3:25:ab:
8b:40:8b:30:32:a0:2a:1e:40:de:64:e6:a0:ec:bf:2a:ee:f4:
42:27:41:86:00:5f:49:28:05:0f:1c:32:9e:20:aa:77:1e:1b:
cc:1e:de:e3:44:14:2d:1d:6d:19:c5:73:f7:5e:b6:c5:9e:87:
78:19:c1:54:84:89:ac:1d:3c:23:22:0c:8b:aa:9e:85:3f:4e:
2a:03:eb:e6:a5:e8:89:38:b3:21:07:42:d9:d2:0f:63:36:ce:
ec:40:f2:66:2a:23:f7:f2:1f:a8:7a:75:c6:44:67:df:fb:41:
32:67:15:eb:b1:74:99:8d:c4:f3:11:a9:d6:2a:6d:6c:ff:31:
76:e1:e9:28:f1:88:69:10:a8:3d:a8:90:d6:f4:7f:e0:3c:4b:
29:d9:71:47:c9:4c:81:95:23:84:99:0f:c0:65:b3:42:e8:cf:
6c:1c:4e:de:51:5f:36:9b:f1:27:79:07:f8:6d:74:71:9f:64:
6f:20:90:27:7c:23:b6:c6:d2:c8:a2:a0:59:2c:f0:99:ef:d5:
c0:c0:6d:69:7b:39:1d:be:6b:84:3c:68:15:59:9f:f6:4d:f6:
46:0d:0f:e8:94:7b:b7:16:61:ce:47:43:ae:e4:60:1d:24:93:
f1:6e:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:11 2026 by rpki-client