
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/yc91VwiXoyL-eSaQNoMQcYeyICE.roa
File: yc91VwiXoyL-eSaQNoMQcYeyICE.roa (raw, json)
Hash identifier: WYaY/8ecgVnoYbAnJmsLKnG8FekXKTp7tktUyhZPkvA=
Subject key identifier: C9:CF:75:57:08:97:A3:22:FE:79:26:90:36:83:10:71:87:B2:20:21
Certificate issuer: /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial: 65
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/yc91VwiXoyL-eSaQNoMQcYeyICE.roa
Signing time: Tue 31 Mar 2026 07:40:49 +0000
ROA not before: Tue 31 Mar 2026 07:40:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9354
IP address blocks: 210.158.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Validity
Not Before: Mar 31 07:40:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C9CF75570897A322FE7926903683107187B22021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:9c:10:9e:21:1e:ee:d6:74:b7:ba:50:92:
62:03:d7:50:f0:08:ae:94:36:22:61:d4:03:f9:a4:
fc:94:72:72:78:91:86:1c:35:43:5a:40:33:c8:5c:
41:54:aa:cc:d6:8d:e3:60:a1:12:54:9a:58:7e:b6:
a7:74:7a:ae:ba:d9:67:b3:bf:89:5c:e7:e3:be:30:
db:f1:e8:68:38:2c:81:42:32:8e:0a:70:45:f0:7e:
0d:c3:c6:c5:a3:c9:97:15:09:37:c9:88:8c:77:78:
12:fe:f7:8a:c2:94:21:05:9d:2b:c8:35:40:06:41:
74:5e:9d:27:32:0e:d9:a6:c7:bf:31:9f:f4:a8:c8:
d5:4d:6b:ad:c6:b8:44:4b:f8:5a:f8:7e:b8:07:36:
bf:21:3f:a0:39:ac:bb:3a:18:ae:9c:5e:cc:4e:1c:
22:cd:67:60:98:eb:36:47:e5:2e:4a:60:8d:e7:f2:
12:c5:5b:d6:60:b1:b4:5a:5e:98:09:c4:1c:8a:e7:
9b:2d:2c:61:35:76:1d:d6:68:c6:40:ab:f5:72:30:
e6:16:17:40:74:ec:db:5b:7d:4f:83:ab:15:e6:21:
ca:7f:49:32:d1:04:eb:d6:ed:7d:8c:39:bb:32:6f:
a0:d6:78:87:2c:cf:67:7d:46:41:62:62:96:87:e9:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:75:57:08:97:A3:22:FE:79:26:90:36:83:10:71:87:B2:20:21
X509v3 Authority Key Identifier:
keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/yc91VwiXoyL-eSaQNoMQcYeyICE.roa
sbgp-ipAddrBlock: critical
IPv4:
210.158.144.0/20
Signature Algorithm: sha256WithRSAEncryption
40:94:19:e6:52:36:ac:95:01:1f:2f:6a:2c:64:2f:28:f9:5d:
fe:62:ad:a5:25:bc:92:6c:ba:d4:48:c6:5d:8d:a3:38:d1:e1:
e1:60:47:32:a4:f2:2d:0a:50:f4:72:db:62:96:0c:20:7e:9b:
bb:c4:7d:6a:c7:9d:88:4c:61:90:6b:83:68:b1:d8:0f:aa:5c:
33:49:e6:37:db:7f:6b:cd:30:59:76:38:11:10:d1:3a:1b:0a:
9a:5c:e2:b4:6f:24:8b:e1:37:1a:21:f8:d9:cf:b9:55:ce:9f:
e6:83:51:f4:a4:0c:40:31:3d:70:e8:04:e3:30:79:76:1e:70:
16:31:ae:bd:ec:27:e5:d7:ec:4e:87:9f:91:e9:9b:90:3a:1b:
d8:f2:c0:cc:0c:f0:9c:11:28:29:b4:66:41:a0:b9:63:d0:83:
17:4e:e4:be:48:6f:2e:f8:e7:3b:ee:ed:94:1e:64:29:0a:37:
db:d3:34:49:fb:a5:78:3f:4b:7e:7c:11:8d:17:aa:61:e7:3a:
6c:7c:79:85:5d:1b:fe:33:e2:d8:d5:2f:9f:77:68:a0:e1:17:
b0:04:2a:ef:bd:17:4f:6b:19:3f:07:be:59:d7:78:44:3c:f0:
19:33:c6:76:3f:0c:71:de:c8:43:d3:ff:6d:78:1c:5f:c4:08:
d7:fa:e6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:08 2026 by rpki-client