
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/833/sKXAe04a4Nc7EDZ3Xh23puxvh_o.roa
File: sKXAe04a4Nc7EDZ3Xh23puxvh_o.roa (raw, json)
Hash identifier: mmCBaXv1+mnF0tKq36Hpy+n/ldwPQPTKJ7plkVRSldM=
Subject key identifier: B0:A5:C0:7B:4E:1A:E0:D7:3B:10:36:77:5E:1D:B7:A6:EC:6F:87:FA
Certificate issuer: /CN=0D3BC2E4E3FE818E8EF64BF2F0414CF88AF82D82
Certificate serial: 2E
Authority key identifier: 0D:3B:C2:E4:E3:FE:81:8E:8E:F6:4B:F2:F0:41:4C:F8:8A:F8:2D:82
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/sKXAe04a4Nc7EDZ3Xh23puxvh_o.roa
Signing time: Tue 25 Aug 2026 01:19:45 +0000
ROA not before: Tue 25 Aug 2026 01:19:45 +0000
ROA not after: Sun 15 Aug 2027 01:30:02 +0000
asID: 23629
IP address blocks: 202.177.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 16:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D3BC2E4E3FE818E8EF64BF2F0414CF88AF82D82
Validity
Not Before: Aug 25 01:19:45 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=B0A5C07B4E1AE0D73B1036775E1DB7A6EC6F87FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:43:30:e2:20:e3:5e:bc:3c:68:5a:7d:b0:
6b:93:d6:28:1b:d0:d2:83:e2:b4:7a:f4:0c:ca:90:
cd:ef:69:fc:c2:7d:d1:9b:c8:6f:60:b6:05:a6:a0:
d2:00:50:65:26:ef:52:f0:fa:30:c9:42:28:dd:70:
39:37:94:30:5d:2f:90:05:99:1b:be:2c:c2:18:af:
8a:d2:a9:e8:4a:64:b4:1e:0b:2e:cc:f4:ef:99:94:
4d:2e:5f:8a:d3:26:7c:e0:47:40:c5:fc:6d:aa:26:
55:44:1f:05:6c:1e:30:51:81:71:45:bc:cd:86:7a:
17:c4:d9:90:7f:64:bb:04:d3:16:7b:84:bb:71:0f:
65:bd:3d:5c:30:81:dc:4f:aa:e8:76:41:d1:d2:e2:
06:83:7e:dc:14:9c:22:80:78:c0:c1:98:9a:2f:5a:
5e:f6:3b:c7:9d:75:b1:97:2b:d4:94:f9:aa:c9:7c:
94:db:61:24:f1:fd:9f:d4:6f:ed:b7:bd:19:d8:40:
ba:d6:cd:14:c6:6b:95:5e:95:de:c1:f1:47:e7:d5:
79:7d:03:86:75:ed:83:5d:67:35:f3:1a:b2:83:f6:
32:0e:d5:f1:ff:25:7a:3e:f8:5c:f5:f9:d8:72:f4:
2e:fc:24:71:a7:6a:3a:03:ed:d8:fd:5c:f8:ff:d2:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A5:C0:7B:4E:1A:E0:D7:3B:10:36:77:5E:1D:B7:A6:EC:6F:87:FA
X509v3 Authority Key Identifier:
keyid:0D:3B:C2:E4:E3:FE:81:8E:8E:F6:4B:F2:F0:41:4C:F8:8A:F8:2D:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/sKXAe04a4Nc7EDZ3Xh23puxvh_o.roa
sbgp-ipAddrBlock: critical
IPv4:
202.177.48.0/20
Signature Algorithm: sha256WithRSAEncryption
12:d9:dc:79:4e:16:66:bc:f8:82:ce:05:a5:07:87:08:01:59:
f9:2f:e9:de:48:32:56:31:cb:b9:61:a1:b5:07:4e:9c:28:07:
46:77:2d:55:45:2c:ec:b4:92:80:5d:47:ab:5e:fd:c7:71:2a:
28:4b:9d:4f:02:d9:89:86:a6:84:a7:98:64:5e:56:2d:02:ce:
81:c9:9b:48:5a:02:b6:23:2d:0a:f6:db:c9:19:ed:66:ef:cc:
b9:f8:ab:8c:cb:ca:c0:af:e1:4c:d5:53:0a:7b:de:1e:44:fb:
d4:e1:b6:d3:17:c7:87:40:93:fb:41:ee:95:30:0d:d8:d7:b6:
ae:aa:bb:28:0f:7c:7b:ba:1f:d1:d7:f1:8e:02:71:ae:27:98:
f0:92:c7:47:12:24:e3:c7:48:26:b2:5e:f5:65:83:5e:ea:f0:
eb:a6:22:b3:77:e1:43:f0:e8:f3:63:9a:2a:c9:c7:07:29:3e:
62:b1:a6:54:be:33:11:71:bb:30:2e:9e:4f:ef:e5:52:c7:4b:
a6:78:30:a8:a0:0f:c0:57:f6:98:72:e5:dc:fe:11:dc:e4:77:
75:bd:a5:20:c0:74:4c:87:d3:4b:de:1a:d2:83:14:b8:62:23:
6f:18:da:08:c2:34:e5:6d:f0:a4:39:3d:a7:5c:18:ca:67:ba:
5c:d2:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:09 2026 by rpki-client