
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/7zwCx7Ps83IUnXRmsTiBpUFOIW4.roa
File: 7zwCx7Ps83IUnXRmsTiBpUFOIW4.roa (raw, json)
Hash identifier: LbmbakI8JxZkDOmQoU7LbY9TWELHFFRbYW45DM+fWog=
Subject key identifier: EF:3C:02:C7:B3:EC:F3:72:14:9D:74:66:B1:38:81:A5:41:4E:21:6E
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 71
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/7zwCx7Ps83IUnXRmsTiBpUFOIW4.roa
Signing time: Sun 01 Feb 2026 01:32:22 +0000
ROA not before: Sun 01 Feb 2026 01:32:22 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 23778
IP address blocks: 202.95.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: Feb 1 01:32:22 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=EF3C02C7B3ECF372149D7466B13881A5414E216E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:e8:ee:12:80:b1:02:72:79:f0:8d:74:1d:
c0:f1:97:37:43:fe:bf:6c:1d:a7:5b:c7:71:5d:f3:
f9:46:d9:50:8e:4e:db:d3:30:58:26:3b:9f:b2:70:
15:a4:f9:6a:fc:21:1e:d8:97:07:a2:91:21:bd:d0:
85:e4:b3:4f:2b:13:b1:57:50:93:de:bd:38:58:de:
11:67:c0:9b:f0:9a:18:49:e6:cf:bd:8d:6e:f1:c2:
d8:6f:de:55:e4:e9:34:7d:19:9b:ec:82:06:e1:22:
3c:b0:09:42:16:4d:15:8c:5b:68:58:71:a7:f1:c6:
d5:1f:d1:e9:fa:77:74:7d:71:20:3d:ec:1e:cd:6b:
2e:74:87:dc:69:47:80:7f:dd:33:f6:84:57:05:34:
af:42:af:42:dc:17:69:57:b0:8f:13:6c:42:cc:2e:
7a:71:94:b5:06:50:09:5d:74:82:cf:b4:99:db:1c:
d4:9c:66:53:0f:06:73:18:8a:1a:d0:f9:8b:a9:7f:
49:58:56:d6:d2:f0:2b:97:7d:77:41:58:e0:1a:26:
db:d6:47:0a:e5:c6:96:f7:b8:70:eb:d8:1b:94:19:
fe:9c:46:6f:12:32:f7:32:a4:2e:3b:32:0e:03:e2:
c1:95:00:71:51:26:35:d4:d3:74:0c:7b:5b:f7:f3:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3C:02:C7:B3:EC:F3:72:14:9D:74:66:B1:38:81:A5:41:4E:21:6E
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/7zwCx7Ps83IUnXRmsTiBpUFOIW4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.95.176.0/20
Signature Algorithm: sha256WithRSAEncryption
35:4e:c7:30:13:96:2b:71:0e:46:d7:6a:4d:16:01:5e:b4:63:
5c:b1:78:37:eb:d4:35:76:78:cd:ff:a1:de:1e:5e:04:db:d5:
1f:3b:01:ec:af:db:fc:fa:c8:7a:ce:80:df:9f:30:c8:5a:10:
e6:1e:a9:cb:05:27:c5:49:57:a1:ed:db:7a:0f:1c:aa:43:2c:
0d:f8:7a:84:be:56:4d:92:eb:61:d5:60:90:17:9f:2b:d7:fc:
7a:56:51:86:b1:84:52:af:65:20:ce:a5:9d:0d:70:5c:99:66:
22:bb:e8:42:af:6c:a3:82:29:36:fd:7e:d0:7c:95:49:79:e0:
35:c2:93:f8:49:8c:99:98:0d:5d:a3:eb:bd:27:83:3d:f8:a7:
95:99:a2:0d:05:5f:6c:06:63:c3:2f:7d:57:40:6e:89:82:26:
1e:bb:88:31:cd:fb:c1:18:10:e1:f9:d5:91:da:e6:7c:17:a5:
8d:d0:28:97:7b:ae:c7:66:fc:61:ed:22:12:b9:df:70:85:3f:
f8:f3:8b:e7:a7:7f:12:79:89:ed:40:de:ec:6b:fe:35:e9:1e:
85:85:4a:98:ad:58:98:ed:6c:09:e9:57:71:39:f8:7b:79:2e:
bf:75:2a:06:30:82:64:f7:76:8e:e7:1b:a8:e1:2b:7e:0b:32:
18:0e:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:21 2026 by rpki-client