
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/cvCDclqTpk1hjucbIkkj_e_tMtQ.roa
File: cvCDclqTpk1hjucbIkkj_e_tMtQ.roa (raw, json)
Hash identifier: ARu6JBWTwflXayE2vYeFpsa6oyJiG1yK+T22SvKg/uA=
Subject key identifier: 72:F0:83:72:5A:93:A6:4D:61:8E:E7:1B:22:49:23:FD:EF:ED:32:D4
Certificate issuer: /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial: 73
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/cvCDclqTpk1hjucbIkkj_e_tMtQ.roa
Signing time: Sun 01 Feb 2026 01:32:23 +0000
ROA not before: Sun 01 Feb 2026 01:32:23 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 23778
IP address blocks: 210.235.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Validity
Not Before: Feb 1 01:32:23 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=72F083725A93A64D618EE71B224923FDEFED32D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:74:39:80:09:69:cb:7f:c9:a4:24:fa:44:
cf:93:c8:d1:9f:4c:3b:69:69:67:a7:1a:a6:02:02:
4e:5c:37:70:06:a9:15:bb:b1:ff:9f:6f:dc:7b:9d:
0b:67:04:89:29:23:0c:5c:08:38:45:a9:73:d8:1f:
06:f0:85:de:e7:f9:9c:5b:01:46:6b:3b:4f:b6:68:
d0:1f:30:a0:82:4c:9f:b4:d2:61:e1:e2:c1:31:25:
50:d8:4b:2e:b4:9e:cb:0c:f8:37:5b:9c:93:44:fb:
1f:32:06:7f:3c:68:58:23:67:8a:7e:ad:75:bc:63:
95:5a:a0:69:8d:19:b0:ce:49:48:8e:dc:d6:6c:0b:
63:cb:5b:22:70:76:5b:5d:b6:7d:11:83:cb:b7:d0:
9a:99:1b:2e:6f:73:fb:13:b2:05:f0:14:12:fc:eb:
32:82:f7:c1:e4:2d:53:bc:c6:91:bd:ad:b4:35:86:
92:dd:e0:b0:9c:62:80:cb:9c:6c:ea:a8:14:d7:53:
15:f8:2d:84:c4:68:5e:c2:88:a8:13:b6:e4:a5:5a:
cf:5a:82:7c:53:d9:ab:3e:dc:71:3d:5f:1f:8e:07:
52:4f:ab:a5:14:79:5f:2e:9d:d7:e4:b4:c7:00:84:
01:a0:6a:fd:80:6d:c0:3b:f6:19:10:23:cc:1f:79:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F0:83:72:5A:93:A6:4D:61:8E:E7:1B:22:49:23:FD:EF:ED:32:D4
X509v3 Authority Key Identifier:
keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/cvCDclqTpk1hjucbIkkj_e_tMtQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.40.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:7d:04:4f:3d:e6:73:99:f6:e1:ca:ad:cb:2f:b6:91:2e:cc:
f8:b0:2a:f3:b3:69:ec:9a:16:c6:5f:36:42:4a:7a:cc:31:2b:
1f:7a:62:44:41:4f:6e:c9:da:da:ec:c6:38:c0:d7:db:d1:26:
dc:32:f0:3c:9f:15:a6:35:a8:fb:d9:04:74:3b:fb:df:b3:e5:
6e:23:92:9d:19:4c:b7:08:79:8c:99:ed:55:6c:b8:58:e1:ff:
e9:b4:80:9c:a0:ce:5b:60:c6:17:5a:73:04:12:6b:33:b7:f1:
32:6c:97:a9:85:53:6a:fe:78:93:07:fb:1c:8a:fe:0b:e1:03:
2d:58:75:4a:b9:e9:13:8f:cf:a1:f1:0c:4b:02:e5:28:49:74:
2f:76:73:41:ee:30:93:73:e2:27:cc:1e:47:52:bc:12:01:16:
57:95:61:1c:d3:63:9f:75:3f:cd:79:dd:53:7e:4a:f1:7f:fe:
78:3f:75:7e:8d:ba:54:50:36:6d:01:e4:6b:ab:5e:58:2a:db:
fe:e9:38:96:10:b1:6b:3b:0c:3d:62:c8:57:26:4a:da:2f:f1:
f8:5c:76:dd:2a:14:5e:77:c6:07:86:38:c4:d8:a2:56:fe:7f:
c9:9d:6a:be:16:ab:ab:c9:94:5a:bb:d6:f0:05:55:00:16:fa:
fe:fb:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:31 2026 by rpki-client