
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/880/PJ9jbXEQXWqUwJTg_RHVdRBLo5w.roa
File: PJ9jbXEQXWqUwJTg_RHVdRBLo5w.roa (raw, json)
Hash identifier: DtDOmq7VT2dNJlfseV2YGyWrxQLZtwxsVaa7y79IInI=
Subject key identifier: 3C:9F:63:6D:71:10:5D:6A:94:C0:94:E0:FD:11:D5:75:10:4B:A3:9C
Certificate issuer: /CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
Certificate serial: 56
Authority key identifier: 71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/PJ9jbXEQXWqUwJTg_RHVdRBLo5w.roa
Signing time: Sun 12 Apr 2026 00:19:28 +0000
ROA not before: Sun 12 Apr 2026 00:19:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 58650
IP address blocks: 202.90.208.0/20 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 22:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
Validity
Not Before: Apr 12 00:19:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3C9F636D71105D6A94C094E0FD11D575104BA39C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:8c:20:2c:1c:72:ce:a1:f2:54:55:a6:cc:
81:5c:42:fc:03:65:26:d3:a9:0e:8a:b7:9e:e9:54:
49:ae:91:95:f0:f1:d4:51:19:85:49:07:40:e4:54:
6e:74:e0:1d:7e:05:e7:f7:80:42:e0:ad:61:4a:a9:
d2:a9:a1:98:96:58:b8:04:7e:75:56:05:31:a2:ef:
68:2e:2b:a6:eb:23:10:2a:7d:6c:16:7b:21:7d:fa:
9e:b1:39:85:c0:db:c7:52:63:15:51:b1:c5:82:0d:
b2:12:3d:01:30:a5:1a:25:3e:0f:ce:20:19:c7:fe:
b2:49:58:e5:b0:ab:20:72:7e:2e:da:bd:69:ad:89:
3a:18:d8:87:5b:01:ae:c3:4e:0c:ac:65:f8:f2:64:
ec:4d:67:e2:c9:2f:6d:b6:44:4a:63:6b:1e:80:0a:
80:db:57:08:27:d6:0e:22:bc:57:d8:1e:24:b7:b2:
79:3e:67:9e:db:b7:0b:78:81:10:4c:ff:f4:48:9e:
98:4b:97:25:02:5d:11:39:aa:4a:99:f0:14:77:a0:
5e:08:ec:47:52:f0:ca:35:c4:01:7b:56:9f:c8:da:
04:b2:95:80:cd:3d:22:b2:e3:16:c0:c3:7a:47:c8:
11:41:47:df:9f:42:f6:b7:ba:54:0b:d7:e2:c5:6e:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:63:6D:71:10:5D:6A:94:C0:94:E0:FD:11:D5:75:10:4B:A3:9C
X509v3 Authority Key Identifier:
keyid:71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/PJ9jbXEQXWqUwJTg_RHVdRBLo5w.roa
sbgp-ipAddrBlock: critical
IPv4:
202.90.208.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:50:f6:d4:5e:b2:63:59:34:b0:78:2a:b7:fc:3d:d5:57:b4:
39:b3:e1:52:73:c8:1c:47:a8:c9:d4:dd:df:df:ba:be:5b:60:
72:f8:e7:88:15:1d:a3:0d:d6:b8:ad:a7:01:c3:ce:fe:e7:e7:
fe:38:34:50:4f:f9:a3:d3:b2:75:4f:3d:b1:ef:81:77:f3:33:
7b:e9:8b:91:f6:37:94:3c:01:ea:57:45:4c:87:52:48:d3:b2:
d5:01:46:e0:80:36:c7:c2:42:92:fc:81:df:26:d7:54:fd:d4:
b1:2d:1f:54:e4:45:fa:8e:da:7c:88:e5:a7:56:3b:e6:5b:67:
41:a0:f5:ce:93:95:d3:70:73:06:31:bb:3d:3b:7b:d9:d7:30:
3e:1f:2d:20:55:a9:5d:a1:17:fd:de:0f:bb:b6:04:69:ff:28:
e2:32:9b:e7:6e:4f:2c:b4:80:4b:7f:9d:2d:f0:cb:22:88:f3:
15:b1:60:40:b8:5f:64:4f:82:68:34:6a:2a:cf:a1:b2:8b:99:
b2:55:6f:8e:0d:7c:b0:19:8d:3b:e6:e0:af:b8:2a:f4:5b:38:
36:ea:b4:41:86:20:c8:ba:74:bb:0d:5e:5f:2c:60:9e:c8:fc:
6e:f8:2c:94:3e:81:a2:23:04:88:86:19:da:16:6f:00:3a:97:
f6:7d:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:28 2026 by rpki-client