
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/1MHeq1NzFlMtGs7huY6_oeGkuLA.roa
File: 1MHeq1NzFlMtGs7huY6_oeGkuLA.roa (raw, json)
Hash identifier: zOQMN7+WFELku0dRX44iGN5bGsOTJuyUhsYBUMZq1cg=
Subject key identifier: D4:C1:DE:AB:53:73:16:53:2D:1A:CE:E1:B9:8E:BF:A1:E1:A4:B8:B0
Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial: 79
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/1MHeq1NzFlMtGs7huY6_oeGkuLA.roa
Signing time: Tue 31 Mar 2026 07:32:48 +0000
ROA not before: Tue 31 Mar 2026 07:32:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23818
IP address blocks: 113.212.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Validity
Not Before: Mar 31 07:32:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D4C1DEAB537316532D1ACEE1B98EBFA1E1A4B8B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:33:5b:bd:b7:02:b9:bb:80:b0:19:f8:4e:
4e:3c:a8:1d:84:80:96:36:26:15:cd:a3:a3:5c:d7:
91:33:18:bc:38:cb:a6:de:57:e9:7e:51:7f:df:06:
2b:c5:94:62:d0:b9:cc:14:8b:ad:2b:f7:51:28:bf:
74:13:16:61:47:c0:94:a0:24:18:93:8e:91:a7:cb:
df:ed:ec:be:da:c7:f5:5d:52:c6:c5:f0:fe:53:a8:
c6:75:5b:d2:af:53:9e:67:2a:f8:df:08:93:d5:45:
38:5a:00:7a:2c:f6:37:6f:27:4e:33:05:17:77:33:
2d:f6:cd:68:74:4c:95:06:43:47:a4:f5:08:f0:60:
ff:44:d5:00:cd:fd:71:ea:b9:1c:54:8a:c2:bf:ce:
cc:d0:6c:94:da:12:52:8b:7a:fd:f8:6d:a1:50:57:
0f:24:88:5f:4e:e6:3f:f4:0e:42:a9:82:9a:ba:b9:
48:37:88:84:40:b3:36:3f:8f:d0:03:33:4e:74:15:
13:fe:c7:b5:ca:bf:d3:90:40:27:58:b6:6e:99:78:
08:3b:43:70:75:eb:bb:ff:62:42:92:bd:72:d1:ef:
39:4f:2c:4d:58:b8:88:b1:7c:9e:b3:2e:35:24:b0:
e9:36:43:1b:a4:01:45:52:ef:2d:62:a5:01:dc:b0:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C1:DE:AB:53:73:16:53:2D:1A:CE:E1:B9:8E:BF:A1:E1:A4:B8:B0
X509v3 Authority Key Identifier:
keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/1MHeq1NzFlMtGs7huY6_oeGkuLA.roa
sbgp-ipAddrBlock: critical
IPv4:
113.212.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:b5:50:36:ef:75:a0:f7:2c:a2:8a:52:e2:91:a9:63:2e:02:
e3:98:05:0b:18:ee:13:fa:1d:a9:a1:b2:7c:ea:85:b8:54:60:
40:d8:df:c0:98:53:56:76:72:8e:d1:39:99:3e:63:d7:d9:64:
14:3f:eb:70:bd:d5:50:b7:18:25:26:34:3e:5d:04:4b:ed:89:
65:1e:3f:24:c1:09:4c:0c:96:06:74:10:53:a4:1c:17:e9:ba:
dc:cb:40:d5:f6:f4:db:d9:b2:0d:ac:44:87:d9:cc:64:3a:e0:
6e:3a:d2:6a:bf:22:28:e7:da:21:3c:ee:93:d0:15:f7:7e:59:
0f:b5:8c:f2:8d:5d:47:11:16:c6:92:f8:a9:19:84:06:9a:67:
c7:52:e9:4b:8f:97:04:76:28:c1:fe:9d:42:1c:38:40:bd:9d:
2c:aa:4a:3f:f3:99:c9:02:16:50:da:d9:fe:77:c5:89:12:67:
ec:c4:92:eb:0a:8b:06:9b:6a:c1:3d:04:84:d1:e4:55:69:fc:
95:b3:05:07:a7:a4:23:b2:f2:5b:98:66:8f:b3:a9:e4:6b:2b:
95:1a:f3:fc:69:c7:db:c2:02:af:75:ee:3c:f7:c7:7e:d6:10:
07:5f:fa:08:82:9a:cd:0f:9c:7b:5b:89:27:4f:1e:23:88:be:
3a:90:a0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:19 2026 by rpki-client