
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/c74DN7JJBMLaV4R4Bmp9USTDBb0.roa
File: c74DN7JJBMLaV4R4Bmp9USTDBb0.roa (raw, json)
Hash identifier: t+ZhGPQNTB8SYrQYSxPgRXmke+H97PZD3IlZyE0/9Ds=
Subject key identifier: 73:BE:03:37:B2:49:04:C2:DA:57:84:78:06:6A:7D:51:24:C3:05:BD
Certificate issuer: /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial: 7C
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/c74DN7JJBMLaV4R4Bmp9USTDBb0.roa
Signing time: Tue 31 Mar 2026 07:32:49 +0000
ROA not before: Tue 31 Mar 2026 07:32:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23818
IP address blocks: 203.79.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 13:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Validity
Not Before: Mar 31 07:32:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=73BE0337B24904C2DA578478066A7D5124C305BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:c2:4a:e8:35:9a:ae:75:78:cf:98:bf:f6:
da:77:2d:68:8f:72:99:6e:1f:c8:8c:e3:5a:fd:c1:
5b:6c:5b:e0:5e:c0:ec:c3:9a:cf:85:52:3b:51:2a:
39:88:fc:ee:37:c1:da:de:1c:62:7a:f3:64:a3:b3:
df:f4:03:1b:46:f0:8e:4c:6e:1c:b4:51:39:80:3c:
08:01:b4:37:aa:c5:9c:3b:c1:30:f4:22:33:b7:8b:
41:7c:0e:38:ed:8d:60:f9:10:d5:8b:ca:88:c9:ca:
59:bf:e6:50:ea:ab:77:4e:7c:98:02:97:fe:02:5a:
0a:c6:a4:97:85:34:1a:76:fc:42:47:ff:bc:30:7c:
53:aa:9b:cf:69:9f:8d:1e:3c:13:0e:f8:5d:9b:7b:
46:fb:59:b3:c6:4d:20:79:6d:3c:b9:a5:61:84:c4:
da:c3:9d:b1:23:85:48:9b:70:e3:41:ea:8e:13:64:
24:b0:e9:aa:00:77:eb:ae:96:ad:e5:67:1b:46:4c:
ae:4b:05:c5:76:38:6e:51:30:cd:5b:66:f6:44:76:
86:13:66:75:1d:cb:6d:c7:24:cf:8b:be:73:07:60:
36:45:ac:49:d6:08:90:a2:97:98:b7:0b:02:92:1f:
1d:7d:2f:ae:f4:82:80:c5:76:1c:b6:74:96:2a:b1:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:03:37:B2:49:04:C2:DA:57:84:78:06:6A:7D:51:24:C3:05:BD
X509v3 Authority Key Identifier:
keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/c74DN7JJBMLaV4R4Bmp9USTDBb0.roa
sbgp-ipAddrBlock: critical
IPv4:
203.79.48.0/22
Signature Algorithm: sha256WithRSAEncryption
70:fa:39:ed:d0:60:c9:c8:0f:2d:27:cb:cf:f8:9f:51:89:46:
de:e8:48:ed:0e:5f:3e:22:cd:d0:3f:55:3d:da:2d:ca:7d:15:
b7:2f:a4:45:68:25:a3:06:6b:9e:01:bb:75:da:c2:81:ee:3d:
42:09:50:b9:4c:84:de:42:66:22:53:4e:d7:19:6a:eb:a6:b6:
65:dc:e3:3f:b7:d8:3b:ec:87:10:85:f5:9b:b1:62:ed:b5:e0:
83:22:78:9e:fe:7e:57:dd:4d:e8:f2:8c:f3:ba:a4:65:e0:75:
ce:97:24:63:46:d4:ca:3a:ae:cb:89:bc:18:62:29:ef:21:73:
93:49:80:e1:62:53:fc:a4:5d:53:67:49:f4:e6:ce:66:37:c1:
23:2f:6a:80:46:cd:5c:19:e9:d1:14:95:48:60:06:cb:bf:d5:
67:c4:c2:f8:e8:ea:b4:73:11:47:ca:f1:c4:12:06:6e:83:1a:
0c:d1:44:9b:b7:14:5b:ec:89:dd:fe:99:6b:22:a0:cb:e1:1c:
76:98:be:4b:ec:67:66:df:bf:c3:7d:57:90:de:2f:e6:4d:0e:
c0:40:fd:11:e3:2f:82:8b:4b:93:95:dd:46:e4:ae:bc:a4:86:
e7:05:07:f6:91:ce:aa:a0:ed:d7:11:ff:73:30:45:f4:a0:ba:
d8:da:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:38 2026 by rpki-client