
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/OyIZX2qTbpZCObYRZ1wRwjTpUdU.roa
File: OyIZX2qTbpZCObYRZ1wRwjTpUdU.roa (raw, json)
Hash identifier: h8kkWkCdd4F7ZISY6g9/++EjSFO8jl8urGpkO+THBgc=
Subject key identifier: 3B:22:19:5F:6A:93:6E:96:42:39:B6:11:67:5C:11:C2:34:E9:51:D5
Certificate issuer: /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial: 2D
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/OyIZX2qTbpZCObYRZ1wRwjTpUdU.roa
Signing time: Sun 01 Mar 2026 01:35:30 +0000
ROA not before: Sun 01 Mar 2026 01:35:30 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 23827
IP address blocks: 115.31.80.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Validity
Not Before: Mar 1 01:35:30 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3B22195F6A936E964239B611675C11C234E951D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:7f:93:13:e7:b6:a5:0a:da:90:ce:7d:cf:
53:4c:70:0e:cd:c9:b6:0f:2e:aa:a7:c2:3b:85:26:
39:56:2d:b2:a7:2e:12:e8:cb:9b:d3:53:61:19:a4:
1e:db:a9:58:fc:62:12:fb:ca:eb:50:62:bb:c9:8b:
2d:86:05:6a:86:3c:a7:9b:87:be:49:31:ff:07:a6:
cc:bd:98:7c:0c:c9:46:12:1a:71:b1:89:e3:1c:39:
27:f5:50:35:2d:02:8c:be:65:98:71:72:4c:62:0c:
04:f2:f3:14:49:5d:07:66:7f:b6:41:d4:9e:9d:d7:
d5:3e:c6:03:98:1e:cb:ed:b9:3c:c3:bf:9b:2c:a5:
97:8e:08:75:ba:b3:d9:95:86:a4:3b:12:e5:27:55:
f2:b5:dd:b6:c8:a5:11:49:63:bd:00:b8:01:ea:dc:
76:25:23:b0:a6:a8:5a:27:90:fc:4b:34:82:0f:15:
6f:03:11:db:c4:9f:ab:80:bf:80:57:c2:6d:80:8e:
a9:97:d5:3d:d9:60:d2:24:08:2c:45:19:0a:d2:a1:
0d:df:f6:2d:1d:1b:7c:c9:60:f4:40:38:77:6b:32:
19:70:e1:7b:04:4e:0c:eb:15:e9:29:58:97:3e:17:
46:3e:ab:c3:c5:b1:94:f5:f0:36:b4:f5:09:6d:db:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:19:5F:6A:93:6E:96:42:39:B6:11:67:5C:11:C2:34:E9:51:D5
X509v3 Authority Key Identifier:
keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/OyIZX2qTbpZCObYRZ1wRwjTpUdU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.31.80.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:0b:2b:a7:d2:f8:b4:0d:f0:08:3a:7b:f3:d4:fc:3c:f3:6f:
72:83:b0:b6:89:30:df:96:24:3b:c1:f2:0e:c0:68:d2:b1:3e:
a8:59:e3:41:ab:50:41:43:2a:d2:08:1d:31:6c:3c:ed:92:9c:
5f:c7:9b:6e:03:e4:7a:5a:94:be:15:2d:36:79:fb:60:47:6d:
b8:dc:3b:57:e7:b3:46:da:35:ab:52:81:02:14:67:04:57:0f:
d3:72:90:38:76:63:13:4b:24:a3:69:a4:de:c9:69:0f:39:8e:
bc:95:2c:10:2e:10:05:ec:f8:b9:7b:fb:c3:3b:93:6b:55:04:
b1:28:a7:5c:d3:e8:dc:25:bc:3b:72:d0:53:cf:a4:4f:21:89:
9b:54:d3:76:7f:99:b7:b6:19:b1:36:de:5b:33:f4:f3:dc:98:
4d:a8:28:b9:74:93:b7:74:22:3b:8e:ac:78:2e:d9:7e:94:94:
62:de:d1:b9:53:00:3b:5b:a7:f1:20:1e:42:45:a7:54:86:7d:
02:6a:a5:22:02:48:4c:72:9a:b4:92:56:7e:e7:3c:e1:95:14:
28:5f:82:bf:52:67:b4:f6:cf:89:42:93:76:3f:d7:10:37:ed:
4f:56:d0:66:5c:ba:5b:01:32:d5:e9:d2:ac:f1:f9:2d:e8:cc:
72:68:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:37 2026 by rpki-client