
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/WTVZJREPiyWi6s8oBWPpi3shA4w.roa
File: WTVZJREPiyWi6s8oBWPpi3shA4w.roa (raw, json)
Hash identifier: DPlviYSc8Db6KeGdG6RlVzmZa3YuvKXvlHjFgeBwVF4=
Subject key identifier: 59:35:59:25:11:0F:8B:25:A2:EA:CF:28:05:63:E9:8B:7B:21:03:8C
Certificate issuer: /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial: 2B
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/WTVZJREPiyWi6s8oBWPpi3shA4w.roa
Signing time: Sun 01 Mar 2026 01:35:29 +0000
ROA not before: Sun 01 Mar 2026 01:35:29 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 23827
IP address blocks: 202.84.48.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Validity
Not Before: Mar 1 01:35:29 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=59355925110F8B25A2EACF280563E98B7B21038C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0b:1f:3d:fc:63:ce:06:ab:dd:ed:f6:58:8e:
a9:23:b2:9e:a6:bd:b8:47:fa:bc:e4:bd:2e:a3:8a:
ec:ef:d4:4e:0b:b9:f4:c1:5b:bd:b5:46:4a:dc:e5:
7a:6d:85:9f:42:6a:2a:67:c7:7b:18:c8:01:25:8e:
76:d7:5c:87:a7:ea:ae:8d:40:8a:01:6c:22:3e:72:
6d:e7:90:92:5e:01:6d:b5:d9:4e:d5:a1:e0:7e:a1:
0f:34:8c:c2:9b:1d:94:8f:06:b8:c2:5a:8e:36:91:
17:75:87:33:64:bc:44:5a:e0:e0:b0:5e:59:4a:72:
bf:be:87:9d:54:f5:5b:0d:13:b1:53:05:97:34:57:
ac:50:d3:35:e3:62:58:6f:33:40:dd:65:35:f7:97:
7c:5b:5a:1d:08:4b:b8:f3:81:0b:2a:6d:a4:58:98:
55:8e:2e:b3:42:00:78:5f:24:ff:da:75:a7:ce:0f:
82:70:83:0b:2c:e6:fe:a4:f4:59:a8:2a:2b:84:f5:
97:31:5d:ac:d5:71:d3:a0:2d:ab:f1:8d:3a:c3:f1:
87:54:65:18:e7:84:fd:2e:3f:df:a8:99:b3:08:d0:
1d:1f:e6:a6:72:7a:3e:82:22:d3:41:a0:4b:11:2d:
b3:b8:a4:c8:6f:68:a8:c5:ca:c5:94:02:dc:d0:87:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:59:25:11:0F:8B:25:A2:EA:CF:28:05:63:E9:8B:7B:21:03:8C
X509v3 Authority Key Identifier:
keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/WTVZJREPiyWi6s8oBWPpi3shA4w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.84.48.0/20
Signature Algorithm: sha256WithRSAEncryption
54:78:e6:40:03:e5:8e:20:b6:54:33:d8:ad:0f:83:7e:b6:38:
5e:f0:b4:43:63:32:6c:24:d7:2c:44:30:92:71:63:50:6b:12:
f0:e0:e4:90:ed:55:5d:f6:cb:51:da:69:6b:c1:4f:c2:6e:90:
65:1d:9a:3d:fb:57:74:10:c6:00:40:1e:51:f1:1b:b1:a6:91:
31:39:e5:bc:96:7c:ce:fd:e9:93:24:d4:df:70:49:79:9f:eb:
1d:10:d1:9c:1b:2c:a1:48:f5:a7:7e:e3:e5:3b:22:5a:43:ae:
64:c7:28:f6:e2:42:8a:5a:6b:da:c9:04:1a:36:57:4c:02:4f:
af:19:c4:a1:7b:bc:83:0d:ae:d6:fa:8b:64:31:f5:b0:9d:d7:
87:0b:bf:70:09:55:6a:64:fd:b6:49:63:81:de:6f:7c:8e:33:
06:40:52:d0:91:0c:c6:1e:9f:2d:1b:f3:1d:f2:ab:24:df:98:
98:20:b8:30:56:ea:0e:6e:6d:50:eb:b7:bc:c0:1a:e1:7f:da:
42:f8:51:41:82:6f:22:8e:d9:68:eb:a6:ce:1e:9c:ea:55:62:
b3:e0:2e:74:8e:d7:fb:3f:68:eb:a6:b6:30:f7:ca:94:78:b9:
d0:03:7b:2e:6e:13:dd:a5:bc:f4:67:8c:b2:22:b5:1f:98:06:
16:e8:05:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:35 2026 by rpki-client