
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/ClGj6MzjU9Y-rCkXHDwheST1JDM.roa
File: ClGj6MzjU9Y-rCkXHDwheST1JDM.roa (raw, json)
Hash identifier: uDjYLMo+buvJ/rDHTkQUfT0oPMugX08YJY6fmhSAzJQ=
Subject key identifier: 0A:51:A3:E8:CC:E3:53:D6:3E:AC:29:17:1C:3C:21:79:24:F5:24:33
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: AC
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ClGj6MzjU9Y-rCkXHDwheST1JDM.roa
Signing time: Tue 31 Mar 2026 07:38:51 +0000
ROA not before: Tue 31 Mar 2026 07:38:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9621
IP address blocks: 218.40.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Mar 31 07:38:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0A51A3E8CCE353D63EAC29171C3C217924F52433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:02:28:df:8b:c7:61:9b:18:dc:8a:53:ac:
f7:ae:55:73:14:54:de:7d:ec:a7:bc:0f:0a:90:7c:
59:e9:59:97:67:48:d0:06:ac:91:4e:d3:6c:33:fc:
35:f8:0c:cd:2b:b5:fd:25:56:89:44:61:85:3e:32:
a5:dd:79:83:87:bb:1c:39:bc:6e:fe:67:22:2d:32:
3d:41:ba:9c:32:e2:a1:9d:9f:a4:dd:a3:b4:72:9f:
c4:49:e5:a1:ab:a4:18:69:a4:11:06:36:8e:36:f1:
a2:54:7e:25:64:35:88:f8:1f:1b:b9:7c:e3:c7:38:
86:4c:d5:03:dd:48:f8:f5:ec:5d:10:7c:6b:6a:a3:
9e:7c:55:13:2d:2e:30:bd:3d:f1:64:c8:a7:8a:38:
92:4e:19:ab:6c:19:97:d2:29:aa:71:f1:d8:a4:7a:
2a:44:9c:56:37:52:c5:72:70:da:b8:5f:5a:5e:b6:
52:68:57:4d:78:d4:41:ee:70:ee:03:17:62:cc:5c:
d7:d2:57:32:13:f5:98:10:9b:63:77:33:58:49:da:
15:6b:fa:21:e3:d7:ee:04:dd:f8:76:df:6d:df:b4:
ab:79:76:af:1d:77:51:4b:ef:9e:46:e2:39:9f:8a:
19:3b:01:0e:8b:85:f8:67:2e:42:a8:ba:d7:90:c4:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:A3:E8:CC:E3:53:D6:3E:AC:29:17:1C:3C:21:79:24:F5:24:33
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ClGj6MzjU9Y-rCkXHDwheST1JDM.roa
sbgp-ipAddrBlock: critical
IPv4:
218.40.160.0/19
Signature Algorithm: sha256WithRSAEncryption
84:14:a4:fe:ab:55:0f:85:45:f9:8f:97:88:b7:a2:cb:92:36:
a7:64:88:0e:cb:d0:9f:23:88:ad:09:ba:c4:82:8d:01:89:c7:
ca:d5:54:52:08:a5:83:9a:93:e1:ca:f4:f8:d9:27:e3:2a:e6:
e3:97:d9:34:e4:e2:05:7f:f8:cf:df:c4:56:74:f5:28:e1:c0:
4f:a1:6b:e3:4f:ed:b0:88:6c:7b:de:a3:df:45:f1:a1:aa:ca:
d8:25:d2:b4:a3:60:ac:07:96:69:b9:d9:28:54:27:f2:d8:27:
62:f1:7a:06:05:fb:3d:3c:19:e5:ee:9e:33:31:bd:04:3a:ca:
e4:64:aa:b0:ad:32:70:98:39:19:13:02:d7:ca:d9:ca:16:bb:
a1:9f:9d:ef:c5:2f:64:9c:1c:e8:84:46:73:a7:70:ff:94:f2:
8d:c9:18:13:fb:2f:a7:59:aa:a7:9d:4a:73:18:7f:01:6b:9b:
88:e0:c3:3b:60:a4:97:3c:62:d5:c4:32:05:66:1d:d2:28:b2:
de:73:8d:92:27:6a:5d:13:4b:db:b2:c0:e1:55:7f:d8:c7:66:
69:ef:78:88:c7:6d:64:79:f9:70:81:f3:d9:93:d4:27:3e:44:
1d:12:b8:75:c3:a5:92:6d:1d:3e:97:9f:71:e3:a9:23:43:1e:
57:ee:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:26 2026 by rpki-client