
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/O0T8FeJEyag1CPrehF5N-Hc6k-g.roa
File: O0T8FeJEyag1CPrehF5N-Hc6k-g.roa (raw, json)
Hash identifier: sdVZIfe4BPueIKPC9WXiEMMfMp6YYE/KW72SeOSBJXc=
Subject key identifier: 3B:44:FC:15:E2:44:C9:A8:35:08:FA:DE:84:5E:4D:F8:77:3A:93:E8
Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Certificate serial: 59
Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/O0T8FeJEyag1CPrehF5N-Hc6k-g.roa
Signing time: Sun 01 Mar 2026 01:31:13 +0000
ROA not before: Sun 01 Mar 2026 01:31:13 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 24289
IP address blocks: 202.223.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Validity
Not Before: Mar 1 01:31:13 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3B44FC15E244C9A83508FADE845E4DF8773A93E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:74:28:43:c6:a0:3d:4b:11:01:bf:be:81:
8a:f7:da:87:68:cf:75:1e:17:5f:4e:74:d5:b0:cc:
97:dd:4b:b8:40:18:fc:5a:93:58:5f:eb:85:fe:a4:
30:9c:7a:67:98:bf:ce:59:0f:b1:27:d7:54:fb:12:
f9:22:59:60:3a:43:05:ea:a2:73:14:b1:86:dd:1f:
04:d4:1e:3f:12:81:8d:4b:23:cb:59:89:3b:95:a4:
81:61:cc:29:23:82:a6:98:69:3b:f8:f0:4c:e1:3e:
9e:a8:ff:14:1e:1d:b7:f6:43:d8:ae:d4:a6:6c:11:
2c:87:33:70:e3:30:f9:fb:f8:1a:fa:33:f0:09:60:
e7:e1:60:ee:56:ef:d7:f4:67:a5:7c:b4:f6:9d:89:
63:88:0c:2d:58:0b:d1:77:48:a9:ba:7b:90:20:9c:
67:b1:2c:78:6b:e8:57:5d:6d:de:54:7a:b6:db:8b:
2b:ba:54:d4:3d:8d:b1:ee:c9:18:b2:db:c3:84:7e:
f4:a3:b9:0d:a4:95:b5:8b:59:c5:b9:d7:fe:68:18:
0d:a6:c0:17:22:7f:6b:6c:c9:d9:78:ef:fb:f6:75:
68:1d:5b:5f:4f:42:7c:7e:85:9e:f3:e0:5e:29:e5:
d7:d2:20:df:68:ff:78:be:65:8c:03:76:54:05:fa:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:44:FC:15:E2:44:C9:A8:35:08:FA:DE:84:5E:4D:F8:77:3A:93:E8
X509v3 Authority Key Identifier:
keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/O0T8FeJEyag1CPrehF5N-Hc6k-g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.223.32.0/22
Signature Algorithm: sha256WithRSAEncryption
98:62:f9:ad:ac:6a:81:c1:2e:4c:6e:d0:b0:bd:0e:74:3b:b6:
0f:2d:1e:de:a2:8e:67:81:8f:aa:12:b5:7a:86:06:b0:c3:4d:
2c:d2:d6:8d:d0:34:7a:aa:01:e2:9a:ff:99:e7:39:ce:78:3d:
e6:04:8d:78:2d:ed:2b:6c:89:a7:cd:e1:b3:04:ec:90:61:da:
08:97:07:ee:3d:50:4f:5c:3f:84:6b:96:d1:4c:8c:5f:e6:38:
04:50:fb:9a:86:14:50:80:07:4d:a3:c2:f5:8e:4a:de:2d:99:
dc:4c:bb:d3:e0:20:8a:95:74:0a:ff:71:14:5a:be:3c:0f:ec:
dd:a9:91:c5:3a:b5:41:85:90:2f:cd:59:54:63:9a:42:06:2a:
55:92:ab:a5:77:e2:dc:67:ab:2a:8b:84:73:b8:bb:dc:b3:b7:
ad:86:40:ab:93:a9:f3:44:60:65:02:de:c1:cc:f9:2f:32:12:
64:99:69:e0:66:32:e5:1e:f7:0c:8c:ba:bd:b9:c3:fb:0f:1b:
dd:19:22:72:9d:e1:89:ec:1d:23:eb:c5:f3:b4:87:a5:43:e0:
82:0e:78:7e:9a:cc:38:89:07:0d:0b:d0:c8:6b:a3:09:de:ab:
1b:83:2e:d4:da:74:ac:ed:c5:fd:6f:b1:3b:a4:9c:08:1f:ad:
87:2b:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:45 2026 by rpki-client