
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/ghvz8NRwz9VpgmMtqAr9KL7lUTo.roa
File: ghvz8NRwz9VpgmMtqAr9KL7lUTo.roa (raw, json)
Hash identifier: W9gJQgoGxyuKRzPo0oX7D2PvbRCzW7d7yIiaHtyAcgk=
Subject key identifier: 82:1B:F3:F0:D4:70:CF:D5:69:82:63:2D:A8:0A:FD:28:BE:E5:51:3A
Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Certificate serial: 5D
Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ghvz8NRwz9VpgmMtqAr9KL7lUTo.roa
Signing time: Tue 31 Mar 2026 07:32:03 +0000
ROA not before: Tue 31 Mar 2026 07:32:03 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24289
IP address blocks: 202.223.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93 (0x5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Validity
Not Before: Mar 31 07:32:03 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=821BF3F0D470CFD56982632DA80AFD28BEE5513A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:be:6e:1d:27:36:23:10:50:59:7d:9b:0a:
34:b1:c1:d8:63:8b:a3:f0:94:f0:3b:f0:59:f1:91:
ec:04:7f:85:2e:88:1d:a0:d0:40:42:37:5c:54:08:
5f:4b:48:b2:ad:5c:d1:46:1f:2f:21:3f:f8:32:b5:
f7:ff:a9:5d:41:93:d7:4e:8a:34:d2:9b:d8:45:28:
52:62:b9:39:45:6b:1f:8f:97:2f:07:a7:68:c7:ea:
7d:ef:ea:b5:68:0d:c6:16:24:b0:d8:4f:fc:b1:de:
e3:b3:18:df:88:63:2a:bd:3b:71:08:ba:f2:40:04:
89:c4:24:2e:87:bd:87:27:a5:fc:62:d8:50:6a:dd:
94:bc:25:84:92:47:88:00:e6:8f:33:e1:94:13:3a:
d2:7d:ac:bb:5a:52:19:bb:4a:2c:55:eb:00:f1:77:
b8:6b:b5:ec:7e:3e:68:7d:b5:8e:3a:91:79:17:e7:
f6:65:b2:67:a4:57:14:85:70:74:27:5c:7b:bb:3b:
89:e9:5e:85:5f:e8:6d:a1:a3:c6:d5:cf:80:6d:47:
b0:30:4c:0f:77:08:4d:0e:84:5b:51:b4:39:f6:4b:
a0:8a:0d:35:30:18:f8:48:12:d7:96:84:4c:b2:28:
b9:24:66:d8:6a:57:78:c3:1e:70:5a:48:12:19:70:
5e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1B:F3:F0:D4:70:CF:D5:69:82:63:2D:A8:0A:FD:28:BE:E5:51:3A
X509v3 Authority Key Identifier:
keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/ghvz8NRwz9VpgmMtqAr9KL7lUTo.roa
sbgp-ipAddrBlock: critical
IPv4:
202.223.32.0/22
Signature Algorithm: sha256WithRSAEncryption
79:4e:00:e6:df:8b:bc:e3:b5:f1:95:9b:59:05:a8:cf:6e:a7:
92:54:6b:80:13:e3:37:b5:4d:38:ef:9e:3b:18:88:09:0e:f5:
48:6f:8b:64:fa:57:2c:55:9a:eb:b8:f5:df:f8:9c:66:a2:c3:
33:7e:88:01:87:d4:45:9c:1d:87:83:59:d2:2c:5b:d2:1b:b2:
c4:a5:35:6a:71:7e:9e:da:74:5c:24:6c:02:d9:a0:2c:0b:bc:
0b:6c:a1:9f:3a:d6:94:18:7c:7f:57:ef:a5:80:1a:c8:53:73:
25:dd:5c:5f:95:7c:e5:58:57:fd:86:10:06:99:c4:98:fc:5b:
44:5a:17:8d:5b:b1:cd:0d:f3:63:ac:e8:98:ca:cc:00:71:3f:
af:a9:18:47:e4:d2:a9:1d:9a:57:8e:18:7c:07:1c:20:8c:4d:
54:e8:df:2a:44:3e:57:40:79:ae:14:9a:d5:ec:71:a9:e9:46:
d8:ce:5f:32:59:ce:09:58:a4:2d:10:9a:7f:d1:d4:7f:b8:0c:
ea:a0:f2:bb:6d:0d:e4:ae:2b:ab:07:1a:68:3b:8b:c0:97:09:
dc:f8:07:6c:10:8a:a9:6a:35:78:e6:d1:ec:1c:de:85:c1:f4:
47:c3:f9:8a:e5:31:39:e7:2f:01:a3:26:ae:a4:23:f6:e7:38:
46:a8:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:39 2026 by rpki-client