
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/2TIzJ8wN5osVN1s3EK1gv-whkIo.roa
File: 2TIzJ8wN5osVN1s3EK1gv-whkIo.roa (raw, json)
Hash identifier: j+9XtPO64j7vSK/jJOiu3TQzGW7Q9Dbb9NndoFXOPU8=
Subject key identifier: D9:32:33:27:CC:0D:E6:8B:15:37:5B:37:10:AD:60:BF:EC:21:90:8A
Certificate issuer: /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial: 4B
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/2TIzJ8wN5osVN1s3EK1gv-whkIo.roa
Signing time: Sun 01 Feb 2026 01:29:53 +0000
ROA not before: Sun 01 Feb 2026 01:29:53 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 131954
IP address blocks: 202.226.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Validity
Not Before: Feb 1 01:29:53 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=D9323327CC0DE68B15375B3710AD60BFEC21908A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:b8:9e:69:bb:65:a3:78:da:49:e1:c3:51:
c8:9a:18:33:f4:67:13:8d:b0:d9:76:f9:50:47:df:
e7:41:a3:97:4f:55:5a:02:87:cd:02:25:06:05:51:
ae:2e:79:bd:c2:86:2e:aa:5b:56:50:98:cf:e7:3a:
55:c1:a3:65:78:65:c3:77:b0:25:da:4f:07:36:22:
4e:c7:a2:11:90:84:1e:12:82:66:cd:ff:d2:43:30:
ab:b1:68:09:b2:b1:6d:37:b6:e9:50:3b:e0:f0:46:
e5:98:42:9d:17:bc:81:26:cd:7d:16:e5:96:29:35:
2d:06:a3:1c:58:4f:c2:bc:b9:69:08:ca:98:76:01:
f1:6c:7e:5d:da:9e:88:98:a0:9d:9d:93:be:16:3c:
1e:6c:a7:85:39:49:86:40:48:c6:31:a0:c5:b7:90:
62:d9:e1:00:58:7b:ae:fa:b3:ef:cf:de:e9:4f:e4:
cb:20:6f:91:1c:f2:bb:3a:a8:6a:d7:2f:85:02:f8:
66:df:f6:94:cd:26:91:ee:08:17:7f:4e:a4:3c:16:
f4:18:98:6e:77:13:0e:a5:ec:03:32:97:33:1d:40:
11:36:f9:81:2a:86:b9:d1:59:69:c7:1c:6c:40:e7:
06:8d:06:8a:2e:d6:36:11:0f:e8:49:2f:3c:43:6e:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:33:27:CC:0D:E6:8B:15:37:5B:37:10:AD:60:BF:EC:21:90:8A
X509v3 Authority Key Identifier:
keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/2TIzJ8wN5osVN1s3EK1gv-whkIo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.226.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:51:ed:74:92:28:59:59:bf:b4:2e:e2:bf:79:da:da:33:2a:
eb:a1:fc:96:af:c5:54:39:9b:28:7b:9d:68:f4:e6:85:7c:cf:
cf:28:e4:ee:ec:53:7e:c8:ad:13:ee:2d:2c:8e:d6:f9:34:3a:
76:32:ce:46:bb:02:aa:fa:e3:c1:76:7e:69:1f:20:d5:ee:7c:
1a:1e:ff:82:5b:59:08:c0:fd:e1:62:e8:b1:89:34:dd:45:18:
f9:1c:29:a2:40:59:6e:fe:9e:4c:c5:54:04:0d:7e:8e:32:3e:
35:58:6c:04:11:fd:6d:ee:b9:69:5b:b1:46:a1:45:08:f6:8f:
17:7f:0d:cf:88:11:8a:65:2b:e0:e5:f6:1b:5c:e0:00:f0:5d:
5d:81:87:d7:8d:8a:6e:f5:aa:b8:3e:84:c9:22:cf:fc:e9:55:
c4:d5:c1:19:6c:24:d4:43:0f:09:03:9e:ab:be:f8:74:49:c4:
4e:cf:42:4e:3b:1e:68:9c:5c:f5:18:8e:d7:db:d5:bf:e6:3c:
7e:02:af:53:50:17:c5:60:2e:ac:80:7a:68:f1:68:52:c5:4c:
a0:bd:ee:55:60:f2:29:cb:47:bf:4c:52:29:eb:0a:8b:03:fe:
9b:77:fc:48:27:4d:15:5d:9e:58:11:48:09:0f:31:4f:e3:35:
09:01:ac:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:29:09 2026 by rpki-client