
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/JyEFAWTZO6L2JvTwj_PI5t7QAnY.roa
File: JyEFAWTZO6L2JvTwj_PI5t7QAnY.roa (raw, json)
Hash identifier: 2ecRCiSbu3hvIfuksvck/mR5tjYzhvDBfXtSB+KEa0Y=
Subject key identifier: 27:21:05:01:64:D9:3B:A2:F6:26:F4:F0:8F:F3:C8:E6:DE:D0:02:76
Certificate issuer: /CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Certificate serial: 06
Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/JyEFAWTZO6L2JvTwj_PI5t7QAnY.roa
Signing time: Mon 23 Mar 2026 10:58:11 +0000
ROA not before: Mon 23 Mar 2026 10:58:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10001
IP address blocks: 210.48.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Validity
Not Before: Mar 23 10:58:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2721050164D93BA2F626F4F08FF3C8E6DED00276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:48:f9:3e:86:d8:aa:cf:3c:ce:cf:df:23:
83:8a:98:1c:db:0f:1e:fe:35:7c:d5:b3:20:87:36:
e6:ad:8d:c2:48:62:ab:c3:5a:07:54:36:b1:f0:98:
81:f5:ed:5e:7c:ee:d8:de:31:16:19:2b:45:e6:d1:
2e:1a:4b:ca:8b:87:63:e1:0a:51:6f:6c:32:e4:c6:
01:58:4a:bb:60:3b:b2:9c:2c:60:d3:32:f4:79:42:
4e:fb:c7:fa:87:51:50:22:8f:5d:13:24:47:1b:f2:
68:70:1d:18:0e:2f:12:94:38:26:12:d6:90:32:4c:
60:d4:7c:58:50:17:ec:c2:2d:fe:4a:e0:6f:8b:8a:
f0:21:e4:c8:c3:ff:1c:7c:f2:83:22:54:36:e9:cc:
49:07:95:0a:2f:87:4e:c0:90:e8:16:68:fe:95:8b:
bf:33:c1:1f:23:29:35:f0:37:24:88:1c:47:91:8c:
3c:fd:39:14:19:b9:c4:1a:a2:03:03:ca:ac:98:a3:
34:d2:cc:c0:f6:d1:11:fd:09:06:ce:83:09:a5:9b:
08:ce:a3:29:1e:8a:9e:8c:b9:1b:3b:0a:46:68:2d:
6a:68:83:44:fd:82:81:5c:9c:f5:4a:73:0e:63:ee:
bc:72:a1:b9:55:cc:1e:92:77:25:ce:a5:82:66:56:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:05:01:64:D9:3B:A2:F6:26:F4:F0:8F:F3:C8:E6:DE:D0:02:76
X509v3 Authority Key Identifier:
keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/JyEFAWTZO6L2JvTwj_PI5t7QAnY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.48.128.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:d9:ea:e8:cd:ac:d4:7c:4e:b2:6e:df:ec:c8:30:f5:b8:db:
96:c7:98:e0:d2:51:b3:ee:8b:e5:e5:da:67:56:17:69:45:70:
49:56:3b:ed:f7:78:c0:12:5d:d6:ed:a9:94:70:f3:28:f5:25:
8e:a6:5f:51:5d:bf:2a:51:81:09:1b:1b:4a:f5:d9:b6:2d:f3:
14:60:3e:86:46:b6:08:a1:ec:e7:d0:b4:32:75:0b:91:c1:5a:
32:24:4b:34:e6:a0:98:ec:bd:3b:b0:bb:2d:68:2b:bd:10:49:
53:1f:9d:6b:7d:b9:39:bf:0c:7e:48:43:bf:ca:76:79:35:32:
c4:d9:66:56:60:dc:ca:cc:5b:3c:fc:58:06:bb:d6:ff:f0:f4:
44:e3:10:3c:ef:e8:50:ae:79:4b:e8:09:fd:97:b4:be:62:c2:
35:34:76:4e:8f:ee:1d:8e:a3:94:c3:58:3b:b8:e0:b0:36:8b:
f3:46:bb:a0:6c:ad:86:1a:21:4f:b3:79:f1:2e:2e:e8:b2:cf:
55:99:47:d3:6e:ca:07:f1:8b:60:c0:d9:e0:1b:8f:88:1d:e7:
61:6b:7a:d4:c8:0d:e7:27:55:e5:26:ee:5d:e0:10:28:a6:a2:
e1:ca:de:ab:4a:80:9c:ad:c5:c7:5d:bb:15:49:6e:98:6b:28:
79:7d:4e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:19:26 2026 by rpki-client