
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/4ZTMgvj4CIMB0hjY20LJd-Lszw8.roa
File: 4ZTMgvj4CIMB0hjY20LJd-Lszw8.roa (raw, json)
Hash identifier: /44My/pYwy+Mp3JZtTZLErZ6PEsuX/B+SMVTJQppzso=
Subject key identifier: E1:94:CC:82:F8:F8:08:83:01:D2:18:D8:DB:42:C9:77:E2:EC:CF:0F
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 07
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/4ZTMgvj4CIMB0hjY20LJd-Lszw8.roa
Signing time: Wed 25 Mar 2026 05:35:41 +0000
ROA not before: Wed 25 Mar 2026 05:35:41 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 60.57.0.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 25 05:35:41 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=E194CC82F8F8088301D218D8DB42C977E2ECCF0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:76:c6:c9:dd:8a:33:db:bd:2e:8e:8a:7a:
98:94:44:95:d0:b7:cb:7e:4e:8c:f0:2c:09:02:5e:
83:11:51:01:28:5c:e4:af:49:4e:a8:d5:5a:46:72:
b7:a2:49:36:2a:3d:21:6c:e1:47:2f:7d:c1:65:47:
e3:1b:20:f3:a0:62:78:55:04:9f:af:ff:09:c8:e3:
fd:2f:6d:e0:ab:e5:a9:44:25:ef:76:05:78:09:d2:
01:ec:fb:7f:46:2e:c5:b8:4b:c7:40:df:dc:99:b6:
9d:0f:c5:8c:95:f4:ac:86:c2:a6:7f:75:e1:b6:69:
fa:ba:54:f4:fc:0d:fc:74:2a:3d:82:1d:5b:78:2d:
ee:63:c1:69:75:f6:83:94:64:91:40:98:a8:6f:7c:
df:de:e2:7e:26:ed:30:a7:a9:ef:6a:f4:aa:3a:98:
25:fd:82:11:bf:4d:05:4b:20:7a:29:74:a8:57:78:
77:53:58:87:bf:4f:07:84:c1:cb:06:0b:fc:f4:83:
66:fe:8a:04:25:b6:b0:6e:2c:b9:e3:24:6e:55:2c:
c6:ae:e9:d4:f7:5c:d7:16:71:f6:43:3b:ad:33:a5:
59:5a:ad:75:14:b7:6d:01:62:df:16:38:ab:84:91:
bf:ef:73:31:65:f0:68:89:d8:98:70:c6:4c:d7:f1:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:CC:82:F8:F8:08:83:01:D2:18:D8:DB:42:C9:77:E2:EC:CF:0F
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/4ZTMgvj4CIMB0hjY20LJd-Lszw8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.57.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6b:6a:4e:6f:b5:8d:2f:23:6a:e5:66:f9:34:d1:f0:de:fc:78:
dc:14:5e:1d:5c:cd:f9:85:32:03:78:c7:17:6b:4c:28:65:c4:
95:b2:e1:eb:16:00:8b:13:b7:14:09:58:bb:44:92:f2:87:c2:
4c:8e:50:80:80:e9:26:d9:e1:09:0d:68:ab:81:e9:94:24:fe:
32:96:38:1f:08:53:9a:ef:fd:36:ff:d8:a0:03:1d:26:c3:ff:
13:9e:ad:4a:a1:45:d4:fd:c7:db:31:14:35:18:0b:ab:70:d2:
8c:a5:bd:b0:ca:10:5b:a6:85:9b:e4:d0:72:25:6f:3a:a6:34:
9c:be:d7:bc:86:ae:51:b7:22:d7:64:da:0e:69:e0:c7:23:79:
f9:ed:9f:cc:1d:8c:b9:4b:e1:c4:c3:32:5a:c7:cd:90:b8:2d:
2d:9a:cd:b4:82:bc:67:20:ae:61:60:d8:b8:fd:e6:19:3f:f6:
b8:d0:a8:86:0a:48:a4:07:76:b3:c3:40:ae:bc:fd:ae:34:42:
98:ba:28:23:d6:ff:34:95:d7:b6:9a:d4:8f:bb:cb:b8:35:4e:
da:9e:51:1d:63:3c:45:92:25:18:71:40:bf:93:aa:c2:90:76:
e1:14:a5:b3:7e:b8:1b:b5:c5:f0:26:19:38:97:6d:80:bc:b0:
38:16:4c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:16:56 2026 by rpki-client