
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/YRMgMYRXTxKNkcvUtxoMc3KFdUM.roa
File: YRMgMYRXTxKNkcvUtxoMc3KFdUM.roa (raw, json)
Hash identifier: rEzeQAoFRJWPeQfscssWTbBOMJfOEjrogOyzEjqKU/M=
Subject key identifier: 61:13:20:31:84:57:4F:12:8D:91:CB:D4:B7:1A:0C:73:72:85:75:43
Certificate issuer: /CN=51164DDCE7F388F8244C452190F6964F1AF0685D
Certificate serial: 02
Authority key identifier: 51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/YRMgMYRXTxKNkcvUtxoMc3KFdUM.roa
Signing time: Wed 25 Mar 2026 05:53:42 +0000
ROA not before: Wed 25 Mar 2026 05:53:42 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 128.22.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51164DDCE7F388F8244C452190F6964F1AF0685D
Validity
Not Before: Mar 25 05:53:42 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=6113203184574F128D91CBD4B71A0C7372857543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:cd:94:54:5b:15:f7:1d:05:c1:09:2d:e5:
43:b7:45:f2:21:cf:a6:94:e2:e0:3b:39:a1:97:12:
13:71:db:49:19:95:7f:e3:a1:5b:9d:08:f0:ed:ed:
d6:f2:74:af:df:d9:e9:98:1f:87:27:0f:02:7c:b5:
d1:fe:09:df:d5:6b:e0:52:c1:d8:4f:57:88:b6:68:
e4:73:c3:ac:46:4e:7a:fa:63:89:21:2a:98:28:d9:
9e:5e:db:71:f1:1e:9a:59:f8:96:a4:dc:fe:d1:15:
91:08:67:f3:42:cb:56:03:31:d3:48:6f:0e:26:ec:
c4:92:de:f7:de:ca:90:17:c1:6d:81:d7:ce:df:53:
15:a0:68:ff:ec:93:bc:b8:0d:77:ed:0a:2c:2a:a2:
c2:b4:da:c0:da:36:3f:50:85:32:26:d7:c4:03:b6:
4c:ac:85:82:7b:d1:bb:83:d1:36:4c:82:c3:9b:6a:
d1:b7:95:b3:1c:bc:c5:19:9c:dd:7e:9b:3b:78:d5:
70:d0:93:5f:15:a9:69:87:b8:cd:03:f8:85:31:11:
b5:4b:a5:70:2e:af:2a:24:e0:c9:cb:28:6e:4b:ea:
66:53:2b:73:e5:78:ea:a3:a9:5e:13:fc:0e:12:11:
44:db:04:d7:96:d6:d4:00:de:3e:f8:bc:81:85:29:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:13:20:31:84:57:4F:12:8D:91:CB:D4:B7:1A:0C:73:72:85:75:43
X509v3 Authority Key Identifier:
keyid:51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/YRMgMYRXTxKNkcvUtxoMc3KFdUM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
50:d8:e0:64:02:ed:c8:0f:e3:67:ec:af:fc:72:6e:9a:fb:81:
9e:69:4c:17:fd:9a:ca:da:4c:8f:bb:8e:9b:ff:00:b3:3f:a8:
4d:f4:ae:46:4e:21:7e:e1:51:da:46:df:64:e9:c7:ca:dd:83:
59:73:b4:30:f3:e3:f1:7c:69:83:cf:fa:81:1f:b8:7f:f2:0d:
27:b8:ce:bd:3f:59:b8:58:57:18:99:23:23:ee:ae:32:ce:74:
48:47:28:fa:cb:a2:b5:7f:fa:4a:d2:ba:e0:88:b7:42:77:a8:
34:b8:ff:63:59:6b:06:e2:6f:e2:c0:c7:36:3d:2d:72:a3:5b:
9b:e5:ab:f5:71:e0:a0:d7:b3:fb:dc:27:b0:fe:95:ad:e4:ed:
33:b3:d2:16:5d:94:79:93:17:4f:b4:e5:a9:e4:68:ed:fd:24:
42:69:67:87:97:1d:27:e6:25:ae:e8:b6:bc:4a:eb:90:6f:de:
70:bd:97:b5:60:6e:d6:9f:66:63:da:40:c4:6e:07:0b:c8:3f:
b4:08:5b:02:bb:00:89:bc:6a:9e:aa:4d:f4:6e:c1:4f:8f:8a:
cb:00:41:bc:0b:db:09:09:92:af:de:83:6a:c0:31:01:08:41:
57:fe:7f:dc:1d:51:e0:06:09:9c:28:59:1c:f4:31:f1:ae:b4:
97:ae:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:10 2026 by rpki-client