
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/2ncHk7nmtAGziQtK63wyGO-tYrg.roa
File: 2ncHk7nmtAGziQtK63wyGO-tYrg.roa (raw, json)
Hash identifier: wN+DtpgIs/orwKFzVFmrOq6i/mQ/gl2xG+JFenVB1p4=
Subject key identifier: DA:77:07:93:B9:E6:B4:01:B3:89:0B:4A:EB:7C:32:18:EF:AD:62:B8
Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial: 38
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/2ncHk7nmtAGziQtK63wyGO-tYrg.roa
Signing time: Tue 03 Mar 2026 08:09:07 +0000
ROA not before: Tue 03 Mar 2026 08:09:07 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 18283
IP address blocks: 133.117.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Validity
Not Before: Mar 3 08:09:07 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DA770793B9E6B401B3890B4AEB7C3218EFAD62B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:05:21:f3:7f:ba:9d:cb:80:90:b0:03:c6:
85:d1:33:bf:ea:93:85:2c:11:3b:a7:3d:cb:63:b5:
61:6c:b3:2e:1e:e0:78:27:2e:04:ea:52:24:02:1d:
9d:29:7b:f3:16:24:15:63:7e:7a:f2:97:36:9a:46:
37:aa:d9:28:7b:9a:de:67:2b:1b:b4:f7:19:4e:21:
ec:1c:4c:d7:0a:0a:d6:4c:1b:b3:99:fc:a8:e5:76:
b9:e2:ee:58:b3:0b:d2:c8:5c:50:bf:d9:a9:a5:84:
74:eb:6c:3f:15:50:86:86:52:8d:9f:fe:51:11:df:
4e:cb:d2:77:6f:ab:91:6a:4e:ab:ca:aa:06:1c:82:
41:5c:33:a9:35:08:50:90:ee:d2:a9:79:1a:71:1a:
11:71:cb:74:ba:36:be:48:2c:93:cb:db:49:07:00:
66:dd:b5:00:a7:89:4b:52:de:9a:c9:d2:a5:99:52:
a5:57:31:ff:b7:f9:64:1f:85:50:0d:61:35:4f:d6:
32:0b:4b:97:c8:58:1b:32:6f:cb:5d:9b:31:c9:b9:
8f:8b:28:26:c1:e1:71:2d:5b:f5:76:d6:88:7d:a6:
93:f1:36:9e:29:88:db:ba:ed:49:45:ff:8b:26:4c:
53:73:1e:55:f9:cc:5d:28:05:5d:4e:e3:f1:17:f1:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:07:93:B9:E6:B4:01:B3:89:0B:4A:EB:7C:32:18:EF:AD:62:B8
X509v3 Authority Key Identifier:
keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/2ncHk7nmtAGziQtK63wyGO-tYrg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.117.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:8f:d2:46:27:a1:36:9d:68:58:69:f9:04:7e:74:4c:83:39:
49:21:69:ed:87:18:29:fb:47:73:2e:fa:28:fb:c8:51:a0:01:
f6:1c:12:a3:b5:6b:14:d8:e1:50:34:67:dd:ef:1e:19:db:0c:
a2:0e:19:0f:c1:22:9f:4c:f2:c8:b8:2a:fc:76:6c:96:d4:a9:
97:00:c2:83:2c:64:65:29:a0:bf:51:12:2d:5c:dd:24:a1:87:
a7:5d:a2:3d:e3:3b:45:de:d2:3c:73:7f:fd:e2:b5:87:04:ea:
fc:f4:92:a8:9b:da:2f:75:90:3b:13:79:1e:f0:36:18:d3:70:
56:49:c6:c7:e4:43:70:1c:b5:b0:11:f3:d1:38:3a:4b:2a:da:
f9:03:2a:d8:3d:91:80:8c:43:26:ac:89:a0:e0:bb:e3:bb:cb:
5c:fa:41:3e:74:ae:30:06:ae:e7:dc:de:32:14:42:7f:bd:20:
e1:d5:f0:d6:f8:12:74:53:78:3b:19:4a:a3:99:ce:bf:70:23:
0c:6d:7b:4d:97:36:2b:3e:6d:31:84:80:5f:01:a6:40:cf:82:
97:36:53:f6:71:ad:38:01:c9:66:0f:11:b3:04:6b:3e:94:68:
27:1f:21:b6:4d:a1:94:cb:3a:eb:f2:e8:d8:e4:70:e3:e8:5f:
75:5a:1d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:47:25 2026 by rpki-client