
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/KKXE-HkRT4-7XrjsVZGrZK1_mzI.roa
File: KKXE-HkRT4-7XrjsVZGrZK1_mzI.roa (raw, json)
Hash identifier: 5K6VBPVTgCVZJ/xfwbISr+CEtgiEorU6tw0EYd9CYuk=
Subject key identifier: 28:A5:C4:F8:79:11:4F:8F:BB:5E:B8:EC:55:91:AB:64:AD:7F:9B:32
Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial: 37
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/KKXE-HkRT4-7XrjsVZGrZK1_mzI.roa
Signing time: Tue 03 Mar 2026 08:03:02 +0000
ROA not before: Tue 03 Mar 2026 08:03:02 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 18283
IP address blocks: 101.50.48.0/21 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Validity
Not Before: Mar 3 08:03:02 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=28A5C4F879114F8FBB5EB8EC5591AB64AD7F9B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:70:2a:8e:ad:84:81:e5:bd:d7:f8:79:61:
b2:5c:e4:07:5f:97:b0:c6:68:e9:e3:28:10:3c:b2:
8d:58:5d:ac:e9:e9:1c:69:e5:71:52:bd:32:82:99:
5d:ae:b3:4d:29:fd:c2:ef:ba:ce:06:30:dd:00:3e:
90:f8:ac:f4:dd:98:ed:a4:79:82:5b:1b:01:47:6a:
10:3f:32:6d:d6:10:d4:b0:c8:2f:d6:87:ab:39:1e:
08:43:39:9c:59:05:79:1a:99:d6:97:ac:82:1b:d6:
5e:fc:36:a6:7a:ee:51:a6:4b:69:fc:93:3c:75:0d:
49:ff:2c:6b:6d:9c:59:6c:f8:a5:18:e7:b8:6e:11:
6a:63:21:3b:70:7d:73:84:8e:32:59:77:cd:84:6a:
24:a2:e3:f1:02:97:49:97:a8:21:97:3a:18:96:f1:
9b:6b:57:30:d9:fe:0b:6b:84:01:0f:57:14:33:85:
d7:b7:5e:0c:a6:a7:41:f1:70:5b:c7:67:4c:c4:82:
a5:42:3c:0d:8f:47:48:c8:02:70:34:7a:dd:ee:8b:
09:c8:8a:4f:fd:b5:73:3b:af:58:56:30:0d:e6:3d:
c4:91:d8:59:26:cc:ca:07:7f:7b:4a:9f:b7:f5:dc:
a1:fa:60:88:bf:b5:f3:de:8c:62:cf:9d:be:a7:8e:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A5:C4:F8:79:11:4F:8F:BB:5E:B8:EC:55:91:AB:64:AD:7F:9B:32
X509v3 Authority Key Identifier:
keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/KKXE-HkRT4-7XrjsVZGrZK1_mzI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.50.48.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:27:cf:a3:80:3a:14:ec:5b:7a:1d:85:7c:7f:ad:8d:2a:22:
13:50:a8:02:33:8d:bc:68:b4:61:18:80:d2:6e:06:23:d9:6b:
ef:e9:f3:26:9e:4e:4f:5c:f4:1b:f0:62:28:56:df:bc:0a:a1:
6a:ea:8c:1a:86:44:87:05:34:77:55:97:f7:be:df:ba:08:ce:
26:ae:6c:ef:60:f2:97:62:55:cf:52:fa:5e:33:6c:49:52:8b:
97:75:3b:dd:f2:6a:f6:2c:a3:ac:40:4c:13:fa:f0:15:5a:ba:
c2:2b:01:6d:21:dc:69:75:8b:56:04:fb:ce:0e:89:ba:06:42:
56:73:5f:bf:ea:f8:d7:17:ab:a3:b5:35:bc:21:13:8f:0c:57:
0f:f5:21:b8:11:4c:fa:47:38:39:e9:12:c1:22:96:3e:31:3b:
24:31:d1:41:37:a5:fa:8a:51:3a:b3:7d:d2:21:c4:74:35:41:
07:14:cc:43:fa:99:d6:41:72:a7:e4:67:01:05:be:28:50:f8:
91:02:ef:69:93:e6:ca:dc:7a:7c:c6:3a:ec:c2:5c:7b:05:fe:
af:b2:0d:7b:66:a0:85:d2:75:90:4c:f5:88:4c:a7:ac:5a:50:
31:cf:72:c3:f2:a1:a2:62:5f:d6:3e:fe:93:c0:94:16:ba:7a:
2c:0b:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:06:36 2026 by rpki-client