
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/VjGYk3CNz_vnrnNyE3dmf9iNjVc.roa
File: VjGYk3CNz_vnrnNyE3dmf9iNjVc.roa (raw, json)
Hash identifier: wrYmQ8AYRnyGM5DWuGLpAwf4tC1HM6Q+32w0vyAlUdo=
Subject key identifier: 56:31:98:93:70:8D:CF:FB:E7:AE:73:72:13:77:66:7F:D8:8D:8D:57
Certificate issuer: /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial: 34
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/VjGYk3CNz_vnrnNyE3dmf9iNjVc.roa
Signing time: Tue 03 Mar 2026 07:56:56 +0000
ROA not before: Tue 03 Mar 2026 07:56:56 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 18283
IP address blocks: 202.213.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Validity
Not Before: Mar 3 07:56:56 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=56319893708DCFFBE7AE73721377667FD88D8D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:ee:4e:f7:c1:af:21:10:79:80:0b:54:1b:
64:43:4b:13:89:7e:56:4f:8a:6d:74:aa:6d:12:71:
d6:bb:55:eb:2b:c9:47:81:d6:01:05:06:a2:0c:27:
7d:a5:99:0b:d9:9d:98:2e:fc:b2:65:f1:50:c1:51:
f4:a0:0d:0e:aa:b5:e0:26:d2:a4:43:52:5d:9f:7d:
df:51:16:18:29:55:2e:63:4a:f8:25:db:d4:aa:23:
f6:3a:9b:c1:97:d5:ce:cd:5b:61:a7:3e:4a:94:01:
ff:35:ed:d3:fe:dc:d6:b2:0b:f8:78:cf:8f:62:03:
57:07:7e:3a:45:a4:ac:73:83:85:6b:f0:95:db:ca:
81:5c:00:39:29:7f:d9:63:3a:20:eb:b7:11:01:05:
da:be:65:79:0e:9b:96:84:44:8a:7b:07:0b:80:11:
04:88:9e:d5:0b:cc:cd:8b:69:5f:38:fe:40:5f:04:
73:5e:27:c0:3c:36:e9:25:be:8a:9e:4e:4e:86:58:
4d:b8:b5:27:ac:62:47:4c:0c:35:a3:0b:34:88:33:
34:fd:d3:f2:d1:9f:d5:ef:9e:c2:cc:48:5c:81:17:
9d:40:a4:2d:5d:4b:1a:d2:dc:a9:e4:4a:6c:3d:a3:
60:2b:77:65:85:da:7f:03:9a:e0:cc:c2:76:3d:da:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:98:93:70:8D:CF:FB:E7:AE:73:72:13:77:66:7F:D8:8D:8D:57
X509v3 Authority Key Identifier:
keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/VjGYk3CNz_vnrnNyE3dmf9iNjVc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.213.176.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0c:0b:86:94:e9:86:b4:ac:d7:3f:24:e0:6b:90:07:d9:ef:
aa:e7:c6:99:16:19:57:1b:f6:b0:7a:e3:42:3f:34:07:ce:4b:
aa:a4:2b:22:24:2c:2f:44:86:85:d3:70:3c:f6:b7:ad:21:e8:
d1:d9:2a:af:fe:59:bf:8a:16:4d:f1:c8:3e:bf:8a:58:94:77:
05:1b:26:07:8c:70:8a:88:3b:c9:d6:f7:3a:0a:37:00:b0:57:
a3:59:d5:bb:5f:ca:82:18:6b:8c:9f:0c:06:d4:80:ee:71:87:
43:b9:1e:c1:89:30:81:f0:11:03:3c:8f:5c:ef:87:8f:bd:a4:
81:45:33:e2:13:50:82:ce:d1:99:dd:15:d4:10:44:cd:14:35:
d6:0c:d8:fa:7a:ae:ab:7b:61:4a:a5:a5:ae:d6:21:9c:99:28:
ba:7a:5b:9e:02:66:a9:0f:50:4b:c9:df:1e:f6:56:e6:13:cf:
68:cc:3f:92:f4:57:43:dd:a4:b6:ce:d4:68:7b:d2:70:9d:3c:
a0:1f:4e:a9:9e:a5:d2:bd:c2:6f:5b:4c:d8:bc:f3:e1:8a:77:
c5:17:cf:b7:02:09:1d:12:97:b8:15:33:15:2a:0c:e4:42:45:
56:d6:72:7f:d2:15:e7:71:b1:9f:ac:aa:81:b7:63:9b:32:b1:
89:19:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:45:24 2026 by rpki-client