
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3N5iyN4jPLErVCUlVLfhy_NXBc.roa
File: E3N5iyN4jPLErVCUlVLfhy_NXBc.roa (raw, json)
Hash identifier: QTGMpvEP7b62ZfduYM8TrsCROeg9tsDy+YL+3zJNGIQ=
Subject key identifier: 13:73:79:8B:23:78:8C:F2:C4:AD:50:94:95:52:DF:87:2F:CD:5C:17
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 028D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3N5iyN4jPLErVCUlVLfhy_NXBc.roa
Signing time: Tue 31 Mar 2026 07:34:19 +0000
ROA not before: Tue 31 Mar 2026 07:34:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9371
IP address blocks: 103.15.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1373798B23788CF2C4AD50949552DF872FCD5C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:00:60:a5:9c:57:62:59:b9:de:a7:a4:44:
da:96:9d:10:75:86:3f:d8:83:4f:eb:72:25:1d:6a:
fa:a6:b6:2d:50:b8:8e:4d:f8:f0:2d:7b:43:0e:6f:
fe:dc:33:16:66:ec:f5:42:38:f8:24:91:2e:d3:93:
0d:42:c9:e6:c7:e9:8e:39:48:2a:1e:c3:ef:bc:47:
52:f7:1a:51:1a:ca:e9:d7:be:24:d1:06:8b:ab:05:
eb:17:43:69:50:df:f6:c3:a0:4f:51:bc:96:e1:7b:
7e:98:72:55:c2:07:19:ca:aa:3c:6d:7e:5d:99:f2:
0c:97:3b:90:3d:2f:71:99:27:78:0a:5f:08:17:7f:
6c:16:dc:94:68:99:67:ca:46:91:01:1b:74:eb:86:
66:a0:e2:59:de:d6:c4:5c:a4:a2:42:40:95:12:80:
b3:79:f6:11:f3:94:06:f4:7b:20:5a:c0:32:dd:39:
87:f6:c5:f6:bc:9e:47:ba:0b:87:9d:09:a0:a7:09:
60:da:9f:1c:4a:f4:10:08:67:24:85:eb:01:e5:16:
39:c0:c2:b7:98:47:9c:8b:aa:44:fd:cf:2e:00:46:
87:c4:eb:2d:d3:92:c9:c0:49:72:fb:ec:33:96:00:
36:45:b8:b2:34:7a:14:af:ac:1d:5b:1b:ca:d6:1f:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:73:79:8B:23:78:8C:F2:C4:AD:50:94:95:52:DF:87:2F:CD:5C:17
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3N5iyN4jPLErVCUlVLfhy_NXBc.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:1f:4f:26:3c:ae:0d:53:4a:0b:5c:d5:5b:6b:d0:f7:95:d4:
f6:cd:41:9c:af:bc:ce:e6:36:39:27:ea:fa:13:6e:e0:92:2f:
9e:b0:42:bf:ee:95:f1:ea:22:27:ae:57:41:65:98:a7:18:9c:
c2:d5:1b:cd:af:df:8d:40:32:64:1c:68:15:bc:5d:a3:c4:fe:
f4:89:05:52:75:86:c2:d8:12:9c:2a:7f:f6:75:4b:8b:0d:94:
87:ec:f1:23:4c:54:f0:16:98:81:df:85:cb:06:24:d0:ff:d1:
41:08:7e:be:32:05:60:10:c1:bb:9d:7a:14:63:02:fc:82:ab:
a3:ce:82:d8:d6:c2:b4:78:ea:99:5a:7d:63:d4:e9:bd:d6:b0:
36:06:16:bb:6f:14:e6:c7:30:a6:25:de:24:20:aa:ef:5a:fd:
0c:4c:8d:b5:4a:08:e1:b8:4b:58:0c:86:26:4a:3b:ab:30:cf:
60:f0:97:0c:8e:1c:c5:65:48:12:46:b1:7a:1a:1a:74:05:3b:
14:2f:45:7b:81:3c:e7:ab:c2:b8:a2:8d:6a:50:1f:49:be:29:
d4:16:86:d5:39:51:33:42:2b:9b:78:e1:51:41:34:d1:c0:61:
a4:9b:47:8c:76:5c:6a:6a:b4:42:91:5f:f7:8c:ff:15:2c:45:
ea:34:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:14:28 2026 by rpki-client