
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/D82pGnfoyZ8SKT5HvMZoaGYPe-8.roa
File: D82pGnfoyZ8SKT5HvMZoaGYPe-8.roa (raw, json)
Hash identifier: WopgBq7rMrNUbOtiU6veZ1BpXGLLVIF1dC0nGN4Bx78=
Subject key identifier: 0F:CD:A9:1A:77:E8:C9:9F:12:29:3E:47:BC:C6:68:68:66:0F:7B:EF
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: A0
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/D82pGnfoyZ8SKT5HvMZoaGYPe-8.roa
Signing time: Tue 31 Mar 2026 07:35:23 +0000
ROA not before: Tue 31 Mar 2026 07:35:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 133.125.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0FCDA91A77E8C99F12293E47BCC66868660F7BEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:40:79:cf:11:2f:cd:af:62:27:c1:18:a8:
25:f0:62:3b:9d:0d:93:b2:65:72:a9:00:53:e7:ff:
e9:21:a6:86:52:b5:e6:a8:d1:75:7c:eb:86:64:91:
d7:d6:be:5e:c8:ef:9d:12:60:05:05:20:a7:7a:04:
bc:bf:8b:a7:45:81:24:0b:1a:5a:b5:2e:f7:2e:19:
4b:bb:5d:88:73:0d:ab:89:ca:af:75:b6:ee:75:bb:
fc:c9:c1:95:30:c8:bd:67:69:f3:20:bf:09:42:da:
b0:c2:c8:e9:4b:7e:07:1b:29:b5:d4:83:2c:2d:72:
21:5f:37:c4:cd:15:96:1e:71:17:9b:7a:6b:80:9c:
78:b1:61:be:0c:79:41:4a:ef:a5:42:42:ae:cc:29:
3e:3d:26:97:4a:c6:7a:28:50:80:66:9d:83:5c:6d:
0c:fa:42:b9:67:a6:7c:4a:73:46:45:94:f1:8f:a2:
4e:42:65:60:b6:2a:1c:33:07:f8:4f:12:fb:1f:3b:
a8:30:8f:36:bc:ba:65:c8:e6:ce:d2:0c:43:47:ac:
f6:57:da:d1:58:b6:12:b9:cd:19:95:09:de:df:ea:
b1:9c:e6:7c:85:74:0b:95:3d:79:c2:9c:a0:55:d7:
3b:6c:b8:db:dc:c4:75:fd:a0:bb:88:71:12:cf:e6:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:A9:1A:77:E8:C9:9F:12:29:3E:47:BC:C6:68:68:66:0F:7B:EF
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/D82pGnfoyZ8SKT5HvMZoaGYPe-8.roa
sbgp-ipAddrBlock: critical
IPv4:
133.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:e2:70:24:e4:8b:0f:ea:4f:a2:73:1b:e8:ca:d7:46:09:cf:
8d:cb:14:39:fc:eb:1d:aa:62:c6:23:ba:92:d7:05:14:4b:67:
6d:26:75:0b:bb:ce:17:f8:53:31:08:67:89:ac:a1:ac:37:94:
15:30:ed:69:8d:ff:e5:c2:32:bf:61:78:36:6c:1d:bf:49:42:
27:0e:98:d6:40:1c:8a:27:74:32:d5:6d:e2:f9:2a:4d:59:d2:
6f:cd:22:47:d0:39:cd:6a:c8:07:6f:cf:14:41:13:b3:d1:d4:
4e:ad:2e:c6:9e:0a:43:c7:69:d9:de:f3:fe:93:c0:cc:2b:b5:
79:1b:01:17:0b:23:f3:32:a9:88:6b:32:b4:79:25:ef:2f:ff:
29:ca:39:8a:bc:df:0b:aa:f3:0f:ac:4d:e3:be:60:8b:52:b9:
77:7a:db:aa:db:db:a9:18:3a:a1:4b:37:0a:58:2d:87:aa:c8:
ee:09:cd:37:e8:50:50:f3:95:9e:57:c8:7b:9d:3c:11:2e:b3:
dc:5a:b8:3c:98:94:6a:f0:e1:dd:d0:54:6f:8c:90:08:02:fd:
b4:63:00:66:b1:4a:a3:68:2c:d0:c7:76:60:70:e6:cb:25:dc:
eb:8c:e7:93:b9:24:bc:22:3b:56:bd:4d:34:0f:3d:1b:f9:0a:
31:74:b2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:21 2026 by rpki-client