
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/KmjA2DSQxPxKYKLhCqXbuOSi9kg.roa
File: KmjA2DSQxPxKYKLhCqXbuOSi9kg.roa (raw, json)
Hash identifier: tiHTWPGhRwgj/oi/HHOA8MK9HlHXbCcf5ijSb2AXoQQ=
Subject key identifier: 2A:68:C0:D8:34:90:C4:FC:4A:60:A2:E1:0A:A5:DB:B8:E4:A2:F6:48
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 9D
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/KmjA2DSQxPxKYKLhCqXbuOSi9kg.roa
Signing time: Tue 31 Mar 2026 07:35:21 +0000
ROA not before: Tue 31 Mar 2026 07:35:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 153.127.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2A68C0D83490C4FC4A60A2E10AA5DBB8E4A2F648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:44:da:04:01:95:3e:75:2f:d7:19:89:6f:
77:2f:41:e4:cf:b0:8c:85:d8:80:18:09:d7:4b:a2:
34:cb:50:42:81:5c:bb:23:a3:4d:e3:3b:77:12:6e:
fa:13:09:2c:90:5e:24:7f:b6:e9:b9:9e:a5:69:8b:
d4:55:85:75:22:01:bf:27:a0:68:c2:dd:0c:2c:8d:
da:91:71:ec:fb:51:db:9f:ac:71:8f:1b:dd:eb:2a:
8c:43:b0:4c:8b:fd:75:c7:58:64:40:dc:d8:0e:82:
85:63:c3:f6:18:4e:31:27:20:65:38:1e:ed:63:bc:
6b:5c:ed:f4:76:66:ef:83:94:d8:aa:88:5b:06:f0:
e3:5a:6b:df:31:4d:ad:d7:e7:8a:89:1e:00:69:c2:
36:83:35:c5:97:24:33:b7:74:f5:d2:2a:75:d5:4b:
78:2b:24:31:bb:b6:1a:96:74:c6:33:ae:b4:00:22:
7b:e0:19:c3:7c:07:93:5a:a9:f0:08:8a:41:df:6f:
5d:e6:a9:0a:06:c5:68:82:6e:14:75:65:2c:24:87:
75:a6:b7:f3:c1:43:06:6a:75:7e:55:41:2b:92:f6:
fe:af:ef:26:24:2c:43:65:30:50:b0:7e:52:a1:b4:
3f:65:d2:50:12:47:b3:0f:eb:4d:5c:ab:08:ae:e3:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:C0:D8:34:90:C4:FC:4A:60:A2:E1:0A:A5:DB:B8:E4:A2:F6:48
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/KmjA2DSQxPxKYKLhCqXbuOSi9kg.roa
sbgp-ipAddrBlock: critical
IPv4:
153.127.192.0/19
Signature Algorithm: sha256WithRSAEncryption
83:c0:7a:9e:fc:fd:b4:42:d2:6c:fc:65:31:f8:92:c3:5a:77:
57:16:63:1e:83:39:be:de:bf:12:b1:cd:79:3d:c6:1f:23:db:
e6:65:d7:ff:7c:6f:28:93:0d:8f:70:5f:5f:ba:9a:82:c5:0e:
58:15:c5:a0:3c:f7:2d:15:ee:56:73:c6:4a:d3:71:ad:4c:02:
b1:d2:25:ec:a6:79:ec:cf:d1:21:bf:ad:45:11:0e:ad:df:76:
63:6d:2d:e2:ce:d1:83:cb:a0:f2:04:21:c6:c9:66:22:10:a7:
19:54:c1:6a:e4:bf:8e:70:52:28:91:b3:b9:46:a2:eb:a7:17:
ed:5f:9b:80:d6:b3:c5:99:9a:14:ed:f6:1f:59:7e:7b:f1:d1:
d8:60:2d:69:83:6e:da:b0:3b:f5:18:22:0d:42:bc:64:1b:fc:
1b:67:c1:11:ba:ec:9f:2c:52:6b:a5:22:76:e7:03:1b:f6:c9:
7b:04:03:45:6d:01:1c:7e:89:bd:8d:dd:f8:2d:5d:a9:8b:85:
4c:f2:e1:7b:63:17:9b:18:63:23:9f:e4:c7:ec:d2:61:25:8f:
ca:03:fc:5d:b3:1b:f2:b5:86:66:86:d9:5f:f8:78:30:61:4e:
1c:cb:00:99:39:cd:ff:58:ca:eb:5c:22:01:e1:00:02:dd:d3:
a5:55:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:28 2026 by rpki-client