
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/MNjeTgVbVRexC977t9tFAfrSYxc.roa
File: MNjeTgVbVRexC977t9tFAfrSYxc.roa (raw, json)
Hash identifier: AEnhv1Czxp7v4j+D/JhIYAJY3Clfa1qBH/qoJbkAhRw=
Subject key identifier: 30:D8:DE:4E:05:5B:55:17:B1:0B:DE:FB:B7:DB:45:01:FA:D2:63:17
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 9A
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/MNjeTgVbVRexC977t9tFAfrSYxc.roa
Signing time: Tue 31 Mar 2026 07:35:20 +0000
ROA not before: Tue 31 Mar 2026 07:35:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 153.126.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=30D8DE4E055B5517B10BDEFBB7DB4501FAD26317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:57:b3:fd:d8:fa:97:07:3b:79:e3:f8:f6:
ab:d2:a9:94:a4:14:1b:83:62:15:59:b1:83:d9:cb:
c2:71:af:cf:4d:ae:d0:d8:ec:48:f3:e3:60:e0:82:
2c:87:24:ca:f2:7e:a5:54:b6:85:44:34:c2:e7:aa:
41:ee:da:17:48:05:c8:6d:3e:a4:a2:3a:9c:b7:fa:
ad:e7:07:5b:58:39:73:34:78:aa:02:61:0d:94:a0:
17:e3:9f:b6:d2:32:71:d4:7a:a9:c5:3d:77:84:18:
6e:1b:b4:b6:a9:32:33:89:6f:1d:c8:df:9e:46:89:
84:fe:8a:47:8e:ca:2e:bf:b9:17:d1:c4:c0:30:67:
83:11:eb:2b:4c:28:56:4b:33:6f:fe:a5:89:78:db:
c0:83:ba:5f:ee:c0:c9:bd:7e:54:11:07:d9:e2:cc:
58:a3:c5:e2:6a:18:5b:b7:15:98:12:28:bb:42:cb:
5c:a9:0f:a7:f6:68:49:e6:3f:f0:41:a6:31:97:86:
d5:55:09:3c:ce:82:df:31:bd:23:c5:ec:e6:c6:6e:
84:ea:50:25:83:8e:fc:fa:c6:ab:9e:09:eb:39:1a:
26:b0:b5:64:73:27:75:6e:1b:0c:f9:01:37:d2:0a:
65:25:55:4b:ad:2c:46:b4:82:cc:ba:bc:f0:5c:90:
b7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D8:DE:4E:05:5B:55:17:B1:0B:DE:FB:B7:DB:45:01:FA:D2:63:17
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/MNjeTgVbVRexC977t9tFAfrSYxc.roa
sbgp-ipAddrBlock: critical
IPv4:
153.126.0.0/17
Signature Algorithm: sha256WithRSAEncryption
73:bf:b0:e2:70:a6:02:68:71:e9:49:84:18:24:99:17:0d:22:
c7:73:34:f8:d5:7f:47:8e:11:5e:e4:f9:ba:4e:ce:34:8e:e5:
1c:1f:94:a2:fb:da:0a:9b:4e:27:b5:ba:bc:06:5d:df:9a:d7:
36:1b:de:e5:57:19:71:e9:8b:ed:94:92:95:36:5d:8a:80:04:
0d:0d:05:40:6b:39:6a:72:c2:e7:4f:dc:76:e4:e2:8f:bb:71:
ac:3a:ab:21:cb:11:1e:d5:14:66:80:54:b2:df:17:dc:be:4f:
e4:e9:35:8a:a5:6d:6b:d7:94:ff:69:94:18:9b:25:0e:17:85:
bb:91:82:18:b0:9c:8e:3b:4f:0f:89:4e:32:d7:68:a8:46:ce:
c6:84:e9:dc:d8:96:db:63:44:35:8f:49:6c:05:5a:16:4d:dc:
83:ad:98:b7:5f:3f:34:9f:6e:c7:af:c4:68:d5:bf:67:ec:6f:
03:1b:1a:68:16:70:59:71:b8:14:7d:8c:92:9a:bc:d6:0f:58:
75:c3:6a:82:9c:39:ce:7a:cf:c0:fe:0d:52:78:7a:3f:d8:1f:
4f:72:56:04:8d:73:f0:f0:3f:08:8c:56:6c:c0:6b:6f:5a:72:
67:c2:45:b7:78:cc:05:02:d9:91:d7:ca:63:95:e2:68:7b:d5:
cc:27:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:25 2026 by rpki-client