
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/WrZ7I_oajw9qRaT-5zQRvXzNWeE.roa
File: WrZ7I_oajw9qRaT-5zQRvXzNWeE.roa (raw, json)
Hash identifier: 3NVXLcLazcbylh3VMN93yZ+XL18O95rdElGsKmSbZtk=
Subject key identifier: 5A:B6:7B:23:FA:1A:8F:0F:6A:45:A4:FE:E7:34:11:BD:7C:CD:59:E1
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 97
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/WrZ7I_oajw9qRaT-5zQRvXzNWeE.roa
Signing time: Tue 31 Mar 2026 07:35:19 +0000
ROA not before: Tue 31 Mar 2026 07:35:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 153.125.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5AB67B23FA1A8F0F6A45A4FEE73411BD7CCD59E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2c:5f:57:94:87:8d:6e:77:8f:73:a8:44:a0:
aa:28:a0:c2:2a:b8:b3:32:de:15:d1:00:3a:33:9a:
76:c8:04:d3:78:c4:51:7a:75:f5:88:e7:8a:7c:af:
b0:92:84:df:9f:0b:73:99:27:c5:0e:29:d8:f4:d1:
81:a5:cd:24:c7:c8:af:37:76:31:df:6c:21:91:2b:
8e:0b:fb:3e:3d:6a:44:fb:c1:b1:37:0d:f3:c8:bf:
8d:d3:ef:9d:f9:a6:9a:36:1f:b0:84:84:92:aa:21:
d0:c6:0c:a2:75:f0:34:08:36:d9:4f:0d:48:66:3f:
6f:a2:44:5e:76:04:41:b6:04:0d:46:2d:29:4c:22:
fa:92:11:7a:2c:37:17:7c:69:d8:e4:4d:8e:b0:31:
9c:07:23:6c:0b:3b:a7:09:50:3d:69:10:17:7a:1c:
68:35:63:7f:a7:58:71:05:34:8d:6a:b0:3e:94:12:
b9:ea:32:ca:0e:93:18:7b:a2:4c:d6:2d:50:59:b6:
ff:e2:9c:99:37:90:a8:98:77:ef:11:b8:fe:f6:47:
3b:81:c3:cf:12:3b:94:06:f7:e4:3e:75:5b:ab:e7:
3e:80:1b:7a:fe:80:9f:10:1c:d4:fe:68:9f:8c:eb:
ab:27:70:9d:61:d3:07:06:5c:11:a5:d8:32:12:e9:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B6:7B:23:FA:1A:8F:0F:6A:45:A4:FE:E7:34:11:BD:7C:CD:59:E1
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/WrZ7I_oajw9qRaT-5zQRvXzNWeE.roa
sbgp-ipAddrBlock: critical
IPv4:
153.125.128.0/18
Signature Algorithm: sha256WithRSAEncryption
3e:4c:98:1c:28:5a:ec:4c:22:67:b0:fe:0e:1b:e3:48:bf:2c:
94:df:b4:d4:09:0a:27:f0:4a:ad:9a:88:4e:b5:27:82:d1:9a:
93:73:7d:fa:37:6e:ed:ae:2a:55:02:a9:0e:e3:f8:1f:f9:e8:
3e:a2:2a:9e:fe:5a:bc:1f:79:0a:15:e7:2e:bc:a0:e7:b0:0e:
db:6c:c7:73:96:94:fd:94:19:25:1a:20:94:20:fb:96:a2:7a:
75:7b:46:39:d1:32:2e:32:00:f5:b3:1a:e1:0c:df:b7:97:e0:
e1:45:b6:06:12:b0:15:9a:5d:5d:7a:ab:a0:fc:45:ff:eb:af:
23:95:12:d2:45:d5:84:31:bb:a9:81:c0:31:c3:7d:1b:70:c0:
fa:b0:e0:61:94:c6:88:48:0e:8d:84:23:ce:76:70:58:b3:d1:
e4:e4:0a:27:9d:7a:4a:3b:c3:2d:0f:10:42:be:69:1c:21:9d:
d0:b6:54:80:66:a1:23:be:a9:5e:c2:f7:cc:7a:59:92:a4:68:
8e:a0:b3:04:15:d4:37:14:3a:29:5b:b2:78:48:4b:cf:dc:df:
9c:85:31:af:52:da:40:5d:3e:6a:c1:65:81:cf:17:54:0f:65:
72:69:f2:8c:6d:bc:ed:b4:c6:9a:10:ea:75:ef:9b:fd:13:a8:
c3:7f:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:14:57 2026 by rpki-client