
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lOC0QBrEkIV1enOwhXwKqDuoGDw.roa
File: lOC0QBrEkIV1enOwhXwKqDuoGDw.roa (raw, json)
Hash identifier: WNCxfgIBgttjjNLnwKFaLW8m8wgTsK3m/BuB+S1hgRU=
Subject key identifier: 94:E0:B4:40:1A:C4:90:85:75:7A:73:B0:85:7C:0A:A8:3B:A8:18:3C
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 98
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lOC0QBrEkIV1enOwhXwKqDuoGDw.roa
Signing time: Tue 31 Mar 2026 07:35:19 +0000
ROA not before: Tue 31 Mar 2026 07:35:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 153.121.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=94E0B4401AC49085757A73B0857C0AA83BA8183C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:7b:a3:6d:fd:f5:f2:9f:f8:66:37:55:ba:
c1:98:a7:28:4f:15:a3:8d:1e:3f:fc:2c:87:51:12:
c4:f3:67:59:4b:eb:90:33:58:0e:9d:fb:3a:cd:82:
69:1a:6e:3b:7d:d3:d6:66:c5:09:1f:b1:a3:e3:84:
68:9b:4b:0b:74:51:51:0d:bc:1a:32:65:6d:bc:53:
9b:83:89:93:bd:46:59:b9:ef:15:76:31:60:c9:4b:
7a:95:58:1f:1e:ef:d0:ca:da:f9:4e:d9:24:3f:70:
f7:40:87:6a:a4:5e:b4:0e:1c:92:0f:65:10:8a:a9:
f8:1f:72:81:e8:71:8d:9f:26:2b:7d:c4:82:4e:5c:
52:26:bd:03:c2:87:35:c1:9b:7a:77:fc:b6:0b:56:
cc:a6:d0:03:57:b7:69:41:33:6f:a1:81:43:75:6d:
70:ec:fb:44:b4:cb:5f:22:a4:dc:65:e6:db:72:c6:
37:7d:80:b6:41:d8:cb:14:15:ed:15:25:52:3a:07:
8b:21:a9:bf:7b:4f:39:b3:26:10:c7:8d:ab:df:69:
c3:d7:ae:04:90:5f:74:10:7d:c4:a3:01:05:b3:4a:
62:38:6b:ae:c0:28:77:08:64:99:eb:6f:76:64:43:
98:03:d6:d0:94:ef:39:ae:9f:14:f4:12:d3:2b:b1:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E0:B4:40:1A:C4:90:85:75:7A:73:B0:85:7C:0A:A8:3B:A8:18:3C
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lOC0QBrEkIV1enOwhXwKqDuoGDw.roa
sbgp-ipAddrBlock: critical
IPv4:
153.121.128.0/18
Signature Algorithm: sha256WithRSAEncryption
16:d8:85:5d:ae:1f:eb:b2:d0:90:2d:66:74:1e:1d:8f:79:74:
88:06:0b:83:d3:7e:b8:3b:12:7e:de:ad:fa:32:be:50:1a:ae:
92:df:c9:02:29:2c:8d:21:2d:ae:b9:ee:5c:3d:14:3a:30:19:
95:6d:4a:91:cb:30:85:5c:4a:b6:e8:41:27:16:c7:37:be:80:
f5:ef:79:ab:95:db:75:e4:fe:11:09:d6:5e:90:1d:6a:a0:98:
13:0e:9b:85:1f:9d:c4:1e:9a:1a:18:f8:0e:3c:73:38:ce:e6:
df:62:e0:8a:b6:23:6c:8c:51:81:d4:c3:dd:4f:05:80:f1:79:
fa:5c:c9:b4:28:cd:0d:53:c9:67:fa:51:12:44:48:67:25:91:
4f:0f:a6:41:3a:c5:c7:36:37:92:af:3e:40:d4:b7:89:37:1e:
20:7a:3d:2a:56:55:7e:1a:ef:c0:9c:64:b6:62:f9:66:3e:75:
eb:a5:2b:44:00:e3:f2:1d:0d:e5:6f:a4:11:d4:df:0d:a0:36:
23:81:14:fa:a8:7a:80:5d:58:2d:39:8b:32:38:f7:82:f8:07:
ec:3b:92:f8:99:10:df:c2:ae:c6:e4:2c:28:bf:eb:f1:b3:39:
dc:0e:62:6b:c6:cb:97:31:8b:53:e9:f6:62:b3:f2:df:c5:f2:
e9:63:6d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:52 2026 by rpki-client