
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ohMDfo0_-z92Vvb-rIWh02IUBWo.roa
File: ohMDfo0_-z92Vvb-rIWh02IUBWo.roa (raw, json)
Hash identifier: JuCQUW1sSggfu0LjfMFc5IYghshtRL/VkYeVCc7gVTc=
Subject key identifier: A2:13:03:7E:8D:3F:FB:3F:76:56:F6:FE:AC:85:A1:D3:62:14:05:6A
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 9E
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ohMDfo0_-z92Vvb-rIWh02IUBWo.roa
Signing time: Tue 31 Mar 2026 07:35:21 +0000
ROA not before: Tue 31 Mar 2026 07:35:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 153.127.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A213037E8D3FFB3F7656F6FEAC85A1D36214056A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:46:ba:68:3b:08:1d:90:88:ce:d0:04:e3:
5c:13:be:0e:45:77:52:5e:14:d2:d4:eb:c0:6c:f1:
8d:f0:18:72:78:70:53:b2:68:ab:f5:4d:45:69:0f:
c4:2d:56:90:d0:4f:56:36:7d:62:8b:5e:c6:93:cc:
c8:44:60:39:60:bd:bd:58:41:4e:dd:fe:86:d7:69:
03:16:54:63:60:3d:7e:27:98:28:07:4b:89:29:d9:
c4:8f:2e:72:4e:83:5e:89:ae:f2:9b:16:f0:3f:43:
b1:41:5c:e9:13:b2:45:04:e4:ac:03:4b:93:1e:4d:
34:ee:9c:87:49:ee:21:1b:12:b3:e3:9e:8d:41:b3:
12:5c:7c:72:ca:8b:17:ca:1b:e1:af:f0:c0:94:9e:
23:f6:13:2b:70:92:43:15:8d:8d:cd:50:17:cb:d1:
10:65:2a:22:3d:f2:9a:f8:f8:05:b5:dc:b7:25:87:
b9:0d:41:41:a1:30:b1:95:df:7f:0b:7c:23:9e:08:
a7:d8:75:28:9a:ed:cb:18:88:a6:0e:fe:fc:ba:39:
a8:b1:b4:39:5f:05:ce:c4:fa:29:74:c6:7c:24:23:
f2:9f:de:ed:0d:2c:6a:5b:5a:81:49:9a:e6:99:7a:
04:d1:02:5b:9c:99:61:55:1e:7c:33:18:60:c5:a1:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:13:03:7E:8D:3F:FB:3F:76:56:F6:FE:AC:85:A1:D3:62:14:05:6A
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ohMDfo0_-z92Vvb-rIWh02IUBWo.roa
sbgp-ipAddrBlock: critical
IPv4:
153.127.128.0/18
Signature Algorithm: sha256WithRSAEncryption
35:92:b3:b0:5c:0f:38:25:52:ca:ac:d6:db:d4:8b:49:a0:38:
b5:af:6d:f9:f8:da:1a:92:b9:a1:e3:14:fa:eb:cd:65:85:67:
36:81:c9:30:9c:6d:6a:dc:d4:eb:fc:0e:3c:f6:c3:91:3c:e9:
a0:b6:49:73:bf:5e:f8:78:70:71:72:63:d7:22:ea:42:9a:76:
00:25:6d:fd:ba:2b:bd:47:64:1c:2b:38:9e:a0:60:3c:a5:bc:
ed:f3:86:96:21:09:a2:10:ed:79:3c:ef:48:8e:86:46:f7:4e:
b8:c4:ce:4a:aa:08:a7:5d:30:3d:c0:2a:b9:24:c3:98:39:fd:
2b:14:08:24:89:02:1c:74:8d:af:33:d2:7c:c6:bb:73:32:40:
a4:90:6e:00:d8:e8:93:bb:23:e7:2e:13:6e:87:9c:fb:0e:0d:
3a:d3:fe:c5:f2:59:97:3e:0d:94:82:f6:2d:fb:c3:44:61:2a:
13:7c:7b:4c:f5:dc:f4:bb:dc:f4:01:cf:66:10:71:01:de:ef:
fc:ed:df:68:34:cf:fe:e0:5f:e8:ec:d6:a2:03:ef:17:34:cd:
54:79:94:e8:c7:06:87:e3:d1:f4:0d:cc:f7:82:78:d0:2c:14:
98:c6:2d:c2:e5:93:1f:21:f2:05:c7:65:74:ea:f9:79:72:fb:
8d:73:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:18:38 2026 by rpki-client