
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/uaTld6VfqXrAfj_VbA27uPxt22Y.roa
File: uaTld6VfqXrAfj_VbA27uPxt22Y.roa (raw, json)
Hash identifier: Ut6uopvlv3ojW0y8PWOObfM1Hdapqw3ZcIoYZk92afI=
Subject key identifier: B9:A4:E5:77:A5:5F:A9:7A:C0:7E:3F:D5:6C:0D:BB:B8:FC:6D:DB:66
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 9C
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/uaTld6VfqXrAfj_VbA27uPxt22Y.roa
Signing time: Tue 31 Mar 2026 07:35:20 +0000
ROA not before: Tue 31 Mar 2026 07:35:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 153.120.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B9A4E577A55FA97AC07E3FD56C0DBBB8FC6DDB66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fb:8f:b4:40:b8:6e:67:1c:85:d1:ff:15:6c:
f3:c1:8b:3b:a4:00:52:25:a5:e7:bb:cf:cb:51:ed:
1b:a8:db:4e:27:12:13:a0:74:af:10:20:cd:27:50:
9f:fe:f7:b4:34:85:53:96:60:a8:21:1d:95:45:0c:
f0:eb:1c:a3:a2:93:78:3b:ea:af:10:39:f7:a2:56:
85:b2:f6:e1:e9:66:da:89:4f:56:6c:0d:3e:50:41:
d1:87:97:3b:37:3a:98:5e:59:34:f1:55:66:92:f2:
4c:65:6d:d2:34:1c:3f:c6:4d:1b:ea:45:fb:28:7f:
23:1a:43:ee:d7:e0:3d:7e:8d:a8:c0:4e:ee:3d:2c:
8b:90:65:57:f9:5c:7b:0e:df:4a:19:71:ce:9e:c0:
1c:cd:63:fd:95:46:61:cb:88:1e:92:e0:95:4a:44:
34:75:59:9f:5b:22:6b:77:c2:4d:9b:bc:d0:af:87:
61:48:73:99:46:d5:75:a2:e4:8a:14:30:44:54:68:
ec:2c:10:14:cc:cf:b0:c3:ed:a6:ba:11:0b:be:61:
f5:f9:86:ba:f4:fd:8c:2c:a9:8a:c0:e5:a6:2c:d5:
b3:75:2c:bd:32:92:67:8b:d1:41:eb:0d:2d:21:06:
c9:20:1d:71:5e:06:e0:e0:a1:5b:2b:80:45:e5:50:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A4:E5:77:A5:5F:A9:7A:C0:7E:3F:D5:6C:0D:BB:B8:FC:6D:DB:66
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/uaTld6VfqXrAfj_VbA27uPxt22Y.roa
sbgp-ipAddrBlock: critical
IPv4:
153.120.128.0/18
Signature Algorithm: sha256WithRSAEncryption
60:ff:3b:66:d7:96:f2:99:eb:c3:b8:13:9c:b8:45:69:13:07:
2b:68:7b:c8:07:38:a8:e0:f1:2e:3d:2e:dc:e1:df:37:cf:20:
ba:62:1b:ea:bb:35:12:03:fb:79:ff:dc:e7:cb:13:77:e4:30:
1b:95:ac:5f:f6:9d:fd:e1:0e:43:9a:e3:ea:f5:7f:69:21:0d:
d6:b8:b6:2e:7f:d0:5a:21:c0:69:13:89:9e:05:0a:c8:fb:5a:
0d:2d:5e:62:b7:f7:41:73:b9:9d:5c:c3:ba:e1:bc:fa:7d:21:
20:a5:37:9c:f1:4e:24:e1:ec:3b:90:d9:7d:31:72:d5:ae:f8:
60:2d:60:55:96:b7:03:47:75:04:f3:11:08:d1:25:5e:25:f3:
90:e9:91:ac:52:a3:eb:e4:4c:ce:b6:fd:14:d9:9b:7b:23:d2:
20:12:9b:75:ed:cc:58:ad:8f:c5:fc:0d:e9:84:bf:45:17:0e:
fd:d1:d1:bd:a4:69:a0:43:ab:a6:a7:a8:b4:66:ec:f8:57:f0:
a5:4e:ab:55:1d:ef:3d:d1:44:b3:01:81:95:3f:7b:54:30:bf:
9b:93:2b:0a:8d:af:c8:56:28:ce:54:7c:cb:ff:d5:bd:d5:c5:
d6:d2:d5:c5:4d:dc:90:36:89:a9:5b:7a:2f:4f:24:25:44:d7:
bb:5a:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:32 2026 by rpki-client