
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2007/XaXXlOUMhQT6ePtKKR_EMyIABzk.roa
File: XaXXlOUMhQT6ePtKKR_EMyIABzk.roa (raw, json)
Hash identifier: CQ0JS7zOwGpTD7YMI5nL7apkRGzrSkatScOru8O89RM=
Subject key identifier: 5D:A5:D7:94:E5:0C:85:04:FA:78:FB:4A:29:1F:C4:33:22:00:07:39
Certificate issuer: /CN=D0A4C934C5490DF6144A05EB1E6E605EB2AE13ED
Certificate serial: 05
Authority key identifier: D0:A4:C9:34:C5:49:0D:F6:14:4A:05:EB:1E:6E:60:5E:B2:AE:13:ED
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/XaXXlOUMhQT6ePtKKR_EMyIABzk.roa
Signing time: Tue 31 Mar 2026 08:48:26 +0000
ROA not before: Tue 31 Mar 2026 08:48:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38649
IP address blocks: 192.50.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 12:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0A4C934C5490DF6144A05EB1E6E605EB2AE13ED
Validity
Not Before: Mar 31 08:48:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5DA5D794E50C8504FA78FB4A291FC43322000739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:20:71:a1:2b:d5:38:1d:40:e1:f0:90:5d:
e2:04:25:57:7c:49:b2:46:f5:73:b8:55:ea:63:15:
20:cb:b3:58:94:29:d5:0d:15:51:a6:0e:68:22:05:
9a:e6:db:1a:6b:7f:f0:69:6f:72:8b:0b:02:83:63:
47:6d:2b:b9:a0:f3:c6:46:97:cb:42:86:31:a2:26:
85:28:b1:05:bd:b0:d2:e4:ee:e8:5d:8a:ce:b8:bc:
f5:cb:6c:1c:14:86:92:80:6e:d7:5b:49:fe:d3:85:
80:d2:8e:00:b0:62:cd:61:5c:e8:69:80:3d:6b:94:
06:38:b8:26:6b:2f:1d:23:62:cf:f7:d0:da:2c:ff:
fa:79:b7:36:bd:d3:7c:80:f6:d5:65:f7:53:1b:be:
7d:53:43:de:73:c4:ee:7d:5e:dd:70:85:93:22:30:
56:58:c6:9e:e5:2f:58:ef:7d:95:70:a1:33:b7:03:
76:c2:ae:4a:df:8d:5b:5c:aa:f9:ad:c8:30:02:33:
98:bb:29:78:77:8c:a6:6c:2d:20:8e:c5:b7:df:50:
c4:4d:78:62:76:ae:2d:df:6a:74:d0:b6:33:73:d7:
d2:ab:2d:90:f5:ea:e6:45:cd:75:6c:ec:a5:d6:be:
e4:71:5e:86:2c:ea:21:7f:fe:5b:34:8f:58:b3:4d:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A5:D7:94:E5:0C:85:04:FA:78:FB:4A:29:1F:C4:33:22:00:07:39
X509v3 Authority Key Identifier:
keyid:D0:A4:C9:34:C5:49:0D:F6:14:4A:05:EB:1E:6E:60:5E:B2:AE:13:ED
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/XaXXlOUMhQT6ePtKKR_EMyIABzk.roa
sbgp-ipAddrBlock: critical
IPv4:
192.50.27.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2c:5c:9b:82:cb:1b:fd:a2:34:5b:fd:ac:30:f1:e2:7a:c5:
0b:cf:81:a9:3c:61:a2:56:46:02:39:7c:94:a7:b0:fe:c3:a1:
e0:d5:6e:5d:7c:46:85:30:0f:d2:94:42:04:c9:63:7c:1a:fc:
c9:20:c8:4f:27:18:bd:2c:60:ac:de:29:37:51:2a:0d:de:ee:
26:cb:80:cb:f1:0c:a9:b6:b7:d0:3a:6f:33:fc:a0:ab:a3:6e:
94:9b:c3:0f:ac:09:5c:cd:24:b9:dc:de:95:a1:c8:36:49:4b:
64:92:bc:b5:ea:84:84:10:1b:e2:bb:dd:ec:e6:72:30:d7:43:
bf:37:41:7c:f6:22:d5:03:3d:f4:47:16:f1:72:38:88:38:79:
26:c8:b4:1e:3a:eb:4f:c4:2f:d7:b0:d3:8d:cf:0f:f2:67:74:
31:28:df:04:1d:91:a6:bc:3c:5a:57:5c:a8:f4:17:95:94:fc:
12:10:6a:a3:2b:e5:42:88:f2:57:be:77:fd:b9:61:9c:79:b3:
6f:d7:bd:4e:29:50:7a:5a:13:4b:32:d1:45:85:f6:73:1b:eb:
7d:1d:e0:89:00:da:e1:87:19:01:88:9f:a2:62:ac:da:cd:ae:
95:f1:8d:42:55:5e:2b:2e:d7:8c:5b:a5:61:3e:cc:a0:1d:dc:
73:60:22:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:52 2026 by rpki-client