
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/DNBDQDE7_O3R7O7aA0xbD2PUGao.roa
File: DNBDQDE7_O3R7O7aA0xbD2PUGao.roa (raw, json)
Hash identifier: kNYatbMsIX0Ue9McahnYp23XwYWpy8gVSF/I22+PPb4=
Subject key identifier: 0C:D0:43:40:31:3B:FC:ED:D1:EC:EE:DA:03:4C:5B:0F:63:D4:19:AA
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0134
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/DNBDQDE7_O3R7O7aA0xbD2PUGao.roa
Signing time: Tue 31 Mar 2026 07:47:44 +0000
ROA not before: Tue 31 Mar 2026 07:47:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17476
IP address blocks: 153.254.87.136/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:47:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0CD04340313BFCEDD1ECEEDA034C5B0F63D419AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:6a:c2:69:51:7e:39:2e:8b:b1:47:4e:7d:
7b:d9:ab:8d:ac:5a:7b:41:8a:f3:92:b2:5f:68:ce:
1b:f8:3a:6b:2d:76:5c:40:d3:f5:80:e5:07:a9:99:
7c:25:dd:a4:cb:b2:69:d0:6e:0a:f2:94:93:c6:e8:
72:41:98:53:d9:17:3c:c0:4a:da:09:e2:47:d9:1d:
d0:c4:98:f6:43:90:62:66:94:c8:f6:9a:7e:d2:df:
01:20:d3:2c:33:66:41:6e:88:ed:34:52:1a:d7:ea:
2c:b4:88:91:81:bc:35:ea:c7:3a:16:dc:35:8d:3e:
62:67:d5:17:11:44:80:4f:5c:1c:3c:ef:24:26:97:
2c:72:58:25:ce:7c:61:4a:7f:b8:37:e1:1d:04:4b:
85:e3:54:37:3c:86:31:6c:bb:08:ac:ef:9e:3f:9f:
9f:6b:83:df:c7:c6:95:0a:27:b5:e6:ad:0c:69:04:
7f:8c:a4:f0:57:81:d5:56:52:bc:98:75:12:a4:5c:
c6:93:2a:23:bf:0e:65:e4:d0:63:f6:b6:b8:8b:e6:
63:91:e9:7c:df:fe:ab:14:69:1f:d9:1c:8f:4f:a8:
69:9e:3f:2b:d5:46:80:64:71:2c:ea:89:f1:17:27:
c8:c5:b2:29:41:25:78:20:83:8f:68:38:b1:23:7e:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:43:40:31:3B:FC:ED:D1:EC:EE:DA:03:4C:5B:0F:63:D4:19:AA
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/DNBDQDE7_O3R7O7aA0xbD2PUGao.roa
sbgp-ipAddrBlock: critical
IPv4:
153.254.87.136/29
Signature Algorithm: sha256WithRSAEncryption
b3:fd:8b:f0:e3:8e:5e:57:45:15:9b:bb:cb:cb:8a:af:e8:a3:
56:cc:17:ca:2e:3b:fb:91:52:ff:34:ef:1a:74:b0:cd:f8:54:
5b:e1:ff:7b:48:f4:49:11:30:db:21:6e:fa:8b:11:d1:72:b4:
56:27:57:1a:6c:a9:7a:b0:44:0d:4e:dd:4e:fe:97:10:8d:3b:
c9:c9:24:7e:94:9b:2b:0a:a5:ff:b4:30:1a:c4:14:07:5b:4e:
e6:d9:a9:b4:70:92:de:48:af:fb:48:a4:35:84:e8:8d:22:a6:
e2:77:74:99:86:99:95:71:1c:42:21:fe:93:59:25:1a:75:e8:
70:97:2c:98:72:2d:82:13:27:9e:ff:9f:b1:c7:bd:9e:cc:64:
c5:ea:d2:a2:fd:aa:04:36:2c:81:83:eb:7e:4e:11:99:56:19:
70:31:38:fd:9e:2a:19:23:8d:58:a1:5a:df:83:74:63:5c:d3:
70:33:e9:fd:bd:1d:f3:df:95:1d:9c:57:78:94:cf:25:1d:0f:
18:c3:3f:1b:8e:95:2c:f7:79:c0:54:a5:f6:cb:0c:55:fa:30:
f5:a2:0f:0b:1e:33:1b:1d:7f:8d:d5:53:55:07:0a:cb:57:cb:
17:11:bf:2c:f3:a6:13:08:9d:6f:2b:36:56:0f:a0:71:65:56:
6a:b0:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:38 2026 by rpki-client