
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Yj88A5ArUBLvZvAuEpMDKa0rakc.roa
File: Yj88A5ArUBLvZvAuEpMDKa0rakc.roa (raw, json)
Hash identifier: c11nJAwh0F1vBPJRsdoAHdqLhahQIHCEb7Y72KUtJ1E=
Subject key identifier: 62:3F:3C:03:90:2B:50:12:EF:66:F0:2E:12:93:03:29:AD:2B:6A:47
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0154
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Yj88A5ArUBLvZvAuEpMDKa0rakc.roa
Signing time: Tue 31 Mar 2026 07:48:00 +0000
ROA not before: Tue 31 Mar 2026 07:48:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 394646
IP address blocks: 61.120.148.0/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=623F3C03902B5012EF66F02E12930329AD2B6A47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7c:7b:88:d0:81:a7:63:2f:db:ff:77:f7:66:
8b:99:ff:45:46:01:45:2c:e2:44:93:47:20:82:10:
72:37:6b:cb:7b:5b:59:87:b7:ca:8d:0b:ca:49:fc:
d2:0a:60:bd:c9:a0:f5:16:67:eb:81:81:0e:b5:74:
66:1d:1a:b2:71:bc:9d:4b:b8:db:98:b5:47:98:45:
26:34:97:c3:3a:a8:15:6c:6c:87:e9:58:5b:9c:86:
f8:d9:38:d2:b9:51:61:e9:8f:76:55:e7:70:6e:21:
0e:04:80:be:1d:40:ab:be:70:ab:83:53:65:1b:65:
9c:13:e0:df:4e:8a:2f:62:e1:82:59:16:ef:b7:ea:
b7:f3:fe:81:c3:5a:a9:76:84:5e:a9:60:18:cf:64:
b9:48:25:ef:f9:4f:28:49:ce:fc:81:29:3a:8a:80:
2e:97:84:54:06:c8:85:13:9e:77:b9:a8:92:cb:d2:
e5:8b:e7:24:8d:85:b3:ae:1d:8b:31:60:06:43:82:
e3:ba:20:7d:f3:03:70:18:85:a5:0e:d8:f1:6e:e3:
a4:15:b7:bb:2e:03:14:9e:81:73:4a:f7:d8:65:9d:
43:20:d3:ff:70:d9:ea:5e:53:76:6b:f7:e2:45:7c:
e8:b3:19:0a:2c:95:e1:92:dd:c9:93:20:2e:3f:ca:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3F:3C:03:90:2B:50:12:EF:66:F0:2E:12:93:03:29:AD:2B:6A:47
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Yj88A5ArUBLvZvAuEpMDKa0rakc.roa
sbgp-ipAddrBlock: critical
IPv4:
61.120.148.0/25
Signature Algorithm: sha256WithRSAEncryption
13:bc:08:cd:3c:69:9b:43:83:73:f0:b7:ae:66:54:8a:e5:47:
76:f6:04:9b:33:3c:64:84:6f:bc:7b:11:26:73:3a:9a:02:d1:
c5:d1:11:6e:65:d3:62:2a:ff:4d:25:ca:68:8c:01:19:af:d3:
c6:2b:a7:18:cc:a7:21:7b:30:46:6a:56:74:a8:f6:5a:98:4d:
3f:a6:48:67:5f:7d:a3:4b:73:be:a6:ae:ac:5e:f1:f5:40:0a:
dd:1a:f7:da:7b:56:72:d1:97:b6:f6:92:fb:86:3e:9b:de:26:
e9:cc:2e:7d:fd:de:01:12:03:78:7b:10:39:09:61:8e:2f:b7:
16:65:bf:ba:df:3e:a4:b6:a4:a9:f2:3a:e6:05:4c:7f:96:1e:
52:f6:15:46:c8:f5:c7:1d:fb:fa:1d:6d:a6:c4:16:9e:16:d0:
22:23:d9:aa:45:66:37:67:34:77:a4:22:46:af:b9:cc:70:01:
e3:99:9c:2b:30:ba:4d:52:d5:2d:76:f1:92:8b:ce:22:d9:8a:
b9:2b:a2:d7:7c:54:d9:03:19:f0:81:ea:25:cb:b4:30:dc:65:
d2:9a:73:7b:7b:07:c5:6e:08:ab:32:cb:f9:ef:fe:b3:ee:66:
5b:95:db:d2:1d:3d:df:9e:c5:68:f3:ce:62:77:d8:69:f2:04:
a5:71:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:45:24 2026 by rpki-client