
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hnmnfZ6wOak9XR5ehIgkrhVCnTE.roa
File: hnmnfZ6wOak9XR5ehIgkrhVCnTE.roa (raw, json)
Hash identifier: qDS2xN8xcoJ+PMfzP7xFG3ec6aj6fzqNMWd9vGdq4qc=
Subject key identifier: 86:79:A7:7D:9E:B0:39:A9:3D:5D:1E:5E:84:88:24:AE:15:42:9D:31
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0152
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hnmnfZ6wOak9XR5ehIgkrhVCnTE.roa
Signing time: Tue 31 Mar 2026 07:47:58 +0000
ROA not before: Tue 31 Mar 2026 07:47:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 30103
IP address blocks: 120.29.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:47:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8679A77D9EB039A93D5D1E5E848824AE15429D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:c9:46:29:30:53:bd:51:d8:51:20:c4:0a:
83:1a:b8:f9:a6:c1:5b:fe:2f:b3:dd:85:e2:15:80:
4a:e5:9f:32:52:f6:97:2b:71:ec:49:4d:49:c9:4d:
43:f1:ea:a4:1f:e4:e9:a3:1d:6a:47:7d:b1:46:44:
81:78:fe:8c:6e:e5:31:c2:48:01:9e:f0:bc:d0:22:
3a:e3:c2:57:8d:c7:d2:37:66:67:3b:d9:db:8a:8b:
0a:ea:7d:81:02:7e:ee:f2:d4:fd:6e:54:77:59:56:
1a:f4:bb:1f:51:42:a5:97:71:42:87:0f:11:64:93:
40:9b:68:c5:d0:51:25:d0:15:d8:c0:6d:ed:f9:bf:
f4:35:00:18:e9:b0:98:7d:59:a7:0e:f7:82:12:4f:
e5:fd:2e:f2:c0:15:21:bf:ee:cd:f5:ca:5e:fc:72:
03:fe:1a:ca:b0:ce:67:13:bb:5d:cb:17:9b:c3:c6:
7c:dd:f6:ff:55:da:fc:df:61:b5:5e:e8:0c:c7:72:
8f:50:5f:1c:1e:39:31:05:e1:d4:5c:c5:2a:4c:f5:
a4:83:f0:54:b8:b2:17:96:b8:25:ba:6a:78:3a:d4:
90:69:cf:38:2c:78:30:17:7d:09:44:c6:2c:98:61:
d7:26:1c:73:7f:e3:54:d3:94:37:7a:2a:72:a7:4e:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:79:A7:7D:9E:B0:39:A9:3D:5D:1E:5E:84:88:24:AE:15:42:9D:31
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/hnmnfZ6wOak9XR5ehIgkrhVCnTE.roa
sbgp-ipAddrBlock: critical
IPv4:
120.29.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:aa:44:26:d0:1a:98:27:85:68:4b:47:9f:f1:03:0c:2d:75:
af:20:b0:d3:82:2d:09:32:43:2a:8a:50:4b:cb:8c:17:c0:c4:
ba:c6:1b:e6:a5:10:1d:b4:89:8e:4b:2b:28:67:b9:9f:9b:96:
a5:9b:0d:4e:6d:97:2d:52:4d:76:77:46:70:c2:9d:4f:4a:54:
d4:f1:7f:47:b4:21:6b:04:a3:a5:1e:f2:ca:fa:07:04:29:21:
0e:c5:d8:3b:8a:d8:bd:b7:9e:ae:29:61:ca:17:21:24:4f:74:
13:3d:bf:bd:32:43:a2:1b:91:eb:e6:a1:a7:4c:aa:42:8b:fb:
e0:5d:41:58:8c:4e:3b:03:3c:73:fd:96:4b:f6:b8:f8:66:3e:
07:ed:71:0d:b2:e1:b3:e2:26:f3:1c:b7:e7:6e:cc:e3:d5:63:
58:76:3c:92:5a:a1:71:9b:92:f3:72:6e:d2:62:c2:3e:9d:95:
01:32:14:9c:44:4c:ca:0f:f1:24:aa:c7:4b:fa:d1:44:f6:40:
62:0a:40:97:e1:fa:2d:76:1b:b1:46:a5:d9:fc:fd:f4:73:aa:
3b:23:99:db:02:4d:d3:9d:c5:0e:de:66:0e:ed:de:cd:62:65:
4d:e3:3f:ec:21:ba:35:a7:4d:e5:ac:20:b5:71:a5:62:c4:d6:
9b:6c:76:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:22 2026 by rpki-client