
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/iEi-SWmm3SEAV0XZ1Skv2xn3uQ4.roa
File: iEi-SWmm3SEAV0XZ1Skv2xn3uQ4.roa (raw, json)
Hash identifier: rcKOn/E+JYEpyOiFrN4ZQVBfoTn+wDX3z9z+Z2kPeSU=
Subject key identifier: 88:48:BE:49:69:A6:DD:21:00:57:45:D9:D5:29:2F:DB:19:F7:B9:0E
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0142
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/iEi-SWmm3SEAV0XZ1Skv2xn3uQ4.roa
Signing time: Tue 31 Mar 2026 07:47:49 +0000
ROA not before: Tue 31 Mar 2026 07:47:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 142132
IP address blocks: 153.254.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 322 (0x142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:47:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8848BE4969A6DD21005745D9D5292FDB19F7B90E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:5d:bd:c1:77:2a:1a:18:a7:ce:d7:0a:05:
7c:6b:1d:4e:e1:2f:d0:cb:bb:25:8a:5b:09:17:df:
ef:79:f4:eb:66:99:22:04:f5:e2:78:e6:0e:7d:dd:
74:6f:d9:ad:fc:33:52:d1:70:b7:6f:18:c9:b7:9e:
53:e2:a1:e3:0d:2b:98:55:f9:2f:1e:78:dc:5d:de:
e7:05:fa:4a:c3:d7:17:87:45:10:12:21:95:42:ea:
2e:99:64:8a:7c:80:b1:a4:98:09:78:4a:14:ec:65:
38:5f:b8:5c:f2:16:ed:3f:05:42:f8:50:66:b4:4f:
21:81:3a:b1:17:bc:f2:fc:f3:d8:4c:38:b7:1c:30:
1c:7e:98:fb:c5:f0:aa:39:ba:a7:bb:c7:8b:ee:d2:
4c:ab:2f:44:b5:2d:ab:e0:0c:98:64:82:2b:3e:db:
3f:f2:87:0d:e2:ee:8f:5d:9f:5a:a3:41:80:17:b7:
f7:24:da:6a:69:c8:2a:3e:83:d5:21:32:db:48:b7:
5d:c7:43:23:4f:aa:a0:c1:b2:05:f7:95:52:65:22:
4a:4d:cb:42:99:ab:ea:47:9a:b5:49:a9:fd:7d:26:
b1:4c:c1:96:ba:9a:a9:5f:97:18:0f:b8:2b:4e:fa:
e4:b9:1a:27:63:ee:00:d5:d7:81:93:43:97:7b:12:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:48:BE:49:69:A6:DD:21:00:57:45:D9:D5:29:2F:DB:19:F7:B9:0E
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/iEi-SWmm3SEAV0XZ1Skv2xn3uQ4.roa
sbgp-ipAddrBlock: critical
IPv4:
153.254.119.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ac:7f:40:14:ee:7f:bb:e7:72:4b:01:ba:91:77:39:7b:38:
6e:1c:27:98:ce:ea:4b:c2:fd:95:b3:69:3e:85:2c:45:bb:c1:
e6:b8:ea:fa:a1:69:9f:47:20:5a:9f:f8:4a:11:36:0e:40:dc:
09:8d:24:4a:c9:b3:1d:3a:14:c9:6c:a7:78:9a:db:0c:e0:79:
8a:e7:27:ee:91:9e:8e:3a:15:ac:cd:42:d7:dc:46:84:f6:50:
d1:fa:2c:25:c5:a9:f1:ba:b6:1b:d6:14:61:d1:e0:a9:01:7e:
94:03:d6:d5:9a:38:00:86:43:72:c7:0e:9f:28:cd:e2:ac:48:
0b:36:e7:28:ac:c9:66:10:9f:cb:ca:5c:8f:6f:7b:f7:9c:98:
b5:8c:c0:28:10:44:23:e1:5a:33:df:a2:ec:6a:b1:07:50:34:
bf:2d:0c:60:24:77:42:d9:9e:83:40:32:77:04:3a:a2:64:1d:
d6:78:16:4f:4f:a0:33:c5:4d:b2:65:fc:8a:0f:c3:c9:04:eb:
b0:89:c3:e1:0d:ef:23:66:60:45:18:50:02:c1:7b:76:78:65:
04:e8:cb:2d:21:3a:ff:1b:af:b2:d9:45:1d:6e:7b:f7:23:97:
b2:87:f7:2b:4a:5a:6a:a0:80:e8:79:8b:24:21:bd:91:58:5e:
21:86:cb:d7
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0
NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNjAzMzEw
NzQ3NDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4NDhCRTQ5NjlBNkRE
MjEwMDU3NDVEOUQ1MjkyRkRCMTlGN0I5MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCc6129wXcqGhinztcKBXxrHU7hL9DLuyWKWwkX3+959OtmmSIE
9eJ45g593XRv2a38M1LRcLdvGMm3nlPioeMNK5hV+S8eeNxd3ucF+krD1xeHRRAS
IZVC6i6ZZIp8gLGkmAl4ShTsZThfuFzyFu0/BUL4UGa0TyGBOrEXvPL889hMOLcc
MBx+mPvF8Ko5uqe7x4vu0kyrL0S1LavgDJhkgis+2z/yhw3i7o9dn1qjQYAXt/ck
2mppyCo+g9UhMttIt13HQyNPqqDBsgX3lVJlIkpNy0KZq+pHmrVJqf19JrFMwZa6
mqlflxgPuCtO+uS5Gidj7gDV14GTQ5d7EgPBAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUiEi+SWmm3SEAV0XZ1Skv2xn3uQ4wHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur
X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3
WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDEyOC9pRWktU1dtbTNTRUFWMFhaMVNrdjJ4bjN1UTQucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmf53MA0GCSqGSIb3DQEBCwUA
A4IBAQAwrH9AFO5/u+dySwG6kXc5ezhuHCeYzupLwv2Vs2k+hSxFu8HmuOr6oWmf
RyBan/hKETYOQNwJjSRKybMdOhTJbKd4mtsM4HmK5yfukZ6OOhWszULX3EaE9lDR
+iwlxanxurYb1hRh0eCpAX6UA9bVmjgAhkNyxw6fKM3irEgLNucorMlmEJ/LylyP
b3v3nJi1jMAoEEQj4Voz36LsarEHUDS/LQxgJHdC2Z6DQDJ3BDqiZB3WeBZPT6Az
xU2yZfyKD8PJBOuwicPhDe8jZmBFGFACwXt2eGUE6MstITr/G6+y2UUdbnv3I5ey
h/crSlpqoIDoeYskIb2RWF4hhsvX
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:38:23 2026 by rpki-client