
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ez5RJ9Qvx4pi2WebxyE1SQu7cyg.roa
File: Ez5RJ9Qvx4pi2WebxyE1SQu7cyg.roa (raw, json)
Hash identifier: 4fdWnQx7Qe9c1+iESNed3UXp8yEQAVMb78KO6pTOSx8=
Subject key identifier: 13:3E:51:27:D4:2F:C7:8A:62:D9:67:9B:C7:21:35:49:0B:BB:73:28
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 0106
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ez5RJ9Qvx4pi2WebxyE1SQu7cyg.roa
Signing time: Tue 31 Mar 2026 08:17:14 +0000
ROA not before: Tue 31 Mar 2026 08:17:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=133E5127D42FC78A62D9679BC72135490BBB7328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:5b:df:5c:9c:df:d7:62:47:23:94:02:17:
71:78:13:ee:32:ac:13:6c:65:04:16:33:1e:91:1b:
d7:5c:d6:08:d8:c7:03:19:ed:04:52:cf:44:db:53:
e1:92:6a:f0:2a:7c:ad:2c:bf:f8:0f:fa:b0:e7:b7:
ae:a7:3a:ec:b0:2c:83:0e:c5:69:45:96:4e:a5:7d:
4e:8c:18:12:a7:c1:5d:94:d5:3b:6e:5f:db:5b:5e:
48:de:37:da:73:db:4d:cc:5d:2c:33:48:75:ca:c8:
a2:b9:98:24:a0:f7:4b:13:a9:a8:ba:67:b5:20:23:
fc:f5:ff:d5:77:76:4e:38:f6:64:ec:e2:f8:e0:66:
64:62:80:07:fe:a8:7e:b5:f8:1e:19:f3:b4:47:05:
0e:cc:ab:63:87:f4:0d:93:ac:65:a7:23:db:05:bf:
bf:bc:db:8c:05:a2:23:56:fc:4b:0f:3d:e2:f0:b6:
29:bb:16:d3:20:cb:d5:87:35:c4:6b:be:0e:ff:56:
81:25:96:96:af:db:72:7a:18:81:5e:8e:8e:7c:da:
62:ff:a6:29:b7:97:b2:6a:26:aa:6f:69:b7:d1:87:
1b:91:84:34:cb:fb:52:73:18:8f:e7:29:3f:14:5c:
0b:01:73:c1:7f:af:35:c6:da:32:88:69:42:82:7b:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3E:51:27:D4:2F:C7:8A:62:D9:67:9B:C7:21:35:49:0B:BB:73:28
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ez5RJ9Qvx4pi2WebxyE1SQu7cyg.roa
sbgp-ipAddrBlock: critical
IPv4:
160.248.84.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4e:bb:2b:5b:0d:9e:93:48:b8:3d:39:63:5b:3b:83:4d:11:
53:9c:30:9b:b6:d8:7a:6b:b9:1d:1d:d6:a8:0e:b2:41:44:18:
a0:d8:df:a4:8d:f4:84:46:9d:7c:f3:88:3f:7f:70:f9:2b:71:
8a:07:9d:b4:4c:f0:c5:cf:a2:69:2d:41:12:db:6e:4d:c8:23:
a3:02:93:d8:83:4c:90:1b:0d:76:ad:c4:7f:6b:19:8c:af:32:
b4:26:12:0c:7c:5b:2e:3f:03:73:8b:7c:5f:ee:76:eb:8c:c9:
36:68:bd:3b:a5:14:b9:27:2f:73:d1:e5:51:54:12:07:e4:7c:
f0:60:6e:c1:03:ff:f1:22:f4:f0:d1:78:99:34:5b:4e:77:23:
bc:d4:6f:fa:9f:92:5a:7c:41:4f:12:34:e2:7b:a5:f6:8c:6d:
b0:2d:6b:62:14:0a:a8:21:96:f9:92:2f:2f:d5:01:02:2e:42:
19:33:b1:e4:a1:37:dc:e9:eb:e6:0b:99:5c:4e:71:4c:22:ff:
37:47:39:9e:50:fc:88:9f:91:5f:67:aa:9a:12:69:72:b4:44:
32:72:1e:da:5a:24:cb:8b:37:04:17:ee:1f:cb:11:30:19:68:
2d:aa:ec:28:24:ed:63:49:d0:00:bd:c5:cd:11:1d:61:84:f9:
b0:d4:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:25 2026 by rpki-client