
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/XA5VdVJVWolS2TowsMSg3fwy8A8.roa
File: XA5VdVJVWolS2TowsMSg3fwy8A8.roa (raw, json)
Hash identifier: xPSlkQeSuY15CTSG5IBzi0EMCL3Kckp/dlHWVMt6TT0=
Subject key identifier: 5C:0E:55:75:52:55:5A:89:52:D9:3A:30:B0:C4:A0:DD:FC:32:F0:0F
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 0103
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XA5VdVJVWolS2TowsMSg3fwy8A8.roa
Signing time: Tue 31 Mar 2026 08:17:13 +0000
ROA not before: Tue 31 Mar 2026 08:17:13 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 259 (0x103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:13 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5C0E557552555A8952D93A30B0C4A0DDFC32F00F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:67:fd:22:50:7d:85:96:2e:37:d7:e6:1e:
72:5a:be:07:b6:83:28:2b:56:38:b5:b6:e7:41:ee:
73:fe:e6:d9:c4:b5:3b:65:bd:32:26:50:a4:14:3f:
f4:08:d0:4d:4a:5a:44:88:09:f1:fa:1b:bf:9b:e8:
97:9c:64:ad:ea:e2:50:bf:cb:b4:4d:ad:0f:15:bb:
af:93:0a:bd:f8:20:08:9f:49:0a:b6:f3:3b:aa:88:
05:bd:da:e7:9d:34:3a:ca:d4:8f:2b:fe:23:09:82:
2b:e9:75:6c:74:66:f5:cc:7e:55:d8:ba:ca:45:61:
19:a0:11:d4:60:a9:ba:37:9e:57:55:a3:c3:2b:ac:
79:ec:3b:7d:fd:d1:bb:ac:fb:86:7e:7f:4c:5b:27:
db:fd:52:3a:31:c2:de:7d:59:01:2b:9d:a5:04:79:
bc:9a:d9:66:8c:f6:70:4b:c5:79:ac:8a:96:ca:e1:
19:6f:74:39:38:03:9f:7f:b8:51:58:43:2e:20:e4:
05:1f:4c:aa:de:34:1c:f8:0a:87:9d:95:20:43:80:
a1:f1:f8:d4:04:04:4c:f5:2c:02:cf:0f:ae:35:91:
af:e7:39:71:c3:b0:81:34:0b:ad:fc:a2:87:ae:17:
5f:8f:4c:5c:58:75:8a:00:c2:40:0a:dd:bd:b0:26:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0E:55:75:52:55:5A:89:52:D9:3A:30:B0:C4:A0:DD:FC:32:F0:0F
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XA5VdVJVWolS2TowsMSg3fwy8A8.roa
sbgp-ipAddrBlock: critical
IPv4:
160.248.76.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:cf:fc:fb:76:4d:60:a2:76:4a:ee:66:74:b9:0d:68:dc:6b:
67:b7:d9:bd:b9:02:78:f5:00:45:f3:7b:51:28:a7:80:86:77:
20:43:fb:41:1b:3b:d3:59:31:1e:c8:f8:b1:50:2c:5c:14:b2:
e8:6e:e0:e8:89:47:ab:55:ef:eb:c5:ae:51:9c:e5:c4:23:2b:
d6:32:f7:31:64:06:64:8b:53:19:a2:10:92:e8:c1:c6:53:18:
23:cf:79:c2:d4:37:b4:a8:84:1e:65:d5:bf:14:ae:cf:f1:58:
a8:99:3d:93:8a:f1:c0:05:b5:44:b4:2e:a9:d7:f9:1a:f5:15:
5f:30:ea:6e:94:b0:66:74:c9:d7:7c:e2:d7:ed:4e:a4:65:d3:
f8:96:1f:81:a5:09:64:9d:e3:ad:5f:36:b5:2e:8a:af:a2:3a:
ef:f1:81:33:cb:a0:c2:49:06:18:bd:70:80:32:bb:7e:1b:a7:
87:cd:d1:b4:ca:42:28:a2:46:98:ec:b9:36:91:9b:10:1d:82:
d5:a9:3a:68:08:a5:17:1c:2f:bf:5e:3d:a0:e7:28:fc:13:ba:
5c:03:fc:da:f0:bc:19:a2:67:f7:48:11:2d:78:b0:87:7b:83:
7c:38:17:e2:94:93:ad:6a:19:d1:53:82:00:95:9b:50:a8:d0:
6d:f7:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:22 2026 by rpki-client