
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/XTpGrbgrwYVMQQjU1bIP1OGcAa0.roa
File: XTpGrbgrwYVMQQjU1bIP1OGcAa0.roa (raw, json)
Hash identifier: vmiYW7e0runASanbyA901kbHEtwGiUrsU9C/iVd7HoE=
Subject key identifier: 5D:3A:46:AD:B8:2B:C1:85:4C:41:08:D4:D5:B2:0F:D4:E1:9C:01:AD
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: F3
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XTpGrbgrwYVMQQjU1bIP1OGcAa0.roa
Signing time: Tue 31 Mar 2026 08:17:00 +0000
ROA not before: Tue 31 Mar 2026 08:17:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 157.120.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5D3A46ADB82BC1854C4108D4D5B20FD4E19C01AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:46:cb:8d:f1:d7:9c:8a:90:32:7a:b8:9d:
5b:3a:3a:97:96:74:53:43:bb:a0:6d:5c:7d:28:31:
16:e3:41:81:65:4f:7f:e5:0d:3f:00:5a:42:b0:ca:
e7:c1:3f:a8:59:26:c7:61:d4:c5:d8:87:42:86:56:
5c:cf:2b:41:a1:d1:3d:05:fd:c8:30:51:dd:e5:79:
09:3d:42:e0:65:ce:06:09:ff:66:3c:50:98:f6:ac:
24:a2:08:15:1f:82:f4:03:d6:4a:f2:e1:49:81:1e:
3d:09:9a:22:b5:26:da:ef:0b:a8:77:6e:d2:95:bb:
08:ba:19:0f:07:fd:02:b6:34:d3:69:80:b7:47:74:
76:de:a2:89:63:26:7a:2f:e4:80:3a:16:1d:78:b0:
af:0f:8b:c1:5b:aa:51:64:40:1e:e5:9d:45:a8:9f:
a5:89:c5:67:04:20:3f:a2:d5:8e:8b:ad:4f:99:06:
40:82:7c:78:d1:96:28:e8:25:bc:b7:ff:31:0e:7a:
6a:16:1e:63:79:18:7f:a1:19:1b:b3:96:6c:b2:85:
3a:fc:ea:d2:ea:3e:85:87:95:63:d2:40:98:bc:fe:
e4:8e:3f:87:8c:a0:b5:85:3a:29:48:3d:cf:5a:5c:
74:c4:4b:f0:3c:ee:9a:e6:19:34:51:50:31:76:8e:
22:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:46:AD:B8:2B:C1:85:4C:41:08:D4:D5:B2:0F:D4:E1:9C:01:AD
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XTpGrbgrwYVMQQjU1bIP1OGcAa0.roa
sbgp-ipAddrBlock: critical
IPv4:
157.120.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b7:5b:10:2c:ad:9c:d4:10:e1:62:c2:fd:cd:ab:81:83:2c:2d:
20:f2:78:4f:44:d6:c8:d3:84:d3:ed:90:4a:39:47:bd:e9:32:
33:f0:8c:1e:3f:8c:d7:34:22:a8:15:3e:ae:f1:bb:b6:34:95:
4d:45:9a:dd:c5:35:cb:f5:87:b7:45:d2:43:c0:3b:7b:21:33:
d1:03:63:84:6e:23:60:28:c4:3b:c1:fe:c6:7a:f2:67:d7:ec:
8a:c1:96:c6:06:89:74:3a:34:bc:24:36:0c:75:e8:5f:58:6b:
9a:e2:08:ab:3b:46:83:33:06:2e:da:2d:52:e3:b4:18:52:9d:
22:a9:f3:a2:77:46:51:23:b2:d2:1b:00:95:a3:3c:54:c2:34:
65:85:6c:6f:ee:36:5a:5c:fb:cc:f5:8f:11:67:87:d4:73:72:
a5:2d:71:10:31:90:0c:c6:4d:49:2c:f5:7f:d3:e7:7c:80:29:
09:0d:42:9a:cd:a7:4a:a6:c9:df:d7:b3:45:51:f3:d0:e9:ad:
88:2b:0d:9a:42:e1:4b:15:dc:6d:bd:62:25:0d:87:70:61:23:
9d:03:a6:8b:3a:08:67:02:7d:cc:6c:1f:5f:34:c5:46:1e:a5:
80:a9:48:16:09:c3:66:ec:8d:ce:2b:9e:ed:e5:84:ff:54:9d:
47:d4:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:27 2026 by rpki-client