
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/eob12mtjaDSzzdUW_9En92RscYs.roa
File: eob12mtjaDSzzdUW_9En92RscYs.roa (raw, json)
Hash identifier: gpXYSy2It/kWCvfIdS6mnXjLwjk+rvMkbKY1y87/d4Q=
Subject key identifier: 7A:86:F5:DA:6B:63:68:34:B3:CD:D5:16:FF:D1:27:F7:64:6C:71:8B
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 0122
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/eob12mtjaDSzzdUW_9En92RscYs.roa
Signing time: Tue 31 Mar 2026 08:17:26 +0000
ROA not before: Tue 31 Mar 2026 08:17:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 157.65.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7A86F5DA6B636834B3CDD516FFD127F7646C718B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:47:ca:83:94:24:5d:87:00:88:32:29:73:
ce:1c:fd:7b:10:a0:44:7e:f7:f1:ee:3c:7c:3f:d7:
c1:09:b5:0a:63:c9:96:6d:8b:ec:ed:6b:89:63:b6:
79:dc:67:2c:0a:7f:9d:e8:84:0f:06:f6:95:13:a6:
2a:4d:3d:5f:7d:fa:fb:27:fb:5f:7b:3e:10:f3:79:
00:d5:89:77:54:4b:65:0b:2c:70:67:af:94:25:9a:
0a:11:49:e9:4d:62:b8:5e:6e:f6:bb:18:67:50:40:
a2:43:20:1f:3c:9c:bc:4c:ab:67:aa:c3:04:6f:68:
e9:37:aa:fc:e4:50:3b:35:3c:4e:9b:c4:cf:d0:eb:
f8:c6:1c:14:be:d7:67:e4:ae:54:18:49:b0:6e:a1:
59:a6:06:72:cf:7f:07:56:a7:df:5b:7f:21:a9:61:
5e:de:18:58:68:6f:c3:be:02:20:44:83:b8:53:67:
a4:8b:51:d6:2d:d3:92:3f:49:86:55:63:1f:94:8b:
2c:24:18:10:3e:aa:1f:77:e1:06:d0:e9:3e:e1:78:
a0:98:27:e6:8a:00:3b:ad:7c:f4:a4:16:5c:ac:fd:
b8:f2:89:a6:3a:10:a3:c0:0e:a8:e1:4f:e3:f8:55:
ff:4f:e9:ad:2f:8c:73:98:43:a2:9f:b2:e1:ac:6c:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:F5:DA:6B:63:68:34:B3:CD:D5:16:FF:D1:27:F7:64:6C:71:8B
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/eob12mtjaDSzzdUW_9En92RscYs.roa
sbgp-ipAddrBlock: critical
IPv4:
157.65.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ae:be:ef:78:99:26:73:6a:59:f5:c9:3d:43:ac:9c:7d:d9:a8:
46:d3:a4:a4:fd:20:d8:2a:71:bb:6c:8e:ca:cd:b0:de:7e:b1:
94:76:c8:6d:9f:e0:e3:31:1c:72:44:3e:3a:ff:66:a4:20:a5:
7c:30:63:0d:68:56:ec:e8:8a:c7:a6:5c:42:6c:36:e4:70:79:
23:87:9e:98:a9:c5:05:0d:ed:40:64:f8:96:e1:ba:bc:29:17:
4c:36:d8:91:59:3c:ca:81:42:80:6e:65:7c:3e:c8:75:65:2f:
08:6f:b2:50:a0:28:cc:4f:89:a9:4f:ac:9e:08:49:6f:0f:79:
74:24:22:03:37:f9:2a:c8:d8:13:41:16:0f:2f:6a:4b:c0:8a:
c0:96:e7:5f:93:76:0e:74:1a:29:48:23:26:6e:5f:d6:eb:a6:
ce:85:81:0b:46:f5:72:7a:f2:1b:ae:bd:fc:ff:60:c5:19:eb:
6a:64:40:71:6b:f6:8f:a4:30:c6:b3:5c:23:2d:56:60:8b:7b:
05:bc:e2:ed:43:4e:e8:5d:9b:81:e2:9c:2a:94:93:02:6b:49:
2f:0c:83:7e:01:a3:2d:8f:86:64:65:bc:ee:98:d1:d3:6f:4a:
38:8d:6a:c3:f2:be:9d:e6:0e:e0:a8:56:d2:1d:55:43:9c:36:
87:b5:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:26 2026 by rpki-client