
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ksE5KMZJQZXdELQvCyreYZVMRmk.roa
File: ksE5KMZJQZXdELQvCyreYZVMRmk.roa (raw, json)
Hash identifier: IveGMevzGcv4M0xwB9/KMUQXPqyPWJUbTonk4L4ahSM=
Subject key identifier: 92:C1:39:28:C6:49:41:95:DD:10:B4:2F:0B:2A:DE:61:95:4C:46:69
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: F8
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ksE5KMZJQZXdELQvCyreYZVMRmk.roa
Signing time: Tue 31 Mar 2026 08:17:01 +0000
ROA not before: Tue 31 Mar 2026 08:17:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 157.65.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Mar 31 08:17:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=92C13928C6494195DD10B42F0B2ADE61954C4669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:51:c3:06:82:c8:e6:ad:6c:08:4a:8c:65:a1:
64:ac:ea:03:34:d5:37:c2:fc:45:78:a8:23:63:2e:
8f:1e:5e:08:10:1d:9f:94:07:33:11:ad:2a:a4:f6:
45:c2:f1:83:6a:9d:58:5e:46:05:03:9d:69:19:72:
63:9a:91:55:c6:f3:51:dc:23:76:02:67:a9:62:44:
fd:42:55:a3:ef:ef:52:ad:63:e7:bf:6c:de:99:5c:
3a:9c:56:d0:ef:bf:7a:8b:ce:21:27:0d:af:a3:f0:
97:d2:ae:b6:fe:19:22:96:15:13:ae:bd:5d:a3:3e:
44:40:80:e3:8a:02:d5:e9:ea:b6:a3:22:a6:71:ee:
7f:f0:86:3b:0f:aa:2f:f2:f2:8d:67:d4:2d:12:b2:
01:04:25:4b:b7:99:6d:48:1f:11:e4:8a:4c:f2:4a:
0c:b3:61:0c:f8:ed:d7:56:55:19:9d:08:16:ac:ac:
53:01:17:59:a7:d9:26:5c:dc:bc:21:5e:df:fc:f1:
60:d0:48:b3:a0:97:c5:ed:4f:e2:68:66:08:f7:84:
67:0d:25:5c:a7:7f:27:f1:25:ae:bc:c2:1f:e6:1c:
2c:da:99:85:1f:40:65:4d:8c:59:55:e9:92:1e:cc:
af:49:eb:a8:95:0c:09:b7:8d:3a:dc:ed:a0:ad:73:
bd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:39:28:C6:49:41:95:DD:10:B4:2F:0B:2A:DE:61:95:4C:46:69
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ksE5KMZJQZXdELQvCyreYZVMRmk.roa
sbgp-ipAddrBlock: critical
IPv4:
157.65.160.0/20
Signature Algorithm: sha256WithRSAEncryption
38:47:25:b0:bd:01:39:92:61:e9:56:a4:bd:70:68:29:9d:4a:
61:04:5b:08:68:f2:40:72:31:1c:fa:40:2e:d1:cf:0b:53:e9:
c8:33:9b:95:e3:c7:07:bc:24:42:9d:ab:1e:54:60:12:8b:31:
6d:c6:5f:ef:4d:87:91:6e:b5:08:51:8b:88:e3:3a:3b:72:67:
79:40:1d:96:07:38:b8:33:fb:40:2c:36:5d:21:b5:5a:e3:9e:
c2:77:e9:5b:67:61:d9:15:6c:85:80:e6:5b:57:b2:4c:51:10:
92:3f:22:50:ed:f9:4d:a8:22:37:02:31:b9:df:c5:6e:fb:87:
8d:0c:25:9c:d9:ff:0a:c0:db:2c:a8:89:f1:85:8c:4e:4b:13:
dc:ac:7e:7b:e0:56:e8:6d:9a:a2:9c:93:50:53:43:0f:0f:f1:
a2:e5:1b:da:43:40:b1:90:3d:3d:48:af:29:f5:19:22:88:e2:
69:98:b9:2d:65:58:b7:74:e6:cf:4c:a8:a4:c8:da:af:95:d2:
bf:66:ce:44:76:ef:8b:f0:08:d8:51:2e:2b:c3:a5:d9:23:aa:
8a:c3:af:aa:1d:f9:59:65:49:14:c4:6e:37:e9:43:f6:12:dd:
4b:9d:6c:37:13:12:f8:7e:fa:69:3c:ea:4a:68:9a:07:1c:ef:
e3:e7:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:21 2026 by rpki-client