
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/vrDYKzie5NWlftbjQLlcMpAbTz8.roa
File: vrDYKzie5NWlftbjQLlcMpAbTz8.roa (raw, json)
Hash identifier: mEFRidxekfxHJfsJwfhV3Y+sH+QlfAY5ZieBUTITGek=
Subject key identifier: BE:B0:D8:2B:38:9E:E4:D5:A5:7E:D6:E3:40:B9:5C:32:90:1B:4F:3F
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: AD
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/vrDYKzie5NWlftbjQLlcMpAbTz8.roa
Signing time: Tue 31 Mar 2026 08:17:37 +0000
ROA not before: Tue 31 Mar 2026 08:17:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 124.146.128.0/17 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BEB0D82B389EE4D5A57ED6E340B95C32901B4F3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:86:5e:3b:be:fc:bf:04:0e:c1:04:5a:c5:
e9:b0:ce:f6:7f:7e:6f:d2:f3:79:e0:05:c4:15:97:
04:0a:29:c4:ac:4b:93:8a:5f:e3:ed:c5:09:dd:20:
13:0b:59:6f:b0:ef:c4:b7:03:10:5c:ac:f6:3c:0a:
4b:e6:03:12:32:3e:5b:cf:b3:56:b9:00:94:91:e4:
aa:37:0d:fc:29:03:f0:a0:99:0e:7f:43:92:43:cc:
f0:46:d9:7f:96:95:2c:de:66:8e:5d:1f:e4:b5:45:
3d:61:16:2b:da:2f:eb:0f:65:71:28:20:d0:0d:ef:
37:75:2a:c7:5a:89:2e:18:c9:f7:81:f9:c7:16:0f:
a6:f4:c9:cc:ad:d2:1b:40:14:66:b4:10:5e:51:1e:
22:d7:5c:7b:e1:48:76:d4:2b:1d:3b:23:40:ec:1c:
2e:c2:96:90:db:9c:b0:ab:50:2a:7e:74:fb:32:a1:
ce:5e:e8:44:3e:9a:73:e3:c1:7f:75:d9:7a:ca:6d:
f6:3a:da:99:73:37:60:16:65:bc:00:c3:58:aa:87:
06:99:81:b0:88:46:25:9e:ed:f2:0d:e3:70:eb:d1:
d3:72:b9:71:7c:50:b2:50:cc:00:55:d1:1c:80:ec:
15:1f:4f:6c:da:9c:c7:7a:f4:f7:9e:fe:54:cc:62:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B0:D8:2B:38:9E:E4:D5:A5:7E:D6:E3:40:B9:5C:32:90:1B:4F:3F
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/vrDYKzie5NWlftbjQLlcMpAbTz8.roa
sbgp-ipAddrBlock: critical
IPv4:
124.146.128.0/17
Signature Algorithm: sha256WithRSAEncryption
68:6d:99:6d:ea:5d:ea:9a:c2:9e:43:b6:69:21:4b:ec:89:ca:
b5:f3:24:ad:96:b1:25:14:d3:cc:b3:29:c0:09:cd:54:36:a3:
ac:c9:d9:d3:07:75:23:7e:5d:16:57:8b:ac:99:0e:4f:a0:d8:
f5:25:d0:7d:6d:75:d3:ec:33:03:6f:c5:7d:80:4e:da:25:89:
bd:b2:e4:e2:cb:1d:c4:f7:83:d0:8f:0d:ed:ac:18:f4:99:e5:
9a:2e:09:67:bc:14:24:c0:69:74:2b:77:42:80:e3:e4:4f:d9:
1f:6c:d7:15:24:20:39:1a:f8:ca:c8:43:27:bb:03:e9:3d:55:
f9:60:0e:d1:73:b3:9a:fd:aa:ba:18:c7:4b:94:b3:4a:ca:a5:
d3:9d:96:60:b4:62:cd:f2:cc:7a:d5:97:f2:33:16:35:25:cf:
7a:a8:ad:02:45:99:01:4e:82:79:e7:23:36:1d:9a:1a:f6:56:
8f:c1:53:ff:ea:e8:21:2a:28:d2:91:1f:8f:2d:e3:22:58:da:
11:65:1a:e3:15:a3:bf:3b:d0:e3:64:f5:25:76:5e:e2:97:c0:
6b:cd:fe:cd:97:a1:2b:3b:4e:23:43:35:60:36:e9:7b:4f:0e:
1d:1f:76:0f:97:2c:8a:45:8d:fa:65:63:f1:13:01:93:24:68:
12:d6:81:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:24 2026 by rpki-client