
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/EIMbZHNkEhf3beknPjqsqbYOuTo.roa
File: EIMbZHNkEhf3beknPjqsqbYOuTo.roa (raw, json)
Hash identifier: ZlKnuViHsC5uM8UODk0M0XbMV5L7hf1chQdEdkepuGY=
Subject key identifier: 10:83:1B:64:73:64:12:17:F7:6D:E9:27:3E:3A:AC:A9:B6:0E:B9:3A
Certificate issuer: /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial: 68
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/EIMbZHNkEhf3beknPjqsqbYOuTo.roa
Signing time: Tue 31 Mar 2026 08:35:52 +0000
ROA not before: Tue 31 Mar 2026 08:35:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23783
IP address blocks: 219.124.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Validity
Not Before: Mar 31 08:35:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=10831B6473641217F76DE9273E3AACA9B60EB93A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:6a:14:7f:47:78:a4:94:fd:5f:80:e3:3a:
0d:c7:1f:69:ce:6e:87:d5:d0:aa:ff:d4:cf:49:07:
1d:60:7c:b9:9d:69:5d:88:1e:28:8f:34:86:8b:20:
ab:bc:83:ad:50:41:de:ca:1c:9e:c0:ef:d1:f5:1c:
2d:c4:61:01:9f:ca:82:ca:46:7f:1a:9e:2c:49:9d:
ec:d9:24:76:21:14:86:55:81:10:b8:d1:ed:f8:7e:
30:91:8b:ae:60:5d:a9:43:c5:e2:fe:16:21:c4:7b:
75:ba:53:b5:00:b1:4a:ae:47:d7:47:11:8f:ca:71:
6b:c9:bb:24:0f:9a:5d:67:1a:c8:f3:93:75:db:e7:
53:e8:88:f2:19:69:e3:c7:76:93:3f:d7:2c:bd:26:
e4:93:c3:0d:8b:9b:65:59:0d:76:83:74:a1:86:d5:
90:78:a5:18:a6:0d:ce:f6:cf:4b:ef:ff:e7:2b:eb:
ad:9c:4f:3e:a4:f3:58:30:19:18:b0:e4:ba:45:0f:
62:15:67:0f:b0:83:42:4a:7b:e4:67:1b:ed:c4:20:
e4:63:82:63:2d:bc:86:0d:8c:5b:fe:3d:99:f3:8e:
ac:35:06:67:27:3d:6b:43:5c:1e:32:7f:fc:4e:a5:
55:0d:e6:03:b7:ac:77:d4:d2:b2:f0:a9:d3:0b:a6:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:83:1B:64:73:64:12:17:F7:6D:E9:27:3E:3A:AC:A9:B6:0E:B9:3A
X509v3 Authority Key Identifier:
keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/EIMbZHNkEhf3beknPjqsqbYOuTo.roa
sbgp-ipAddrBlock: critical
IPv4:
219.124.100.0/22
Signature Algorithm: sha256WithRSAEncryption
00:42:65:14:b2:80:5d:02:7f:02:b2:26:ce:b0:a9:4d:f0:58:
a2:85:f5:7e:ac:a6:2d:4a:e5:df:61:5c:e1:50:c7:ce:21:2e:
2e:5d:39:3d:b0:68:82:4a:0c:e8:a2:c4:fd:c2:bb:09:19:4b:
a2:b1:ba:5e:fa:48:1c:64:0c:92:06:b4:ce:aa:4c:0c:3b:62:
1f:b2:12:8d:97:3d:ab:0c:b2:87:5a:76:ec:a9:77:ea:7a:b6:
d1:76:68:36:c5:86:a0:ad:aa:7e:f3:2a:34:85:00:1f:78:10:
33:39:53:1e:42:c3:49:ee:02:7e:8b:58:27:44:93:dc:d5:74:
6e:ff:a1:ad:5f:fa:a0:fa:9a:1f:cb:f3:8e:5a:50:bb:94:eb:
83:ab:f5:d4:99:68:a5:30:dd:5a:1a:1d:75:7a:0d:ed:e4:c2:
78:f8:15:1f:4b:7c:bb:fd:49:dc:54:2a:96:14:59:d6:dc:d9:
89:47:57:84:c7:62:68:64:02:02:de:a2:d9:47:e2:44:d6:c2:
f6:60:60:40:8d:b4:af:2b:b4:8c:14:36:bb:83:8e:28:ca:91:
bd:ba:2a:37:98:df:58:c0:4e:cb:97:55:89:1f:01:f4:88:20:
4c:2c:c4:9d:3d:35:3a:bf:e1:3c:b0:82:c1:6d:61:2e:86:96:
73:f0:2a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:54 2026 by rpki-client