
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/s5O14B4G9TZ322G7vR5MduabDsg.roa
File: s5O14B4G9TZ322G7vR5MduabDsg.roa (raw, json)
Hash identifier: wgeMcG4U7JXuNEhyc6Mb7CTfTgX545ajtGwOmBRmOEU=
Subject key identifier: B3:93:B5:E0:1E:06:F5:36:77:DB:61:BB:BD:1E:4C:76:E6:9B:0E:C8
Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial: 34
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/s5O14B4G9TZ322G7vR5MduabDsg.roa
Signing time: Tue 31 Mar 2026 08:42:25 +0000
ROA not before: Tue 31 Mar 2026 08:42:25 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9354
IP address blocks: 125.2.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Validity
Not Before: Mar 31 08:42:25 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B393B5E01E06F53677DB61BBBD1E4C76E69B0EC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:df:cb:15:ba:83:b0:1c:52:45:4f:85:e6:ca:
20:ea:9c:6b:e7:a2:bc:f8:b1:1c:08:15:a4:92:61:
77:b8:26:34:61:a8:22:04:bb:ee:a4:c6:70:62:f8:
d0:f2:5c:a9:6c:31:c3:51:b9:93:a9:b5:5c:54:ea:
e7:6a:85:74:e6:ff:6c:72:8e:9f:88:25:f8:8e:ec:
7e:70:36:c9:65:3d:ce:57:bc:64:32:71:dc:91:57:
31:ad:2a:9f:d4:d2:56:f2:2d:0a:11:ff:56:1f:bf:
23:23:69:e4:37:2f:ab:b9:a2:2e:a4:5f:78:d5:da:
2b:0f:f3:dd:3a:0a:93:95:24:85:c0:76:94:81:18:
4d:22:6d:95:6d:22:f5:a4:6c:9c:d9:71:e5:36:98:
93:d5:9f:ed:72:2e:12:2f:c3:04:92:92:eb:86:f9:
1b:a3:a7:28:48:85:03:66:1e:71:50:8e:6a:ae:ed:
70:c5:2d:6f:e0:77:18:2d:b8:0e:af:d0:75:e0:9a:
30:04:55:07:8a:7e:1b:d9:28:18:7e:d3:db:22:25:
8f:79:95:db:55:1f:4b:0a:38:e3:ed:4d:59:e1:cb:
d8:bc:da:66:db:ab:70:e9:07:b4:f6:48:7c:93:b1:
33:c9:04:73:0d:fe:a7:07:82:24:98:95:ac:f1:0f:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:B5:E0:1E:06:F5:36:77:DB:61:BB:BD:1E:4C:76:E6:9B:0E:C8
X509v3 Authority Key Identifier:
keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/s5O14B4G9TZ322G7vR5MduabDsg.roa
sbgp-ipAddrBlock: critical
IPv4:
125.2.128.0/18
Signature Algorithm: sha256WithRSAEncryption
24:84:50:f8:20:58:f3:19:74:65:b6:70:ea:23:bc:3e:25:04:
3c:15:7d:47:8b:f9:38:07:f5:88:b6:7e:7f:3b:7c:59:09:c6:
8b:7b:06:b3:0d:57:14:25:7c:ac:59:7c:96:f1:8d:88:34:ef:
e2:c9:4c:4c:d3:48:90:9a:62:78:ab:77:dc:dc:5e:90:8c:1e:
bb:d9:9e:55:f0:15:0d:2c:2f:72:b4:12:68:59:11:2d:b9:ac:
8d:a1:3a:7f:10:60:b1:4b:12:de:bd:ba:13:f0:83:75:ec:b8:
c7:e5:5f:b5:6d:da:bc:0a:5b:1f:e7:27:3d:b1:52:7f:df:fb:
63:75:fd:02:71:2d:ea:fc:35:63:7c:ac:81:ee:40:2b:bf:f6:
a8:ef:03:ce:75:a7:f8:36:ce:47:9e:56:10:3f:ef:01:30:72:
2f:96:f6:b1:a8:92:9a:5f:c2:87:cd:35:9c:6d:3c:1d:7e:99:
f8:1d:b9:cd:d8:81:e6:49:d7:1c:35:21:9a:98:eb:1b:ec:2e:
ce:4e:46:48:bd:b1:61:00:80:69:0e:23:cb:6a:91:e3:fe:9e:
22:2a:25:ad:ac:f0:ab:ac:91:62:08:11:54:0e:18:da:22:df:
94:39:5c:5a:93:07:70:66:33:de:c4:6b:cd:a5:b3:e2:3e:10:
ac:d7:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:49 2026 by rpki-client