
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1xE1AvC45RXbdIIxWePXEOm-8zk.roa
File: 1xE1AvC45RXbdIIxWePXEOm-8zk.roa (raw, json)
Hash identifier: F3MkuF2dQsk+Ro36rJjepDeAJFtfRKD0csQGR5oy0TE=
Subject key identifier: D7:11:35:02:F0:B8:E5:15:DB:74:82:31:59:E3:D7:10:E9:BE:F3:39
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 04D9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1xE1AvC45RXbdIIxWePXEOm-8zk.roa
Signing time: Tue 31 Mar 2026 08:18:55 +0000
ROA not before: Tue 31 Mar 2026 08:18:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 27.133.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:18:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D7113502F0B8E515DB74823159E3D710E9BEF339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6e:9b:9d:f1:d8:db:f2:c3:e9:e3:1d:ac:aa:
fc:1b:69:3a:64:f5:58:ec:a9:69:a8:e4:33:a4:dc:
35:83:0e:d9:08:c0:b7:13:fb:38:7b:97:d0:18:a9:
9c:93:09:8e:9b:e5:37:73:84:73:44:59:97:58:05:
64:0f:a6:6c:8c:e9:47:9a:81:19:bb:5f:a2:73:51:
e9:52:bb:83:c9:1e:3f:7c:67:6c:16:df:e8:84:4f:
73:a2:79:ac:1e:a3:37:aa:2f:09:67:4f:ec:fb:ef:
f3:59:dc:3e:34:c6:19:78:b1:50:43:a5:0b:04:60:
89:64:62:99:33:91:3a:ac:eb:ef:a9:cd:39:55:61:
c0:0d:3c:6b:f8:7b:31:7a:e1:e4:1a:0c:c9:da:5f:
64:37:c5:d1:43:99:d6:41:6d:03:68:25:71:17:b2:
d4:76:f7:11:dd:15:e4:ee:29:a3:17:ea:1d:c2:10:
bd:22:53:4f:e2:0e:fe:cd:d5:19:42:5e:90:74:b3:
be:17:0d:ab:72:8d:9c:3c:47:b6:56:0c:00:54:1d:
6c:da:bf:9c:eb:b4:3c:7b:cb:b3:b7:54:f6:ae:0a:
b3:31:24:d1:78:90:2b:fb:91:dd:48:75:ac:ac:5f:
f3:7a:cf:78:41:b0:e8:aa:34:43:91:51:a8:c6:f5:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:35:02:F0:B8:E5:15:DB:74:82:31:59:E3:D7:10:E9:BE:F3:39
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1xE1AvC45RXbdIIxWePXEOm-8zk.roa
sbgp-ipAddrBlock: critical
IPv4:
27.133.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:7a:fb:a5:42:f7:02:98:1c:ac:a8:53:50:23:40:78:5b:ec:
a8:6b:83:3c:70:82:78:43:26:e9:ac:a1:b4:73:d8:d1:4a:6d:
8e:c3:39:c2:ab:d8:05:11:4c:2e:fd:17:5a:24:f3:e3:50:e8:
9f:a4:87:66:c7:8a:53:ca:31:62:47:bc:85:a2:84:31:54:b7:
96:a6:83:86:ed:8f:01:a6:c8:82:8a:a7:d7:83:e4:05:fd:51:
72:ff:fd:a1:da:1e:e2:82:d5:16:c0:1d:bf:20:7a:00:7c:d3:
28:59:53:98:7f:0d:34:e5:f6:44:57:f7:aa:8e:df:3d:db:f3:
60:09:61:bf:1b:33:43:2a:f8:54:af:93:70:db:d7:44:3c:a5:
1c:1e:49:7d:64:6a:0b:39:bd:5d:f3:28:90:74:bc:57:65:93:
b9:52:00:e8:d9:6a:17:d9:21:94:33:d1:bb:59:0f:13:ff:d2:
0a:55:d9:aa:8e:7d:94:8c:5d:31:52:03:51:ca:56:05:88:be:
b3:fc:55:fe:14:bf:22:cd:5b:af:34:45:7d:36:1c:7e:6c:ce:
41:69:39:0d:db:65:f5:86:a8:b7:5a:71:5b:e4:33:71:9e:ae:
d9:d4:60:9f:0e:ff:1a:04:68:75:af:24:21:13:1e:8a:53:d9:
13:3c:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:39 2026 by rpki-client