
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/2jhn5VElz6vH668kSpahXLCttlc.roa
File: 2jhn5VElz6vH668kSpahXLCttlc.roa (raw, json)
Hash identifier: 3A/l97L/l60HrzahJmov42QdPu0I8VxrFvUsqj7tXZs=
Subject key identifier: DA:38:67:E5:51:25:CF:AB:C7:EB:AF:24:4A:96:A1:5C:B0:AD:B6:57
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 04F7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2jhn5VElz6vH668kSpahXLCttlc.roa
Signing time: Tue 31 Mar 2026 08:19:11 +0000
ROA not before: Tue 31 Mar 2026 08:19:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 36.54.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1271 (0x4f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:19:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DA3867E55125CFABC7EBAF244A96A15CB0ADB657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:8e:94:53:b5:02:c2:66:a5:f6:20:57:52:
16:cf:00:6f:52:6a:17:c0:fa:e9:ad:48:0c:4c:68:
b9:2b:32:50:c4:fd:eb:3d:af:ca:c4:b7:f0:76:3c:
bd:f4:96:c8:ca:3f:75:42:75:d1:12:9a:d8:b7:2a:
ea:6c:dc:ed:ee:91:e1:74:ca:d9:16:a2:8b:3d:41:
9a:72:0e:db:4d:64:4c:cd:e9:54:3e:e5:ab:c9:af:
e3:db:0b:23:cb:c3:dc:d8:79:2b:9c:94:3a:a8:43:
6f:4a:cf:9c:3f:8e:db:3a:f3:6b:30:95:11:1c:77:
a3:ba:3a:52:17:af:ef:3b:f8:94:5d:b4:b7:33:fe:
04:65:3c:8d:84:09:bb:87:27:4e:9c:78:69:01:a7:
0a:49:cb:5d:2e:bc:31:ed:4e:87:1a:2d:c8:3f:91:
99:7e:a1:49:1f:a1:0e:f0:01:c9:70:cb:e5:4b:a5:
bb:2c:ef:bd:79:23:32:7b:d5:78:50:d0:4d:32:f8:
63:4f:c2:6b:d7:a9:9d:48:16:1e:4e:89:97:66:1f:
b5:34:e6:7d:4a:5e:d5:36:0c:84:1b:dc:7b:10:b6:
98:07:7b:9e:03:41:81:5a:99:7d:c9:c4:40:6d:77:
e7:3c:d4:cf:68:e5:53:0a:45:ad:61:97:20:60:96:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:67:E5:51:25:CF:AB:C7:EB:AF:24:4A:96:A1:5C:B0:AD:B6:57
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/2jhn5VElz6vH668kSpahXLCttlc.roa
sbgp-ipAddrBlock: critical
IPv4:
36.54.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:ed:7d:86:14:b3:14:23:c1:86:05:8d:0d:b4:36:73:6b:78:
39:b1:22:76:2e:57:3f:01:7c:c4:da:a4:8d:e9:77:60:ba:94:
43:a9:55:c3:6a:a1:6a:4b:81:16:b8:22:ff:b2:bf:1c:7b:74:
56:25:da:e0:8b:41:bc:c5:b4:c2:2f:7c:f4:27:33:6c:ee:52:
af:42:8b:48:4b:ed:6a:5a:b1:47:8b:ce:b7:df:a1:f4:55:20:
4d:96:8b:fd:41:a9:79:9d:d3:fe:a8:a9:8d:59:f5:92:b2:ae:
d3:00:15:d9:bd:38:a7:b6:00:cd:43:32:19:6c:14:ee:23:74:
fa:4e:5f:d7:c9:c6:de:b4:41:8e:fc:47:06:3f:63:2c:0e:a1:
21:88:ed:a4:e4:e2:eb:89:97:4d:e0:21:ac:44:dd:87:1c:8a:
c9:54:5e:4c:46:39:72:7c:52:57:da:f2:74:69:4a:fb:5a:e2:
09:34:16:98:fd:4b:79:b1:82:5a:c3:b4:0c:38:d0:d4:7b:d6:
97:e5:a3:82:e8:13:86:9e:b8:8d:93:5f:44:1d:72:1f:ba:28:
47:db:da:2f:5e:d7:0b:e9:fe:04:ef:13:f8:7b:21:31:2b:ee:
fa:16:aa:19:90:e0:46:08:86:b8:2b:38:34:42:6a:f8:0a:f3:
76:36:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:21 2026 by rpki-client