
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/3Wpt9CQRWCdcw_cxaHkANncm09s.roa
File: 3Wpt9CQRWCdcw_cxaHkANncm09s.roa (raw, json)
Hash identifier: 4S0RgKb5/ecxt9tSp5gAZl1aKLDl5app9f3rq/0HMd4=
Subject key identifier: DD:6A:6D:F4:24:11:58:27:5C:C3:F7:31:68:79:00:36:77:26:D3:DB
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 05AE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3Wpt9CQRWCdcw_cxaHkANncm09s.roa
Signing time: Tue 31 Mar 2026 08:20:37 +0000
ROA not before: Tue 31 Mar 2026 08:20:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 27.132.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1454 (0x5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:20:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DD6A6DF4241158275CC3F731687900367726D3DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:77:85:92:ba:6b:04:20:0d:6d:cb:3b:9e:
0b:59:25:d4:4e:1e:de:fa:85:bd:1d:2a:0c:22:c3:
35:92:41:1d:40:2f:00:27:3d:10:a6:7e:40:7a:c8:
a6:3c:54:fa:36:31:4e:90:31:98:59:d3:29:9e:5e:
3c:d6:22:85:47:18:d7:46:ab:94:a3:cb:d5:26:0c:
45:f5:8f:20:4e:98:a2:70:aa:ff:c4:b1:21:33:42:
d0:f4:68:34:2d:ce:15:99:ed:c2:27:7d:ec:b2:c4:
0a:dd:6f:18:fe:15:15:bb:12:63:03:ee:c4:2a:a2:
9c:dc:f2:ef:09:83:ca:6a:df:5e:01:10:1f:47:65:
56:83:f0:b1:60:fa:fe:52:6c:3a:ea:c0:76:6a:c6:
53:aa:a1:5f:c0:2e:d0:25:72:68:0d:df:ff:fd:57:
97:81:5c:11:39:ab:58:8e:7b:c8:23:2b:dd:77:aa:
15:ac:91:43:3c:75:06:fc:65:d1:e6:14:03:a4:0e:
5e:3a:93:85:ba:6c:29:fa:b9:7e:9c:80:98:3f:2f:
13:2b:22:ed:3d:73:14:90:88:46:2e:0c:3a:2f:63:
d1:dd:1d:7e:bc:e0:78:7b:66:f9:8a:69:9e:ba:1c:
e8:c6:f2:0c:bc:0a:13:5b:2b:2c:76:50:73:75:21:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6A:6D:F4:24:11:58:27:5C:C3:F7:31:68:79:00:36:77:26:D3:DB
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3Wpt9CQRWCdcw_cxaHkANncm09s.roa
sbgp-ipAddrBlock: critical
IPv4:
27.132.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:f0:60:88:53:eb:56:f0:ed:d5:95:13:16:8b:58:d5:2b:b7:
ae:a8:d2:f6:1a:f5:23:f8:78:64:e4:aa:6d:25:ba:27:e3:23:
69:bb:a2:48:0b:99:6f:46:7a:9b:0d:b4:da:a2:49:d4:67:57:
59:c5:3a:2a:21:a6:0e:72:94:e1:58:69:f0:57:33:a3:53:39:
f9:0f:b6:e5:08:cf:82:21:77:a6:67:9c:35:73:48:cc:45:7b:
40:00:1c:00:3b:17:2c:06:fc:cd:10:47:51:5e:f5:52:0f:9f:
29:a7:b3:9e:bf:a4:6c:82:c5:16:6f:36:86:6d:f6:7f:5e:8c:
78:5e:75:7f:56:f3:9b:71:9e:bb:8b:90:f6:d3:fa:e9:03:64:
8d:6d:cd:57:ff:b1:53:3a:53:b6:76:8e:b4:13:97:d9:3a:01:
e9:48:c4:23:9c:2f:3b:7a:82:2c:18:89:6e:69:7c:d0:9d:49:
97:fa:9b:7e:d3:61:d6:43:f8:e3:1a:c1:1b:b0:c3:82:0a:4e:
ae:65:03:95:a0:e1:d7:d6:77:86:1e:12:e1:07:ae:09:28:d2:
8e:db:57:d7:ac:04:18:2a:17:c4:e4:6c:88:5a:8e:02:8b:a1:
86:c3:76:fe:22:bd:17:b6:ac:3e:86:02:dc:ee:da:ad:0f:c2:
04:61:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:29 2026 by rpki-client