
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/87tzq7uNocUSMXsp0mDuFvuYPWM.roa
File: 87tzq7uNocUSMXsp0mDuFvuYPWM.roa (raw, json)
Hash identifier: 9BLDl6EUOB2LrMolseZ7aMsvN/GDVwPYwvhoC+a40x8=
Subject key identifier: F3:BB:73:AB:BB:8D:A1:C5:12:31:7B:29:D2:60:EE:16:FB:98:3D:63
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 059F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/87tzq7uNocUSMXsp0mDuFvuYPWM.roa
Signing time: Tue 31 Mar 2026 08:20:31 +0000
ROA not before: Tue 31 Mar 2026 08:20:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 180.131.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1439 (0x59f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:20:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F3BB73ABBB8DA1C512317B29D260EE16FB983D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:d8:aa:66:ea:df:e3:34:90:72:c1:5f:9b:
7f:e7:f0:c9:4f:5b:d4:60:24:8e:0b:a3:7d:7b:a9:
bc:59:06:96:30:1c:0c:c3:c9:56:23:68:14:4c:f1:
ab:2f:37:50:e7:9c:71:4e:84:c3:e5:d1:bf:67:b3:
68:49:3f:b2:78:81:69:62:1c:f7:ba:36:96:a5:9e:
c3:7a:fd:1a:52:b8:17:8f:92:ac:6c:83:42:0b:64:
53:c4:75:eb:96:22:91:18:91:d3:4d:44:21:31:5e:
ed:dc:52:15:20:98:82:d7:42:19:d8:af:eb:8f:44:
1c:7b:91:0c:4b:03:4e:03:39:8d:c8:e3:0a:e3:ff:
56:33:50:92:b0:05:22:6f:79:1c:57:b6:77:36:d0:
92:09:e0:6a:01:f2:55:5c:a7:15:6f:70:19:28:9b:
fb:4c:9c:56:de:03:29:3d:a4:f2:27:b6:82:02:fa:
c9:f8:4c:60:79:0a:32:68:75:51:d7:6b:28:ac:da:
b9:44:19:94:2c:fa:5b:dc:14:d7:d9:82:a9:6e:24:
00:94:cf:85:a6:04:2c:75:9e:76:91:e9:d6:e4:20:
cb:f8:20:70:91:15:41:f1:cb:70:b0:a1:e8:26:ff:
10:1a:05:f6:20:80:78:4f:73:12:7b:d7:54:27:bf:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:73:AB:BB:8D:A1:C5:12:31:7B:29:D2:60:EE:16:FB:98:3D:63
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/87tzq7uNocUSMXsp0mDuFvuYPWM.roa
sbgp-ipAddrBlock: critical
IPv4:
180.131.122.0/24
Signature Algorithm: sha256WithRSAEncryption
49:12:eb:63:a9:7e:5d:75:fc:3a:55:dd:44:79:c0:24:22:4d:
01:02:e7:64:5c:c2:00:5c:19:1e:ec:17:62:74:97:15:ef:b0:
64:de:c1:c6:c9:c6:f3:a0:90:af:99:49:86:a1:59:29:94:91:
01:18:f4:be:f6:cc:07:66:70:d2:72:c2:d6:43:0d:c2:72:a1:
58:a1:74:43:45:29:da:a1:90:36:d8:a8:81:58:4f:19:62:b3:
0f:af:0f:4c:51:bd:e3:c5:10:69:67:32:c7:cb:81:59:ad:1b:
5a:81:7d:47:f0:91:18:77:86:d3:2c:91:1f:22:5d:4c:95:49:
0c:ab:bb:5a:43:a4:ed:48:b1:9d:de:15:68:4b:4a:56:f9:9e:
39:55:82:56:82:0e:b6:ca:7b:d4:1b:72:73:c5:b2:70:75:1d:
77:b0:3d:5d:71:3d:f4:19:2c:aa:f1:42:d6:5c:ed:07:c5:c7:
8b:d6:94:26:3e:af:20:56:da:14:43:52:52:d6:b3:3e:a4:6b:
76:24:da:92:c6:ff:59:c0:f4:b7:fe:26:7e:d9:02:6a:c1:b0:
d7:d7:c5:76:16:74:95:7d:ab:c8:21:bb:f0:8e:f7:34:a6:81:
79:f5:ec:9f:10:f4:1a:09:c2:4b:ae:ee:18:5a:ba:a3:9f:a2:
e4:ee:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:36 2026 by rpki-client