
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8qkN3_Q1Y8WArWNqB9_4fM5NQeA.roa
File: 8qkN3_Q1Y8WArWNqB9_4fM5NQeA.roa (raw, json)
Hash identifier: v4W+lGsJaA7+giiABVONrtWokutLRISRLaOyjXxfRKE=
Subject key identifier: F2:A9:0D:DF:F4:35:63:C5:80:AD:63:6A:07:DF:F8:7C:CE:4D:41:E0
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0607
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8qkN3_Q1Y8WArWNqB9_4fM5NQeA.roa
Signing time: Tue 31 Mar 2026 08:21:21 +0000
ROA not before: Tue 31 Mar 2026 08:21:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 180.131.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543 (0x607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:21:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F2A90DDFF43563C580AD636A07DFF87CCE4D41E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:04:8b:38:94:3f:7c:b7:41:75:96:b7:0a:
6a:65:c2:85:e8:bc:18:b9:28:73:eb:5e:62:a4:96:
21:df:28:b4:ae:df:2f:86:5f:3c:49:f0:7b:69:82:
be:4b:9b:8c:6b:36:cd:c8:b9:3c:aa:5f:c2:49:b9:
86:f2:e0:29:bb:ab:6d:97:06:68:0f:23:bd:ad:92:
4d:b8:d9:cd:1b:f8:19:45:16:38:c8:f6:ed:49:22:
3b:41:bb:7c:2f:8d:51:c1:e9:11:cd:ea:38:89:c6:
f7:6f:24:cc:13:55:ea:a5:d8:02:0c:ed:37:9c:48:
d8:ba:6d:25:67:f8:67:54:1b:c0:cd:13:22:8c:f7:
40:e3:cf:c6:27:2a:b1:02:1f:12:18:84:ff:fd:1d:
5b:86:ed:e3:cd:35:c4:1d:9c:e5:74:83:d5:0c:9c:
6c:27:77:85:58:71:c8:5a:23:0e:22:96:ba:1a:a5:
4d:2b:e1:07:3c:32:96:e0:6e:eb:85:41:08:74:69:
f9:5d:3e:a5:05:e5:68:0e:74:18:a5:f1:fc:aa:48:
7f:c9:af:7d:8f:46:41:02:3a:17:6e:98:a3:87:50:
40:8e:a5:8e:dc:88:01:e6:49:d0:2c:4d:25:51:6f:
6e:fa:44:ab:db:4b:9f:5e:27:cb:4a:b1:1e:a1:d6:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A9:0D:DF:F4:35:63:C5:80:AD:63:6A:07:DF:F8:7C:CE:4D:41:E0
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8qkN3_Q1Y8WArWNqB9_4fM5NQeA.roa
sbgp-ipAddrBlock: critical
IPv4:
180.131.104.0/22
Signature Algorithm: sha256WithRSAEncryption
16:76:cc:ea:ee:d0:2a:84:32:15:92:fb:96:53:1c:25:e2:8a:
86:45:30:b6:2e:2b:16:2a:2d:0c:61:11:04:0d:b3:4e:d5:74:
0e:7d:b3:f8:2d:68:6c:17:6f:7e:13:8e:28:52:89:51:a8:a9:
12:2d:70:74:40:69:3c:7f:f9:90:7b:37:c9:f5:7a:04:6a:0f:
27:44:f7:52:ac:50:0f:b2:83:97:72:41:a5:9f:fa:30:cf:50:
d7:b0:83:2b:38:1c:33:6c:07:af:03:c8:b9:3f:b0:6f:8f:1d:
91:a0:bb:eb:b0:9a:eb:77:f9:d1:fc:d5:96:5c:a2:3e:13:a9:
e3:f5:5b:06:a7:61:29:38:73:5b:b6:d7:c7:9a:d7:44:78:29:
c9:92:c4:d4:d5:e3:78:ad:15:9c:b6:03:09:fd:bf:52:23:ef:
c9:35:2d:4e:1e:c9:d1:b6:33:85:fc:db:d7:dc:4d:28:c4:f0:
44:b6:16:90:3d:35:27:04:82:67:55:2f:3f:00:3f:67:8b:a8:
87:e9:1a:06:2c:55:6e:c2:23:ba:90:1a:29:9e:74:86:86:9b:
95:13:43:78:2a:c9:4a:ba:9c:01:44:22:a1:f9:17:25:3a:6b:
c9:ef:16:a0:3b:b1:c9:c0:79:e2:23:b9:ae:d3:3d:4a:33:bf:
57:89:9c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:10:54 2026 by rpki-client