
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GwErkMee9CvAGksJbheGmSshHPU.roa
File: GwErkMee9CvAGksJbheGmSshHPU.roa (raw, json)
Hash identifier: 1T8qfm8u31129eN8x9S+8+gheP7HF8aEdWw3C7t7pho=
Subject key identifier: 1B:01:2B:90:C7:9E:F4:2B:C0:1A:4B:09:6E:17:86:99:2B:21:1C:F5
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 057E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GwErkMee9CvAGksJbheGmSshHPU.roa
Signing time: Tue 31 Mar 2026 08:20:17 +0000
ROA not before: Tue 31 Mar 2026 08:20:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 153.120.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:20:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1B012B90C79EF42BC01A4B096E1786992B211CF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:b3:a4:45:4e:d2:90:22:ae:85:b2:05:ce:
c9:d8:e9:39:43:e1:41:0d:fa:01:4e:8e:07:12:ab:
40:15:47:ef:5f:5d:d1:f4:d4:11:e9:8b:b0:bf:67:
0c:20:1e:25:af:05:f6:49:e0:cf:14:37:b6:2a:f0:
ae:d9:7c:e4:d0:47:ed:c3:6d:9b:ea:52:f6:07:0b:
39:bf:03:2b:d3:bc:11:30:3d:74:15:18:ef:36:c5:
c8:be:d0:53:fb:47:37:f7:94:72:33:5a:71:a8:6d:
9a:e2:fd:17:41:f5:15:ef:92:b6:6a:c7:81:63:ba:
48:71:b6:53:44:fa:f7:14:70:f0:f6:6f:44:1e:98:
c2:e7:7c:d5:50:3a:d3:fc:d3:a4:2c:2e:25:96:b6:
8a:28:58:f9:fc:8b:e7:fb:0f:1b:a8:2b:17:6c:2a:
63:c6:09:eb:02:0d:76:bb:68:78:6b:7f:df:ea:02:
56:f6:df:ea:a0:03:28:0f:5a:6f:0b:f1:bb:34:6f:
ab:25:30:de:80:6c:1f:0c:c0:25:72:6c:cd:25:ff:
bc:2e:3b:c9:fb:eb:fa:35:ea:d7:13:ee:53:9e:ad:
f3:1d:52:4d:99:40:94:2e:56:a8:7a:d8:fa:87:e6:
58:56:32:c2:f4:26:66:97:61:cd:88:86:af:77:8f:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:2B:90:C7:9E:F4:2B:C0:1A:4B:09:6E:17:86:99:2B:21:1C:F5
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GwErkMee9CvAGksJbheGmSshHPU.roa
sbgp-ipAddrBlock: critical
IPv4:
153.120.216.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:00:2d:4d:1f:8c:42:5f:54:bf:cc:60:85:22:e4:81:b7:9c:
e6:27:be:ee:df:83:fe:f7:76:a1:fe:02:4f:c3:c8:d8:80:08:
f0:6e:7e:8a:64:96:5c:da:00:f5:37:e8:0e:6f:78:45:b1:56:
ab:55:c0:8d:d3:c0:09:ae:f1:d9:a5:7e:a4:1c:7b:11:74:34:
55:88:e3:54:4e:ea:e4:8c:5d:9d:93:34:49:3a:95:7d:70:8d:
8d:61:9e:4e:d4:88:3d:a2:8d:e0:e6:40:9b:3d:0a:d4:83:c6:
ca:4b:e8:ce:b5:5f:25:15:6a:9e:f9:62:2d:33:bf:d5:cc:23:
e3:ed:8e:ee:97:49:0a:ca:56:8d:a0:2c:99:00:b1:3e:c1:a1:
ca:f5:ca:75:10:bd:2c:67:d2:dd:9d:49:2c:73:56:6b:fc:06:
31:53:7e:22:bd:1d:2d:3f:d7:ac:7b:8e:f9:33:25:d5:05:fe:
fb:77:af:ff:25:a9:ec:aa:5c:d9:a2:93:f6:ef:e3:ae:16:03:
d0:d5:49:56:cf:1c:44:21:5b:56:51:49:95:fe:78:be:25:fc:
28:d0:e8:0c:33:03:58:8a:36:22:4b:a2:40:35:cf:75:b9:40:
86:42:12:63:6c:b5:f1:30:e3:de:79:59:a7:9e:e3:87:d2:36:
d6:9f:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:48 2026 by rpki-client