
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Km5HTHUcx09VoerD2JXxzGNHntY.roa
File: Km5HTHUcx09VoerD2JXxzGNHntY.roa (raw, json)
Hash identifier: zxwX4+NwnMkkuXo0lqi+1T+Bw8O/PgsQMZgibqHuYAg=
Subject key identifier: 2A:6E:47:4C:75:1C:C7:4F:55:A1:EA:C3:D8:95:F1:CC:63:47:9E:D6
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 05A6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Km5HTHUcx09VoerD2JXxzGNHntY.roa
Signing time: Tue 31 Mar 2026 08:20:34 +0000
ROA not before: Tue 31 Mar 2026 08:20:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4686
IP address blocks: 124.255.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:20:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2A6E474C751CC74F55A1EAC3D895F1CC63479ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:7f:f5:24:21:3c:7e:df:60:d2:52:94:f3:
a2:e6:c4:df:09:ca:87:45:d5:b0:14:c9:f9:69:22:
e9:b2:44:ac:32:64:09:bb:76:5a:ee:10:fa:e2:b8:
ba:b9:11:26:55:55:55:bb:71:9b:cf:10:39:ad:50:
cc:6f:64:13:de:ef:83:f6:a4:05:0e:ee:7f:0f:4e:
e8:28:e9:24:c8:99:61:49:98:3c:c1:d7:b3:db:81:
55:ae:86:a7:dc:95:7c:90:27:e4:4c:11:8c:67:9c:
89:9b:dc:34:ec:35:aa:b7:cf:b2:86:18:8b:b4:b6:
06:a9:8e:fa:be:6c:e8:81:a5:92:33:a7:39:a2:d7:
80:7d:f7:0a:52:1c:ac:e8:c2:21:a3:15:19:96:03:
58:33:3a:c5:6e:2d:6c:6c:cd:e2:dc:62:91:c1:e6:
71:3a:7c:ec:a0:55:17:0a:b8:dc:76:c9:03:ba:af:
fd:a1:97:8a:db:dc:d9:c0:57:81:a6:51:a0:d4:4e:
1e:63:0c:b9:49:f2:c2:5d:fa:07:7a:24:1c:f6:22:
76:67:51:ff:c4:a4:f8:76:35:b7:89:3e:34:a0:c2:
b7:99:7c:25:10:b7:0c:2b:99:90:01:19:f9:d5:d2:
90:51:db:74:0e:28:c3:8d:08:21:59:fd:e7:f3:67:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:47:4C:75:1C:C7:4F:55:A1:EA:C3:D8:95:F1:CC:63:47:9E:D6
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Km5HTHUcx09VoerD2JXxzGNHntY.roa
sbgp-ipAddrBlock: critical
IPv4:
124.255.32.0/20
Signature Algorithm: sha256WithRSAEncryption
64:7c:bd:b4:27:17:1f:41:cb:a1:bc:7f:ed:0b:dd:f7:b5:b7:
f4:26:6c:79:b7:31:b8:8f:d1:3f:9c:76:9c:90:03:a7:6c:12:
b6:70:8c:f7:cc:f6:31:07:86:b6:7a:2d:2e:67:f4:b6:75:b3:
d0:a9:ab:75:53:eb:f8:a7:f6:1d:21:45:f5:9f:de:db:68:15:
26:11:e0:0d:f5:6e:9f:ed:38:21:2e:09:7c:6d:69:ec:da:a2:
ad:57:97:da:f8:7d:64:87:0c:d9:9e:48:c0:d3:bd:b2:ee:ce:
86:14:12:fc:5b:cb:43:a1:be:84:cb:e7:f8:ae:66:ec:bf:32:
57:23:d5:5c:0e:18:0f:cb:ed:a0:30:d6:fd:c2:37:f1:ce:5d:
2e:1f:8b:0d:a5:67:03:7c:33:a2:a5:2e:a0:e3:0f:39:31:95:
19:2f:e6:90:16:dc:bc:77:02:79:5b:e1:86:b0:5f:e5:4e:48:
6a:99:22:08:a4:41:ec:ba:94:76:1a:14:13:76:95:1e:11:f4:
64:fb:52:2a:42:b2:e4:b2:74:49:98:43:2b:58:53:ec:7a:a9:
7a:7e:aa:cb:8c:47:82:1f:7b:72:7d:39:7d:e5:09:d0:54:84:
36:8b:9e:22:fc:b4:0a:9b:6c:60:0d:46:cf:02:fb:2b:4e:ce:
b7:89:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:42 2026 by rpki-client