
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/KnSBw3oBLdlLEcbALcEmmCFdcvs.roa
File: KnSBw3oBLdlLEcbALcEmmCFdcvs.roa (raw, json)
Hash identifier: HNiVXm2g/6FVF/ChT6clppU7pQ4gXFfzheFRCe66b7s=
Subject key identifier: 2A:74:81:C3:7A:01:2D:D9:4B:11:C6:C0:2D:C1:26:98:21:5D:72:FB
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0562
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KnSBw3oBLdlLEcbALcEmmCFdcvs.roa
Signing time: Tue 31 Mar 2026 08:19:57 +0000
ROA not before: Tue 31 Mar 2026 08:19:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 113.213.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1378 (0x562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:19:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2A7481C37A012DD94B11C6C02DC12698215D72FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:49:75:bc:55:b1:8c:ff:c9:50:3c:11:18:e7:
92:71:bb:1b:05:6d:65:c8:3a:6d:e4:85:0e:e1:0f:
9f:2d:34:2b:2e:48:b1:1f:a9:9b:0f:d0:30:5e:9c:
53:d4:52:e0:a3:d1:17:dc:1d:31:0c:90:a8:ac:f8:
15:ba:59:53:a2:70:14:17:f2:3e:da:93:c6:ea:46:
37:51:91:05:59:ad:e7:c7:96:f5:d6:ae:15:3f:1c:
a7:24:e4:25:a7:66:50:0c:49:ef:7e:dc:36:35:d9:
df:44:f8:47:53:24:79:64:08:ef:c7:a6:db:a2:b2:
8b:d2:81:d7:1f:67:a0:53:90:d0:06:81:74:4e:19:
44:94:6c:09:de:78:5f:02:8c:36:13:70:1a:44:7e:
b0:1c:db:16:dd:80:63:da:01:21:5d:45:c9:e7:5d:
0d:db:f6:6e:b0:81:dd:65:14:30:13:97:f8:0c:a9:
26:84:7d:fa:9e:55:a9:1b:58:3c:b7:f0:38:12:9c:
df:78:5c:b9:9e:66:3a:f6:08:d8:62:aa:a4:46:b8:
bb:81:b4:ee:72:91:b5:bd:93:8c:98:c1:b0:05:95:
64:03:0a:9d:c4:84:10:8d:2c:0d:02:f4:cc:45:4c:
db:ad:95:83:68:a7:e5:97:55:d9:c7:00:2e:3f:dc:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:81:C3:7A:01:2D:D9:4B:11:C6:C0:2D:C1:26:98:21:5D:72:FB
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KnSBw3oBLdlLEcbALcEmmCFdcvs.roa
sbgp-ipAddrBlock: critical
IPv4:
113.213.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:35:ae:07:2e:3a:ac:98:cf:0a:59:c1:02:23:13:27:ea:ff:
16:f2:4a:ac:f8:4e:92:af:90:7f:4b:b9:9d:03:12:4d:a4:75:
08:e4:66:e9:df:a1:46:14:a0:6a:25:ef:8d:b1:b9:a1:88:46:
97:d8:e3:d1:a6:c7:4d:6e:9d:8b:ed:31:7f:8b:57:2f:4e:55:
29:f7:1f:0c:87:e3:c5:16:41:a2:bf:37:e9:a2:71:f3:e6:37:
de:2b:38:55:06:36:c5:ed:50:f8:65:12:02:97:07:77:c7:86:
bc:18:b7:8c:5e:e7:c1:0c:cd:60:f9:a5:a6:6a:36:d2:5d:cf:
74:2b:01:80:18:89:63:7b:14:04:7a:df:7e:74:11:73:70:ff:
d9:17:49:84:a6:6b:5c:ea:96:ac:3d:5e:c9:39:1a:7f:27:51:
b0:79:1a:11:6c:9f:b6:b3:f0:cb:2b:22:38:4c:db:2a:e4:4c:
3f:07:93:e0:c7:3c:ef:7a:19:7d:05:82:ed:f7:bf:18:7b:49:
c5:f9:ad:86:bd:0e:7b:fc:28:4f:e7:7c:6c:3e:10:26:15:14:
80:b6:02:ee:f2:02:b5:09:b5:52:19:e3:bb:9c:07:7f:80:ff:
f6:d7:d2:c7:3f:72:8c:df:df:36:d8:99:4b:67:e3:80:27:77:
bb:19:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:08 2026 by rpki-client