
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/X-rYoRED2K2nP9gDrLA5XrwRWqI.roa
File: X-rYoRED2K2nP9gDrLA5XrwRWqI.roa (raw, json)
Hash identifier: g7MM13l3J5veSYnUCZfdTEgvT5hzngdr+DPTz5+SyLs=
Subject key identifier: 5F:EA:D8:A1:11:03:D8:AD:A7:3F:D8:03:AC:B0:39:5E:BC:11:5A:A2
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 04E0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/X-rYoRED2K2nP9gDrLA5XrwRWqI.roa
Signing time: Tue 31 Mar 2026 08:18:57 +0000
ROA not before: Tue 31 Mar 2026 08:18:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 121.50.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:18:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5FEAD8A11103D8ADA73FD803ACB0395EBC115AA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:bc:c4:56:d9:e6:9b:fe:2e:62:4c:fc:69:
d5:ea:08:32:84:1f:8c:c8:46:26:5e:df:96:5d:31:
51:11:5a:98:f1:57:45:30:e8:bb:70:c9:53:8d:b5:
c8:8b:c5:0c:c8:e8:d8:f8:7f:05:c4:14:d1:ee:ce:
50:42:e6:fc:ba:ef:56:6b:98:7f:6f:98:2a:a6:53:
21:06:9e:59:4d:48:27:d4:26:5b:0a:14:58:5f:f3:
6c:1d:5e:5d:6a:58:af:50:58:ac:d4:e6:ce:d4:e2:
c7:93:92:22:81:3d:2a:6e:d8:21:fd:d7:78:44:12:
c8:10:5f:cd:96:b2:e0:00:fc:f0:26:99:45:86:a2:
ef:0b:19:f7:7a:2a:9e:bc:f6:20:b2:4a:04:36:2b:
f1:62:da:54:07:ee:d9:31:05:08:fd:76:49:ce:c6:
7e:b6:1b:93:96:97:cf:4d:ec:db:04:b6:c3:cf:ff:
db:e9:79:9d:89:95:8f:39:be:c5:c4:de:1a:f4:b3:
61:c4:ec:47:f5:12:3d:67:67:e3:6c:5d:5b:1d:38:
89:74:40:22:e2:ce:21:c3:0c:2a:63:97:9e:68:46:
a5:ec:d9:9e:44:42:bc:fd:e6:90:59:30:82:7a:cf:
ba:e8:54:52:6f:c4:ab:24:6b:e5:3f:8b:e1:02:11:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EA:D8:A1:11:03:D8:AD:A7:3F:D8:03:AC:B0:39:5E:BC:11:5A:A2
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/X-rYoRED2K2nP9gDrLA5XrwRWqI.roa
sbgp-ipAddrBlock: critical
IPv4:
121.50.152.0/21
Signature Algorithm: sha256WithRSAEncryption
01:a9:ac:b9:27:80:36:b2:ee:5b:1d:d4:27:4a:4d:4a:3c:d6:
4a:25:ba:82:db:55:eb:1d:b8:eb:1f:94:47:35:2a:33:94:be:
5e:68:7a:be:31:3c:20:34:51:f6:71:18:09:b5:9d:2f:75:ed:
38:5a:e5:0c:74:92:e4:83:81:17:2c:1c:b7:49:74:43:16:a6:
2f:49:d6:92:c1:46:8c:2e:1d:c2:f0:c2:83:d6:4e:e7:ef:e3:
79:39:03:7d:cc:a4:2a:32:49:42:bb:38:54:47:e0:04:23:03:
d7:73:3e:77:c0:85:bf:61:05:c5:e7:a1:32:d3:0c:60:e7:e6:
cf:37:23:be:47:7b:b1:09:a9:2e:38:c9:08:55:ae:2f:20:ba:
1f:3e:ff:fb:93:43:c0:0d:e8:0c:e4:fe:ce:be:b9:81:a1:ea:
9f:03:e9:d1:93:8f:0b:85:6b:81:91:7d:d5:80:83:d9:b4:45:
57:7d:eb:a9:bc:2a:e6:6c:f0:33:db:c3:8c:2b:ab:ce:e6:dc:
b1:11:fe:e1:62:52:c2:e5:af:21:fb:97:f2:99:93:27:fd:f6:
0d:b1:34:d1:44:8b:e4:b8:1c:65:0d:19:e6:a5:64:d3:df:e4:
21:a3:b1:09:c2:7f:b4:6c:59:fd:e9:8e:4e:41:2d:58:41:7a:
52:71:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:35 2026 by rpki-client