
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XDIppLPIjVjcCuufRvqt0O4Sobg.roa
File: XDIppLPIjVjcCuufRvqt0O4Sobg.roa (raw, json)
Hash identifier: ECDW9hFXFOhqH6ePkwAs2iu6j6S6UmJv535gqRDlLJ8=
Subject key identifier: 5C:32:29:A4:B3:C8:8D:58:DC:0A:EB:9F:46:FA:AD:D0:EE:12:A1:B8
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0531
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XDIppLPIjVjcCuufRvqt0O4Sobg.roa
Signing time: Tue 31 Mar 2026 08:19:36 +0000
ROA not before: Tue 31 Mar 2026 08:19:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 59.156.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1329 (0x531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:19:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5C3229A4B3C88D58DC0AEB9F46FAADD0EE12A1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:bb:43:39:2f:0f:1f:4c:89:0d:7f:2d:79:fb:
eb:a5:b8:78:a7:e4:f9:87:31:ae:41:93:bc:f0:bc:
24:7d:77:27:c2:44:62:ae:57:c5:41:6b:fe:20:85:
37:94:15:b2:3c:3f:eb:0a:a5:db:9e:47:cb:99:71:
0d:bf:b5:4a:00:00:80:16:0f:c4:ef:e0:e8:14:68:
71:71:82:49:c1:ef:6c:75:f0:7e:72:11:4f:c3:80:
55:77:7d:bc:b6:f5:39:59:7e:44:5e:66:91:b8:0f:
d7:72:bd:e3:42:d5:f2:f5:cf:5e:eb:8f:39:9f:a0:
12:54:db:fc:ee:29:50:4d:fb:3c:ab:c5:94:7f:8d:
9f:d1:4d:f7:95:71:14:d3:06:0b:5b:81:48:5f:95:
78:55:74:12:db:25:05:6e:8c:ba:b1:0d:d5:b9:41:
21:f9:87:0e:7b:42:27:12:f5:76:89:a3:6f:b9:b5:
58:32:69:5d:ab:e3:e2:2d:72:2b:64:e6:1f:9d:54:
35:ee:00:f0:d2:9e:d8:13:96:22:ac:86:63:52:95:
33:27:bd:f2:80:b2:24:f7:c3:82:69:e8:8f:7e:62:
fa:2d:5b:02:9e:4b:f2:96:99:0e:2c:50:1d:6a:ce:
03:1a:27:27:e9:12:8d:ed:29:c7:55:9b:19:04:38:
30:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:29:A4:B3:C8:8D:58:DC:0A:EB:9F:46:FA:AD:D0:EE:12:A1:B8
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XDIppLPIjVjcCuufRvqt0O4Sobg.roa
sbgp-ipAddrBlock: critical
IPv4:
59.156.134.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a7:13:6b:af:23:27:a8:5e:d0:6a:67:f6:ad:31:e0:3c:cb:
01:79:55:32:97:24:28:18:be:2e:37:d6:83:a3:4b:0d:0f:19:
b1:22:a2:d8:66:38:6e:11:05:28:83:13:f7:a3:1b:6d:e2:8f:
3d:1b:66:e3:6e:c7:57:d5:3e:26:7f:97:c4:82:aa:3f:d6:a7:
50:fd:e3:4c:7d:88:ed:a8:b5:b5:b3:4b:97:ed:d1:25:ce:80:
3b:fa:49:8a:54:31:a6:90:a2:71:47:f2:d6:b9:ee:4a:f1:08:
92:3c:35:9e:c6:2e:37:01:af:da:26:1a:53:28:45:a5:37:95:
cf:30:3b:ab:b4:6c:5f:cc:3e:cf:e5:a3:d7:05:99:a0:f0:90:
2b:f2:f5:b2:00:e3:36:95:ad:03:8b:c1:49:e2:cb:b2:fe:5e:
bf:8e:7d:0f:fa:f1:e2:d9:90:d8:fd:af:01:7a:ef:ad:a9:f9:
02:cf:86:86:d5:2c:05:d9:58:ca:ee:dd:a3:f5:78:27:81:39:
cd:5f:57:4e:7e:d1:88:11:6b:2e:6e:2b:0b:78:e1:65:b2:bd:
ec:eb:d5:73:10:12:69:8e:ba:3d:19:7c:13:ca:6c:2d:82:d9:
a2:7a:8d:ce:51:92:df:c1:c8:e3:7a:e4:8a:fa:66:24:bf:57:
ff:81:cb:ca
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5MzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDMzIyOUE0QjNDODhE
NThEQzBBRUI5RjQ2RkFBREQwRUUxMkExQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5u0M5Lw8fTIkNfy15++uluHin5PmHMa5Bk7zwvCR9dyfCRGKu
V8VBa/4ghTeUFbI8P+sKpdueR8uZcQ2/tUoAAIAWD8Tv4OgUaHFxgknB72x18H5y
EU/DgFV3fby29TlZfkReZpG4D9dyveNC1fL1z17rjzmfoBJU2/zuKVBN+zyrxZR/
jZ/RTfeVcRTTBgtbgUhflXhVdBLbJQVujLqxDdW5QSH5hw57QicS9XaJo2+5tVgy
aV2r4+Itcitk5h+dVDXuAPDSntgTliKshmNSlTMnvfKAsiT3w4Jp6I9+YvotWwKe
S/KWmQ4sUB1qzgMaJyfpEo3tKcdVmxkEODCBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUXDIppLPIjVjcCuufRvqt0O4SobgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L1hESXBwTFBJalZqY0N1dWZSdnF0ME80U29iZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA7nIYwDQYJKoZIhvcNAQELBQADggEB
AHSnE2uvIyeoXtBqZ/atMeA8ywF5VTKXJCgYvi431oOjSw0PGbEiothmOG4RBSiD
E/ejG23ijz0bZuNux1fVPiZ/l8SCqj/Wp1D940x9iO2otbWzS5ft0SXOgDv6SYpU
MaaQonFH8ta57krxCJI8NZ7GLjcBr9omGlMoRaU3lc8wO6u0bF/MPs/lo9cFmaDw
kCvy9bIA4zaVrQOLwUniy7L+Xr+OfQ/68eLZkNj9rwF6762p+QLPhobVLAXZWMru
3aP1eCeBOc1fV05+0YgRay5uKwt44WWyvezr1XMQEmmOuj0ZfBPKbC2C2aJ6jc5R
kt/ByON65Ir6ZiS/V/+By8o=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:03 2026 by rpki-client