
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XQ4qAkK2kFzz7dqVvX6CySiykoU.roa
File: XQ4qAkK2kFzz7dqVvX6CySiykoU.roa (raw, json)
Hash identifier: e7UFrvHWJ+3yat3vR4xD06I+U+KcIizPpMBEbe10A/8=
Subject key identifier: 5D:0E:2A:02:42:B6:90:5C:F3:ED:DA:95:BD:7E:82:C9:28:B2:92:85
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0608
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XQ4qAkK2kFzz7dqVvX6CySiykoU.roa
Signing time: Tue 31 Mar 2026 08:21:21 +0000
ROA not before: Tue 31 Mar 2026 08:21:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 180.131.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1544 (0x608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:21:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5D0E2A0242B6905CF3EDDA95BD7E82C928B29285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:76:ac:34:1a:66:a1:6c:c1:ef:ec:9f:69:
91:5c:82:8c:8a:5d:0e:68:19:58:81:f3:fb:06:e3:
16:56:e5:91:6d:76:f3:e3:7d:1b:95:40:c9:04:26:
71:82:4f:63:c8:9c:e8:39:91:a0:74:7a:01:25:85:
ea:81:84:66:af:35:ed:90:0a:9b:47:e4:00:f6:a7:
95:5a:50:01:66:80:1f:93:00:35:18:56:57:bf:6a:
96:fd:26:2f:44:4c:40:45:e7:8f:69:c1:d4:06:ef:
c7:95:23:17:6d:02:a7:a2:8c:2b:55:b0:4f:03:95:
04:58:32:5f:42:e6:a2:9c:df:14:01:d1:72:92:84:
cc:d5:99:68:ac:5d:c5:03:21:03:d0:f9:5d:44:5f:
5d:49:b1:63:2c:5d:10:80:2a:5e:d5:bd:c5:48:1a:
10:91:c9:ff:c7:b7:9d:f3:ec:6c:84:ab:92:ba:30:
58:d1:5a:41:59:f7:07:1b:a2:41:d4:4c:ca:f3:89:
38:e7:ed:2c:62:2e:ab:6e:d6:65:9d:a8:be:fc:b3:
21:20:b0:7b:90:7a:e0:63:32:e8:01:26:f6:ab:d4:
3a:6c:e9:99:99:e9:4a:73:0c:3d:c0:f6:46:51:a9:
be:95:50:55:2e:ed:02:da:b2:16:51:c1:74:af:ec:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0E:2A:02:42:B6:90:5C:F3:ED:DA:95:BD:7E:82:C9:28:B2:92:85
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XQ4qAkK2kFzz7dqVvX6CySiykoU.roa
sbgp-ipAddrBlock: critical
IPv4:
180.131.109.0/24
Signature Algorithm: sha256WithRSAEncryption
43:57:96:f4:6e:5f:cd:f3:b0:b3:76:f9:c6:2c:61:f7:a1:91:
73:6c:99:e5:49:08:b8:91:9c:8f:c2:b7:a1:e8:ab:bd:36:06:
42:9c:d3:34:08:69:e0:04:c5:ea:69:09:f1:fa:2b:27:94:a9:
5d:6d:35:fc:c8:65:70:25:0f:1b:e9:09:82:72:fc:8d:53:62:
bb:7f:9e:0d:37:9d:fc:98:c0:55:1e:ab:fe:69:1f:e7:41:20:
6b:fa:fb:b7:b5:eb:3e:07:44:b2:f2:9a:91:9a:12:13:c1:69:
11:db:52:54:08:55:c9:ab:52:87:b3:cc:51:3b:31:fb:43:dd:
6a:37:00:e0:65:e5:4b:b9:46:a3:39:dd:11:60:4f:2f:1c:57:
fb:b4:79:2a:72:cb:d6:39:a6:d0:9b:88:e7:42:c1:8e:23:d1:
60:76:0c:08:3f:27:57:4c:2b:53:d2:9a:3d:05:33:a3:cd:0b:
65:13:33:37:5e:ae:45:0f:c3:52:b6:82:ad:2a:57:37:21:3c:
1c:d3:8d:b0:6f:53:8e:26:30:3e:f3:1a:ee:0b:58:ef:5d:a3:
c1:80:5b:c4:cd:a2:cd:7f:da:4d:27:bd:c9:17:91:f2:a0:13:
c0:c8:b9:59:f6:fa:af:f8:be:3a:35:02:2d:2f:1e:70:34:43:
83:40:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:23 2026 by rpki-client