
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xg9siHfuwKz2nxK8UPmKeSs2PIg.roa
File: Xg9siHfuwKz2nxK8UPmKeSs2PIg.roa (raw, json)
Hash identifier: 229MPz+vPHm5ee0875R7uJ1WC4KCba2XpG4d64wU2BI=
Subject key identifier: 5E:0F:6C:88:77:EE:C0:AC:F6:9F:12:BC:50:F9:8A:79:2B:36:3C:88
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 04FD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xg9siHfuwKz2nxK8UPmKeSs2PIg.roa
Signing time: Tue 31 Mar 2026 08:19:14 +0000
ROA not before: Tue 31 Mar 2026 08:19:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 27.134.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:19:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5E0F6C8877EEC0ACF69F12BC50F98A792B363C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:aa:4a:66:1b:cd:54:28:d4:c5:35:95:59:
d2:d8:6d:4d:75:6d:b5:f8:08:9a:5d:96:9e:09:91:
e5:98:b0:ca:04:3f:25:5c:07:bc:f1:57:6f:f8:69:
f4:29:65:09:62:18:f4:64:6b:fb:66:21:88:3d:cd:
33:e9:cb:51:4a:a3:b8:b2:b9:22:e9:5a:16:aa:85:
51:3a:fd:cb:c0:14:b2:1a:f7:9c:fe:d4:84:3f:83:
d8:74:1c:a6:b0:e7:76:d4:5c:49:2e:fa:54:65:74:
cb:d4:3e:4a:dc:3d:fc:66:d7:ee:aa:7d:0a:13:2e:
ca:b3:46:09:e6:a6:6e:4f:a1:0c:90:c4:de:d7:2b:
f1:04:60:b3:7f:f0:58:e2:6f:af:7d:fd:e7:44:b4:
e6:31:73:2c:6b:60:e1:26:34:4c:f6:66:14:db:05:
f7:a4:f9:ca:f2:05:73:67:8a:07:d2:2c:cb:19:d2:
b8:ed:f3:be:1a:32:6e:a0:3c:11:7a:99:c1:45:99:
c5:26:a6:c3:76:94:59:02:3c:ce:07:c5:88:af:80:
1e:84:a6:b5:25:62:ee:7c:22:02:3b:c0:26:9f:c3:
28:bf:79:7e:eb:fa:ad:42:11:24:cd:84:2b:7c:db:
b3:82:5e:c7:bf:a6:5c:a9:fa:e4:ad:04:58:4a:74:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0F:6C:88:77:EE:C0:AC:F6:9F:12:BC:50:F9:8A:79:2B:36:3C:88
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xg9siHfuwKz2nxK8UPmKeSs2PIg.roa
sbgp-ipAddrBlock: critical
IPv4:
27.134.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:ed:a1:b5:65:30:d4:77:6c:1b:ba:e6:fe:60:35:15:9f:06:
b0:3d:d3:26:40:a6:d1:b1:11:10:17:76:aa:62:9c:70:b0:5b:
74:a4:1e:ff:a3:e8:a7:04:20:ee:89:51:6d:ff:fc:ce:63:ce:
22:67:9c:82:29:ff:b1:b5:01:1f:c1:db:d2:34:3b:8a:7d:93:
b4:6d:ed:e0:34:d4:6d:6f:77:41:7c:09:a4:96:17:8b:9b:98:
bc:a7:d4:7b:8c:d0:40:b2:bf:1d:6a:50:04:e2:93:55:85:b4:
75:a6:c6:9b:3d:67:93:7c:13:44:2e:11:00:e5:59:1c:ef:cb:
53:96:5d:11:40:67:b6:cd:eb:23:7b:57:cb:de:55:2b:86:96:
cd:92:b8:27:6b:b5:36:1c:3a:54:55:fd:b4:38:b5:39:f1:95:
93:19:38:12:8d:9d:ef:17:ac:a2:e7:d8:a5:3e:38:11:fa:ab:
a1:f7:3c:e4:e5:a3:b8:9c:e1:45:59:bf:88:b4:93:be:fb:c1:
23:b3:9f:3c:40:bf:61:dd:95:68:a4:61:c2:b9:df:7a:e5:7b:
c2:9e:68:8c:fd:b3:4a:3a:89:e8:24:bb:e9:8d:85:cf:35:e9:
92:e2:09:22:e7:2b:cb:59:d6:3c:a2:85:ce:65:fe:5e:52:0b:
1e:fc:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:25 2026 by rpki-client