
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xn3oy7dCn7MnBSrfTGF6-rbbZeA.roa
File: Xn3oy7dCn7MnBSrfTGF6-rbbZeA.roa (raw, json)
Hash identifier: fSZ/LB1qoVPgLuHKkDH3Fqg/G5rRGBsNjZZUpeuZyK4=
Subject key identifier: 5E:7D:E8:CB:B7:42:9F:B3:27:05:2A:DF:4C:61:7A:FA:B6:DB:65:E0
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 051C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xn3oy7dCn7MnBSrfTGF6-rbbZeA.roa
Signing time: Tue 31 Mar 2026 08:19:27 +0000
ROA not before: Tue 31 Mar 2026 08:19:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 27.135.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:19:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5E7DE8CBB7429FB327052ADF4C617AFAB6DB65E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:0c:4e:b8:d3:f7:00:b0:3a:c3:66:f5:e7:
15:5e:35:7d:a0:74:a3:9d:20:20:8d:b2:1a:5b:c1:
50:09:94:61:df:e3:0f:d3:e0:bd:29:0c:7a:0c:cb:
fb:75:4f:94:8d:4c:d8:c7:84:30:49:c8:20:06:d1:
74:22:03:ea:da:3c:27:fe:f4:7c:f9:9f:59:68:e2:
54:16:de:24:eb:f7:0b:3c:c7:e4:f6:c3:82:95:07:
88:27:57:1b:06:05:37:13:b3:5d:ac:c4:51:06:cb:
09:83:90:72:10:cb:8b:c5:84:a1:4b:fe:90:76:71:
5b:a4:90:71:a5:64:0f:e1:0d:d6:81:76:f5:7a:6e:
7e:d2:c8:0a:86:78:80:7d:56:b1:8d:83:6b:ce:d0:
6d:af:39:96:af:43:7b:06:41:49:50:6d:e9:34:d9:
3a:19:80:4e:b5:5d:2f:6c:b7:9b:7c:a9:44:c2:e9:
fe:22:b3:f0:ea:27:43:90:05:4f:21:17:09:86:af:
61:2d:6f:4a:15:1b:da:0d:42:ba:0a:03:9c:1a:c1:
c8:00:32:f7:ee:a8:b5:2c:4b:db:6a:41:63:10:88:
e5:96:9f:87:ee:53:67:61:e4:b3:a8:2d:52:37:92:
58:ac:df:76:6a:d6:2e:57:70:86:54:cd:dd:73:05:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7D:E8:CB:B7:42:9F:B3:27:05:2A:DF:4C:61:7A:FA:B6:DB:65:E0
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xn3oy7dCn7MnBSrfTGF6-rbbZeA.roa
sbgp-ipAddrBlock: critical
IPv4:
27.135.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:23:5e:ed:f6:bc:cd:d8:29:ba:93:fd:bf:c1:86:ee:a1:ec:
87:ba:cb:75:54:89:31:b0:8c:12:a3:88:f6:81:bf:e1:a9:89:
ab:c5:54:96:90:21:3c:3e:b5:c6:bb:31:29:d7:9a:64:6a:91:
9e:6c:88:d3:d8:0e:aa:ac:4b:8f:ea:62:1a:18:32:79:07:ab:
ae:fa:ff:11:70:9a:0c:d1:4b:23:41:0d:2f:cb:69:66:6f:58:
16:4e:76:ab:35:2e:43:cf:16:fc:41:d0:d7:3f:b3:e2:ef:88:
ce:bc:4f:e9:43:9a:ad:da:ba:99:51:6b:2f:ab:9a:46:c4:64:
1c:f9:7f:ef:69:4d:29:5a:5b:3b:79:65:e4:77:71:4e:f9:d4:
80:d8:83:5e:b3:a1:46:12:4c:5e:81:0a:5e:9f:d0:bf:37:2c:
e6:d8:ea:97:17:e8:0e:21:d1:fd:c4:76:db:dc:b2:02:b5:e1:
bf:0f:47:4a:f9:71:e9:45:87:51:b9:eb:df:bf:6b:17:01:8f:
d1:6c:a4:29:f7:5c:2d:37:90:4f:ed:8e:c6:01:c4:ab:fe:7d:
a4:6b:dd:a6:f0:10:90:d3:16:40:f8:f4:41:29:fb:58:92:04:
86:e0:f8:0e:05:ad:e2:4f:d6:eb:dc:18:6c:eb:c1:f4:27:54:
f5:35:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:28 2026 by rpki-client