
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/osL9wWFu_t_fpKeiO5s1usoiEwI.roa
File: osL9wWFu_t_fpKeiO5s1usoiEwI.roa (raw, json)
Hash identifier: TBHKsGWZ6SZ8bqW1hg9mDJXEqAT/Ouh5C6gmXSRtYig=
Subject key identifier: A2:C2:FD:C1:61:6E:FE:DF:DF:A4:A7:A2:3B:9B:35:BA:CA:22:13:02
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0600
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/osL9wWFu_t_fpKeiO5s1usoiEwI.roa
Signing time: Tue 31 Mar 2026 08:21:18 +0000
ROA not before: Tue 31 Mar 2026 08:21:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 61.192.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:21:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A2C2FDC1616EFEDFDFA4A7A23B9B35BACA221302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:09:87:39:0c:d6:19:91:3c:36:3c:80:97:
b1:3c:3e:fc:dd:32:2c:2c:70:8e:5d:97:18:4d:75:
44:95:a3:bd:cd:86:d6:30:82:b2:b5:3e:b2:a3:3d:
69:ca:c4:1d:7a:35:93:d1:1e:cd:5c:32:ec:fe:60:
09:0e:07:53:a0:a3:11:84:fc:db:94:36:66:b0:48:
6c:38:f0:e7:40:ba:48:1d:cb:32:e4:7d:84:4c:62:
af:11:c5:e8:ba:0a:e7:7d:bf:90:13:4b:dc:38:d2:
8f:76:b0:58:6d:23:f6:15:9d:e6:a9:18:0b:09:c1:
32:2f:f9:ea:ea:45:03:14:1b:e7:f4:ad:2b:f6:bf:
c3:33:1a:6d:5d:8c:72:b0:9f:c2:76:4f:dc:4d:8c:
67:f1:8b:8a:fd:bd:42:31:c7:78:f2:d4:61:81:e7:
9c:6a:aa:c4:6e:9c:ba:da:6a:12:71:8e:dd:80:1c:
b2:f6:a5:b0:55:14:cf:84:83:65:fe:d3:d4:6b:03:
02:d0:cc:a0:b0:86:75:97:78:c5:25:ad:d0:26:0e:
9a:07:90:f4:04:7c:71:74:cc:7b:4e:56:3f:23:a2:
dd:0d:d9:70:2e:6c:a9:ea:b9:b4:bc:5a:9e:32:ec:
9a:9b:c5:e8:83:06:12:36:01:6a:4d:0e:44:69:88:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C2:FD:C1:61:6E:FE:DF:DF:A4:A7:A2:3B:9B:35:BA:CA:22:13:02
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/osL9wWFu_t_fpKeiO5s1usoiEwI.roa
sbgp-ipAddrBlock: critical
IPv4:
61.192.220.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:b6:bf:c7:c3:68:27:6b:12:7b:d5:0a:fd:c4:67:7c:42:ad:
3a:06:a5:68:be:f8:02:c2:09:96:ff:92:2b:54:dc:7e:ad:1f:
0d:61:48:14:2d:31:4a:1d:ee:8e:90:0b:09:30:37:10:ce:28:
0c:3c:04:54:b7:aa:d8:e9:75:72:2c:41:67:a7:cf:3d:75:e0:
1d:f8:04:22:aa:53:bb:71:60:16:2e:6d:c1:07:24:cd:bc:71:
e8:7b:70:80:ce:33:5b:bc:86:c7:90:57:b3:e1:7f:2a:84:0c:
c5:eb:94:70:b3:d6:9b:3e:2b:c1:2d:9e:85:14:1a:3e:3b:1f:
57:86:cf:7a:df:83:d1:9d:5e:b8:d1:5f:1a:0b:ff:a3:52:27:
a1:18:43:94:fb:8c:00:36:36:16:25:78:2c:de:2d:e5:a5:27:
25:58:4d:58:9c:0b:da:55:f7:b5:a4:f6:2d:d2:b4:23:60:da:
d4:ee:8c:f2:49:20:3b:db:d8:8b:ff:3c:87:60:c3:43:b5:83:
67:7f:da:72:ac:90:b9:3c:ac:7d:03:5a:f7:de:40:95:0b:8f:
bf:2a:17:4b:fd:fa:0d:cb:84:5d:eb:fe:57:71:de:c9:62:bf:
51:c3:88:be:9c:de:95:b1:06:53:0f:6d:ad:dc:e6:1b:62:5f:
30:3e:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:32 2026 by rpki-client