
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/upl3kfMHYVOOs8PE74jBpSRdQfE.roa
File: upl3kfMHYVOOs8PE74jBpSRdQfE.roa (raw, json)
Hash identifier: zwXroo9cw0eVNwy04SmWNexsDICMyMG/XrcS6/9dB8g=
Subject key identifier: BA:99:77:91:F3:07:61:53:8E:B3:C3:C4:EF:88:C1:A5:24:5D:41:F1
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 05F9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/upl3kfMHYVOOs8PE74jBpSRdQfE.roa
Signing time: Tue 31 Mar 2026 08:21:15 +0000
ROA not before: Tue 31 Mar 2026 08:21:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 61.192.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:21:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BA997791F30761538EB3C3C4EF88C1A5245D41F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:49:62:c4:24:64:69:fc:f4:70:9b:aa:ed:
8d:4e:35:17:e7:37:5f:8c:a0:6a:b8:16:5e:60:c5:
be:4e:08:2b:1d:6f:47:f2:fb:24:8f:9a:56:ce:38:
a3:3b:29:0d:92:e2:87:f0:c1:f9:9d:bf:fd:31:66:
99:fa:a7:1b:f3:0c:5b:ca:7f:0c:3e:17:82:99:dc:
e3:7a:19:6e:0f:bd:33:9f:3e:4d:8e:2f:c8:9d:c0:
1f:76:d7:34:a4:98:fd:d6:64:03:06:5a:8e:d1:67:
96:e9:8b:10:12:22:9b:85:e8:62:a9:ea:ee:cd:a7:
7c:2a:75:1b:05:89:07:66:66:b8:01:d2:97:ad:ec:
af:4d:c7:91:e8:66:87:8d:02:08:de:2b:2a:e9:9b:
d0:cf:69:62:6f:66:a7:c7:23:ba:db:8e:f9:67:cd:
83:91:89:ee:db:be:fa:e3:c8:a5:6d:e1:04:52:a1:
51:06:aa:a4:e5:aa:15:31:42:89:16:12:c5:b1:6e:
91:09:95:d3:4e:89:06:38:40:19:6d:17:57:ea:76:
2a:87:a7:27:08:02:dd:fc:df:9d:ea:44:e0:da:e5:
76:cd:f8:69:ef:23:50:87:e1:1d:77:8f:50:29:ea:
c2:f4:21:4e:be:04:b7:e4:57:d1:b1:ff:db:5f:c6:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:99:77:91:F3:07:61:53:8E:B3:C3:C4:EF:88:C1:A5:24:5D:41:F1
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/upl3kfMHYVOOs8PE74jBpSRdQfE.roa
sbgp-ipAddrBlock: critical
IPv4:
61.192.162.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:ef:11:d8:cd:85:ca:42:9d:6f:44:99:be:1a:a9:8a:b6:2a:
00:12:b0:3b:42:fe:a3:b7:2b:f7:1d:4e:32:ba:d2:f3:70:6a:
10:a5:c2:cc:07:f5:ba:33:0a:32:4c:ef:69:cd:aa:35:dc:f8:
59:88:1f:de:d6:8d:1e:f8:35:f6:7c:d9:83:48:5f:48:80:84:
1e:1e:55:b8:96:83:e7:f6:0d:d0:e3:b1:ed:a6:91:d1:8d:17:
64:39:e5:e1:e2:3a:df:07:2d:b0:b6:88:ad:70:fc:6b:f1:cb:
88:db:3c:8f:67:0d:55:37:e2:30:0c:e9:97:ac:d7:53:9f:05:
3a:d4:d1:bd:5d:07:7c:24:a3:db:03:a4:d1:34:d1:39:d3:c3:
02:85:ea:1c:13:70:14:98:a0:3e:16:55:4e:98:94:9b:5b:b8:
63:52:38:30:e7:40:d1:d1:ff:c8:e3:4b:b3:2f:46:36:f0:c4:
20:a8:28:63:78:9e:e3:f7:c6:bb:84:41:eb:db:62:17:f5:38:
29:6d:70:f0:ad:6d:7d:71:7f:4a:05:4f:c0:8e:58:8f:07:65:
c7:21:79:ef:15:0d:e7:9b:16:3c:43:cc:90:03:43:68:1e:21:
af:b2:2e:b0:df:4e:77:0c:92:d6:05:ad:53:7a:25:7a:f5:29:
32:3d:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:35 2026 by rpki-client