
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xE4aLlR_kuPXO3paTRaEA1YGqNk.roa
File: xE4aLlR_kuPXO3paTRaEA1YGqNk.roa (raw, json)
Hash identifier: c/Z6KND829ZyVq3/epd+GtKEAwBkaRG2j4F2SGfRcwg=
Subject key identifier: C4:4E:1A:2E:54:7F:92:E3:D7:3B:7A:5A:4D:16:84:03:56:06:A8:D9
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 04EE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xE4aLlR_kuPXO3paTRaEA1YGqNk.roa
Signing time: Tue 31 Mar 2026 08:19:07 +0000
ROA not before: Tue 31 Mar 2026 08:19:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 36.52.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1262 (0x4ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:19:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C44E1A2E547F92E3D73B7A5A4D1684035606A8D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:d0:a3:02:09:ba:ad:23:39:dd:be:4b:2b:
92:87:b9:77:18:de:5a:04:a5:b9:72:38:52:22:68:
57:a0:b8:0d:bb:c3:64:fa:5d:69:0f:86:22:24:52:
cf:44:8f:98:33:36:79:ea:ae:97:10:01:d3:cf:64:
1b:db:d7:8d:cb:70:39:00:f8:39:41:b5:d5:12:f8:
83:06:cd:bf:b5:31:63:d2:ba:48:12:ba:21:75:ee:
cd:64:f8:27:00:80:4b:e6:0c:81:6a:bf:dc:a2:5c:
1e:92:b1:60:ea:44:5d:79:49:c0:ea:86:17:b6:3a:
1f:c1:bc:ba:07:41:fc:2b:20:5e:9f:b5:f2:55:81:
ca:ed:6e:d3:e2:a3:2d:97:92:24:ab:0c:76:f2:bb:
ca:fe:61:c4:14:64:d7:c3:4e:0c:01:c8:58:59:09:
0b:d0:b5:0e:58:8d:9d:06:86:19:9d:e5:aa:75:ad:
b2:16:0e:4e:f1:27:e3:92:da:3a:e0:76:93:b3:ff:
44:f2:41:46:6e:b2:24:6b:86:06:70:16:f7:d8:2d:
01:7b:36:36:d6:c9:f2:8d:c3:b4:1a:73:61:65:0c:
52:22:75:29:8b:58:2d:46:11:f0:47:9f:3b:f4:56:
40:29:6a:62:a1:5d:fb:dd:38:fc:87:6c:d7:03:cf:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:1A:2E:54:7F:92:E3:D7:3B:7A:5A:4D:16:84:03:56:06:A8:D9
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xE4aLlR_kuPXO3paTRaEA1YGqNk.roa
sbgp-ipAddrBlock: critical
IPv4:
36.52.26.0/23
Signature Algorithm: sha256WithRSAEncryption
95:e0:b8:ed:da:75:a7:df:eb:fc:5f:0d:08:91:56:1b:ac:06:
ce:58:25:1b:45:a6:5f:8b:e4:aa:77:a1:45:52:27:ed:17:e6:
9b:27:95:17:22:92:b9:8c:73:4e:b6:37:f5:82:00:84:98:02:
d1:a1:fe:de:1d:fa:39:9b:82:81:fd:b7:df:87:f9:43:08:43:
30:c5:6a:6e:2b:0f:66:3c:f3:44:25:2c:4c:ba:87:fe:a1:e8:
ca:db:b1:ab:8c:2e:ad:87:6a:7a:48:a1:37:52:09:e5:98:72:
84:15:2b:c5:09:93:54:0d:ba:bd:b7:b8:dd:aa:2d:f6:3a:e7:
13:18:87:00:17:25:4f:05:33:39:03:99:39:e1:fb:0a:62:94:
f5:f0:19:6f:9a:1b:5d:2c:50:c6:8a:c2:e1:58:19:02:66:70:
4e:61:35:b6:6a:2e:ef:ec:fe:71:2a:07:01:4f:f3:5f:a5:bc:
7e:21:3b:8f:42:5b:52:02:ce:f4:67:b6:be:73:57:d6:d3:55:
ad:bc:c7:14:07:3a:cc:71:61:14:49:52:99:b5:23:ab:6a:83:
09:6c:80:e9:b4:30:d9:68:8e:99:5a:bc:6b:14:e7:b6:f4:c1:
5f:2b:85:fa:fc:ca:4e:50:66:7c:85:f3:09:90:b9:2e:ef:66:
58:28:ad:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:58 2026 by rpki-client