
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhEdbzrL0LIp-Q_nzv7AsFKxLPg.roa
File: yhEdbzrL0LIp-Q_nzv7AsFKxLPg.roa (raw, json)
Hash identifier: YTmoanBj8fEvo9pGJ1lhm7b4ueNOi8Ues7+Bn2KQLIM=
Subject key identifier: CA:11:1D:6F:3A:CB:D0:B2:29:F9:0F:E7:CE:FE:C0:B0:52:B1:2C:F8
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 04D8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhEdbzrL0LIp-Q_nzv7AsFKxLPg.roa
Signing time: Tue 31 Mar 2026 08:18:54 +0000
ROA not before: Tue 31 Mar 2026 08:18:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10013
IP address blocks: 27.132.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:18:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CA111D6F3ACBD0B229F90FE7CEFEC0B052B12CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:02:f9:d1:da:ad:62:9b:3c:47:fb:83:e4:
6f:6a:68:7c:55:cd:f1:44:75:9a:b8:8d:b7:d0:7f:
0b:dd:e0:85:3a:2f:e3:07:f2:56:1c:66:70:3e:9d:
35:ed:5c:80:e4:cd:03:c9:9d:20:0f:1c:3b:81:ea:
ea:23:c0:8d:4d:02:f4:8d:1c:20:2c:12:43:36:75:
3a:e2:98:21:4f:07:e5:55:46:51:25:8f:ca:83:ca:
53:80:67:da:21:be:00:d0:4e:3f:10:99:2b:f0:53:
35:54:75:87:c2:5b:1a:72:dc:9f:b0:68:63:c7:b9:
9a:45:42:c1:20:50:25:e1:2a:b0:9a:77:f2:8d:36:
b1:c2:c0:15:1f:ba:d8:e7:38:4d:5c:37:ab:f0:cc:
e2:e9:97:e5:5e:be:f8:f4:e4:d9:f2:1c:07:aa:c4:
18:be:5a:dd:3f:69:6f:90:06:f6:65:4a:d9:e8:b7:
99:fe:af:8a:d7:f1:34:81:e9:b7:bf:2e:f3:11:77:
22:b2:a1:ad:e6:98:6d:89:6e:7f:93:d3:76:47:93:
6c:83:5a:2e:1a:ef:cd:bf:67:cf:2d:60:69:bc:3b:
87:3e:f1:0c:55:38:e6:87:dc:8e:c0:5b:df:48:61:
18:3e:e5:bd:97:48:e9:7e:df:8d:7a:94:66:5b:4e:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:11:1D:6F:3A:CB:D0:B2:29:F9:0F:E7:CE:FE:C0:B0:52:B1:2C:F8
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yhEdbzrL0LIp-Q_nzv7AsFKxLPg.roa
sbgp-ipAddrBlock: critical
IPv4:
27.132.192.0/18
Signature Algorithm: sha256WithRSAEncryption
96:07:3e:91:1f:be:fd:fe:39:e9:a0:67:79:b5:55:19:b6:f8:
4d:d7:cd:14:c7:33:f8:70:64:23:08:c8:23:e5:e0:d7:9e:25:
88:2d:ba:9e:e3:0b:75:49:af:69:20:d6:fc:d2:25:2e:7d:32:
5b:ee:f0:b6:fc:63:da:86:85:5e:39:86:2b:10:4c:9e:fc:6a:
31:c6:85:ae:9c:85:e2:bf:f0:6c:4b:16:e6:33:d5:b6:ea:cb:
e4:b5:69:75:ba:db:97:ee:ed:02:e4:f0:08:cf:22:51:6d:95:
6b:a9:5b:3e:a3:17:3e:a0:be:db:36:c7:81:f3:79:44:14:02:
41:3d:42:cd:3f:13:db:d7:09:38:1e:a6:3b:63:a3:8a:10:7f:
9f:1b:f2:c1:fd:52:f4:3c:97:1d:20:ad:f3:76:ba:06:8a:de:
c0:7e:e1:cb:a6:e7:28:ea:25:b7:c3:ae:48:24:9a:d7:3a:6a:
7a:b0:be:44:2e:c9:9b:12:5b:4c:d0:93:a0:60:bc:b6:b7:59:
b2:18:54:7f:a9:6e:3c:eb:0d:a6:ac:8a:5e:7f:b0:cd:d4:85:
88:58:ed:a5:cd:69:63:d4:ad:aa:32:37:97:02:11:bc:54:d4:
7f:92:da:f0:98:7e:62:34:b8:9c:5f:29:79:46:0b:8a:85:5a:
6f:10:76:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:08 2026 by rpki-client