
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/8PHUT29ITTDaBj810xZVEe1XH0A.roa
File: 8PHUT29ITTDaBj810xZVEe1XH0A.roa (raw, json)
Hash identifier: OOXNsFYWJ6rAGustWYyH3eQWv/USMTKWJ0yYKAdieK8=
Subject key identifier: F0:F1:D4:4F:6F:48:4D:30:DA:06:3F:35:D3:16:55:11:ED:57:1F:40
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01F7
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8PHUT29ITTDaBj810xZVEe1XH0A.roa
Signing time: Tue 31 Mar 2026 07:40:03 +0000
ROA not before: Tue 31 Mar 2026 07:40:03 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 150.249.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:40:03 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F0F1D44F6F484D30DA063F35D3165511ED571F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7c:d9:03:60:5f:cc:32:66:cc:19:c9:c1:ae:
0d:17:68:19:a8:53:9a:07:4e:04:77:6d:e1:87:39:
b8:4a:84:2e:31:a8:61:c4:7c:72:f3:59:22:bc:d2:
c0:39:2a:16:53:44:fb:44:d3:f5:93:6c:53:ff:22:
08:ca:e8:e7:55:c0:67:14:5a:47:9f:5d:2a:41:ef:
04:4b:95:8f:c0:2e:31:db:ab:2c:a2:9d:36:a0:a2:
d5:60:03:93:71:b2:85:5c:75:4d:eb:d9:75:2d:4d:
2e:b0:b9:23:75:33:77:13:78:1a:97:83:ab:01:66:
fd:e0:2d:ef:2e:a7:93:d6:67:a9:2f:fe:7b:8e:08:
41:8e:1b:21:a7:69:a6:af:6e:5f:4f:8d:cc:0a:56:
7a:36:de:22:c5:d9:dc:d2:6d:88:4d:36:5d:28:aa:
b5:35:a6:3a:a2:88:15:28:9a:e6:fe:c7:f4:ab:b6:
1c:0a:36:61:86:e1:c0:8b:4a:0d:74:a8:58:b7:25:
6d:44:d8:81:8f:3c:fd:e2:55:f2:3e:d9:60:6b:83:
f4:4c:0b:65:a5:9b:1f:29:97:0a:6a:f5:0f:1d:1d:
e9:16:ad:cd:40:fc:cb:d4:f6:ec:88:66:a7:3f:9c:
d0:fe:92:2e:05:d8:db:1f:2e:13:e6:46:a5:47:29:
ca:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:D4:4F:6F:48:4D:30:DA:06:3F:35:D3:16:55:11:ED:57:1F:40
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8PHUT29ITTDaBj810xZVEe1XH0A.roa
sbgp-ipAddrBlock: critical
IPv4:
150.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:4a:f5:e6:b3:84:1c:1e:c8:7a:ee:fc:43:90:ff:43:3d:f6:
69:19:46:57:ae:1f:35:64:d1:57:08:c0:ec:6e:8e:c4:b9:95:
75:9c:ba:e9:ba:60:1a:77:58:a7:11:52:7f:86:cf:fb:ef:20:
d9:4a:65:76:33:fe:2d:9b:a3:5f:ae:12:2d:d4:5a:25:d3:2d:
46:c1:b4:1b:15:2b:c5:e6:2f:08:77:b4:6f:b4:54:62:f6:ac:
02:aa:a6:35:e1:03:96:2d:2c:51:37:21:4e:e6:80:85:cb:d0:
fa:44:67:bf:fe:6c:f3:2b:1e:83:af:45:16:26:4e:d7:4a:a7:
f0:f2:fe:81:8e:61:c4:3c:e1:d6:f0:fc:a7:4a:70:f7:79:2e:
8b:83:51:77:02:6d:3e:7e:1f:cc:3d:e7:40:26:05:ec:89:a4:
86:54:6a:80:50:9a:22:dd:96:8f:4f:1c:14:bb:47:e0:03:44:
f4:72:35:7e:a6:bb:a9:63:2f:a1:e1:0d:1b:66:60:c8:fd:5b:
9a:88:64:4c:fa:60:0d:b1:90:4c:86:8f:82:e0:d2:96:28:d3:
b8:2a:75:f9:ab:56:3a:b9:da:f5:57:b3:7d:70:21:02:14:91:
2b:e8:bb:dc:99:fa:69:0f:70:87:63:cc:ea:ce:40:1a:a3:92:
93:67:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:46 2026 by rpki-client