
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Da3eUR_OepYHMyy4E97hjdpjSBo.roa
File: Da3eUR_OepYHMyy4E97hjdpjSBo.roa (raw, json)
Hash identifier: rrKE99mJkzr/cl0Ga6L9djjnFeGk7Y5j7KL0N08dpuU=
Subject key identifier: 0D:AD:DE:51:1F:CE:7A:96:07:33:2C:B8:13:DE:E1:8D:DA:63:48:1A
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: BC
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Da3eUR_OepYHMyy4E97hjdpjSBo.roa
Signing time: Tue 31 Mar 2026 07:39:36 +0000
ROA not before: Tue 31 Mar 2026 07:39:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 160.86.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Mar 31 07:39:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0DADDE511FCE7A9607332CB813DEE18DDA63481A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d7:6d:2d:02:94:19:23:73:29:39:cc:77:ae:
72:9c:a1:40:f7:00:8a:7b:1f:61:04:3a:44:0b:0c:
ee:c2:bd:82:55:6d:89:31:bb:61:06:3b:1c:49:1c:
37:56:bc:dc:73:80:7f:cd:c9:49:75:cd:8f:02:4c:
35:bf:15:81:c0:a9:db:ce:da:bf:a5:5c:9a:4e:de:
3e:6f:05:94:be:5c:71:7b:f1:75:0f:58:17:5e:23:
b3:85:a9:cf:82:55:f8:b3:da:de:92:51:67:f9:af:
4b:b3:ef:cb:0e:52:0f:bd:8e:8f:54:1d:27:d6:ae:
18:5a:89:fd:dc:6c:00:78:b8:c4:60:73:1c:2b:af:
17:b4:40:c7:6c:02:31:d9:e4:aa:ec:0a:7f:88:35:
06:ac:75:68:64:fa:2b:99:48:a1:0b:30:ac:25:d0:
cc:8c:ef:59:11:0e:5e:38:74:6b:34:55:da:93:59:
ce:ee:5e:a0:d8:aa:b2:e2:07:5e:73:e8:e5:f2:cd:
dd:2c:a5:e3:97:47:c3:1a:29:a5:77:1a:ad:38:bd:
50:c6:b2:84:32:5b:c1:4b:b9:44:c0:91:fc:ca:5b:
01:4d:78:c2:1c:5a:85:71:f6:00:ce:41:51:94:62:
5f:0f:e7:00:42:3d:dd:35:c9:e9:ab:68:e2:7f:6b:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AD:DE:51:1F:CE:7A:96:07:33:2C:B8:13:DE:E1:8D:DA:63:48:1A
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Da3eUR_OepYHMyy4E97hjdpjSBo.roa
sbgp-ipAddrBlock: critical
IPv4:
160.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:1e:8c:db:28:8b:92:d5:75:a3:23:e5:3b:9d:d8:7b:f8:ba:
4a:6f:f5:7a:a9:d4:07:90:e9:1f:1d:23:cd:a6:b1:67:46:d6:
97:90:72:03:0c:da:48:94:5b:94:c3:be:1d:66:7d:ea:d4:db:
6f:bd:ef:80:0a:f2:ed:b0:fe:6e:c3:1b:0f:8a:78:56:08:2d:
98:29:25:e4:45:2f:41:63:49:3f:09:d8:ca:7f:e7:f7:9e:58:
ce:46:fd:fa:c5:a5:e6:b0:8f:f9:6a:1b:0e:dc:c5:9e:80:76:
a0:ed:ad:09:b2:d2:b9:f3:8d:e1:17:4e:bf:65:e7:37:48:12:
1f:6d:ab:6f:0f:ef:42:79:89:34:3e:7f:97:0b:d1:b0:65:ce:
cf:2e:3c:90:c3:a7:00:5c:be:c7:1a:71:5b:54:f6:fb:48:b6:
cd:65:4a:cb:ca:8d:25:3f:ea:93:5c:5a:6e:a5:c0:92:e9:02:
f0:6d:4d:63:95:7d:d3:ae:1c:7c:89:31:aa:53:51:ca:ad:69:
d4:37:7e:2d:3b:cd:84:5f:88:5b:f1:ed:e7:5e:72:8c:ae:08:
82:d2:13:3e:f8:bd:ee:26:80:ba:43:f6:3f:c9:06:e1:e4:00:
df:78:41:af:3f:48:b7:59:a1:50:fb:57:42:6c:dd:7e:63:35:
88:8d:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:05 2026 by rpki-client