
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Xrj4TbsVrmGUiqRHOSedzLgaxAk.roa
File: Xrj4TbsVrmGUiqRHOSedzLgaxAk.roa (raw, json)
Hash identifier: yD4q1Jyu7bQzWCpctBPLrQCE06wNYoBCRJ6zwm2oX/Y=
Subject key identifier: 5E:B8:F8:4D:BB:15:AE:61:94:8A:A4:47:39:27:9D:CC:B8:1A:C4:09
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01DC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Xrj4TbsVrmGUiqRHOSedzLgaxAk.roa
Signing time: Tue 31 Mar 2026 07:39:50 +0000
ROA not before: Tue 31 Mar 2026 07:39:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 218.221.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5EB8F84DBB15AE61948AA44739279DCCB81AC409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:8e:c3:0a:91:64:67:76:bf:82:bc:8f:87:
18:e9:28:2e:20:ff:64:86:cc:ed:11:6e:f5:89:fd:
61:04:90:c6:63:10:aa:c7:33:7b:e1:3e:cf:54:80:
d5:ba:c0:d2:83:80:20:65:7e:6c:06:bd:10:9b:ef:
bb:05:29:10:bd:7b:f2:5d:84:b3:ea:78:fb:01:e6:
1e:40:39:39:99:11:36:01:53:eb:9b:f1:04:21:7a:
5d:1c:a4:94:01:d6:af:db:19:3f:70:0a:7f:d9:67:
81:3c:7f:72:24:9a:bb:8a:9e:8a:82:c8:ce:22:0e:
6f:1d:31:5b:53:e6:ce:85:b4:90:56:2a:fe:ab:29:
cb:e5:7f:f3:c1:96:1d:b7:00:46:33:7e:04:45:4e:
28:1a:f1:f0:3f:ab:37:c9:4e:32:0d:07:c3:e1:3e:
b6:b3:48:c2:af:e9:79:fc:a8:a6:d7:5a:82:fb:24:
93:37:05:2a:b9:a3:88:9c:a6:85:4a:8a:b6:43:5a:
81:ad:dc:58:ff:db:08:a3:ff:43:28:8e:f8:7f:8f:
d3:6b:08:93:aa:d2:56:f9:59:a8:d7:ac:2c:eb:93:
f5:c8:89:28:a9:42:74:86:2c:3c:51:e3:ca:fe:d9:
dc:1a:f7:e2:e0:93:37:41:99:5b:e9:be:68:5a:ee:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:F8:4D:BB:15:AE:61:94:8A:A4:47:39:27:9D:CC:B8:1A:C4:09
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Xrj4TbsVrmGUiqRHOSedzLgaxAk.roa
sbgp-ipAddrBlock: critical
IPv4:
218.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:73:95:60:a7:d2:d6:4b:20:b9:c3:cf:7d:43:d2:2d:96:06:
59:15:9d:c4:e8:ba:0d:89:e2:2c:7b:0e:0b:67:0c:68:81:64:
23:14:e2:16:19:26:1e:b5:43:71:dd:3b:4f:55:2d:f6:e4:47:
47:84:bf:fc:6d:b5:8b:a2:aa:1b:09:6d:8d:2c:44:5f:43:af:
64:ff:50:a5:c9:70:e1:5e:72:94:e3:56:70:b1:36:72:c7:c1:
dc:2d:d3:63:d6:dc:c3:48:b9:df:4a:07:da:e6:f2:96:54:5b:
84:5d:1f:dd:54:aa:75:d9:3a:7d:ce:ca:16:1e:81:16:8f:88:
fa:64:2c:96:c1:c0:7a:a8:3f:a4:b7:a9:d1:21:c7:6f:e3:d0:
a4:60:80:98:b3:8c:7e:34:2c:58:3e:af:ee:ee:05:ac:ba:d6:
68:48:66:34:b1:7d:5e:21:4c:ef:e0:8b:a5:4f:df:60:03:81:
be:80:a3:bc:c0:5a:75:0b:8b:13:86:2a:a2:a8:37:00:9e:d4:
c0:30:4e:b9:13:71:91:9b:ad:07:fd:bd:a0:04:c7:a0:2e:80:
26:52:b2:73:cf:3a:60:54:ef:89:8b:bc:09:b4:7c:7e:d2:cc:
a8:01:7f:c0:a0:2d:42:4b:b1:d5:19:04:96:9d:78:61:6e:01:
9f:32:fd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:39 2026 by rpki-client