
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/_K5k09I8nP3Wxc3XrfqiOZJQDMY.roa
File: _K5k09I8nP3Wxc3XrfqiOZJQDMY.roa (raw, json)
Hash identifier: 3GHZ8cABWU0JaxGJlf5H+XTsZhL9Mf4NMQtDYCfhVpE=
Subject key identifier: FC:AE:64:D3:D2:3C:9C:FD:D6:C5:CD:D7:AD:FA:A2:39:92:50:0C:C6
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 01D1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_K5k09I8nP3Wxc3XrfqiOZJQDMY.roa
Signing time: Tue 31 Mar 2026 07:39:46 +0000
ROA not before: Tue 31 Mar 2026 07:39:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 39.110.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Mar 31 07:39:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FCAE64D3D23C9CFDD6C5CDD7ADFAA23992500CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:63:78:ea:e2:84:c3:3a:f4:59:ae:23:1a:
db:55:d6:15:8e:79:ce:e8:b0:b9:45:84:c0:23:29:
5d:e6:b9:43:8c:be:1e:27:6f:b8:6e:93:44:46:a6:
5f:da:ef:a0:8e:12:13:dd:a7:31:bd:70:05:d2:c3:
46:a9:a8:87:66:cf:3f:ca:8d:fd:76:23:a9:ad:76:
fa:f2:89:a4:2a:68:40:35:5e:06:49:f1:30:02:00:
d8:ff:df:2e:6a:8d:b7:67:77:2f:14:fc:dd:e2:c7:
a5:e9:b3:e5:89:27:49:fb:fd:53:96:23:ba:19:32:
89:34:7b:75:6a:1b:b0:1f:9d:0d:40:3e:7e:5d:b7:
1a:71:d2:b7:d5:83:74:3f:d3:67:91:5f:5c:f7:72:
0a:2c:0b:af:14:27:33:1f:f5:3a:a7:e4:6e:b4:e7:
cf:c3:fb:54:cd:15:b9:42:ba:dc:8c:4e:60:13:dc:
21:48:c5:c1:57:69:58:47:5e:6c:f3:a6:ba:bd:93:
fb:64:8f:77:09:7e:5f:ce:bb:18:1b:db:1f:90:e4:
be:55:af:7d:0e:98:e2:e9:12:fc:8e:fd:08:16:8a:
3d:b9:9b:d8:0e:88:75:b7:25:4d:2a:f1:5b:7c:80:
cf:0b:80:18:1e:e5:66:3b:1c:e9:96:e5:89:74:ab:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:64:D3:D2:3C:9C:FD:D6:C5:CD:D7:AD:FA:A2:39:92:50:0C:C6
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_K5k09I8nP3Wxc3XrfqiOZJQDMY.roa
sbgp-ipAddrBlock: critical
IPv4:
39.110.0.0/15
Signature Algorithm: sha256WithRSAEncryption
33:e3:55:16:75:d8:55:7b:fb:5a:7d:cc:5f:54:24:3d:ce:be:
34:ae:cd:14:09:dd:e2:80:2b:7b:f8:71:7c:f6:14:ff:24:93:
9f:dd:57:65:2a:0c:96:e0:33:be:c8:1a:dd:4d:95:e4:b1:29:
e1:7c:b1:a8:ba:50:83:8a:07:b6:d8:59:7d:0c:dd:a1:9e:95:
6f:0c:72:69:9a:9a:7b:be:08:89:f0:3c:e0:71:ac:ca:86:2c:
a0:1c:34:65:d4:6f:48:de:c7:1c:d2:d0:80:d7:0b:6a:c6:52:
e2:f3:27:c8:d0:e0:14:e1:18:4e:1c:68:6a:ce:74:c0:4d:c4:
90:9b:e6:3e:7e:9e:ad:a0:8e:94:80:cb:37:88:56:dd:0f:bb:
5f:6d:7c:0b:b9:31:94:a9:bd:31:90:d1:d7:90:9f:02:4a:b0:
73:b0:fa:f3:30:39:68:8f:18:e7:13:d2:6b:99:08:fe:12:63:
10:b3:8e:9f:af:0e:60:44:fb:76:1c:67:45:a6:0e:e2:76:e0:
d5:03:00:b0:a4:76:ac:5a:aa:9c:c0:d7:4c:01:ca:89:38:f8:
2b:c6:ff:b1:0a:77:fd:6f:b0:02:95:65:1a:04:ae:ca:0d:98:
1f:c3:fb:f6:63:82:82:8a:c5:3e:e1:a3:e5:2a:d8:9f:f8:25:
11:b6:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:46 2026 by rpki-client