
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa
File: uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa (raw, json)
Hash identifier: +OE/5OkzkZcHOLy3kOe9x5choNoFozJYt8TVvhw0myo=
Subject key identifier: B8:A0:08:F4:ED:5E:A7:56:09:FB:55:49:AC:54:07:2F:21:F7:E6:A8
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: C0
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa
Signing time: Tue 31 Mar 2026 07:39:38 +0000
ROA not before: Tue 31 Mar 2026 07:39:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 147.192.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Mar 31 07:39:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B8A008F4ED5EA75609FB5549AC54072F21F7E6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b9:3e:4c:9e:c7:c9:f9:62:b2:81:fe:ef:d7:
bc:cf:a5:49:d1:b6:50:27:7f:c9:4b:a9:37:7c:fd:
94:3d:91:ff:f6:64:41:95:ec:53:7e:92:61:c3:b2:
3b:04:6c:2e:e3:b5:cd:49:aa:1c:4d:71:a6:b5:66:
3e:c6:73:27:b4:13:1d:28:d0:33:f0:09:ef:ed:b5:
5c:86:f5:6a:11:76:5a:03:16:fb:43:13:57:b7:86:
71:ff:23:40:33:a5:54:30:03:a5:d4:c5:c9:6b:81:
b0:82:8e:43:47:7f:b2:b8:19:be:5e:02:f2:89:d1:
da:4e:cb:bd:87:63:ef:04:c6:87:c5:82:fd:15:dc:
c6:28:64:9a:76:d6:af:b1:cd:0e:0e:8d:4f:a7:e9:
26:08:c0:16:a0:0e:32:36:f2:68:b6:e3:84:c6:48:
10:3d:b2:04:52:19:45:66:9a:41:e4:6f:b4:f6:aa:
87:63:f5:6d:d9:33:29:81:0d:34:9f:0a:33:41:71:
51:38:28:09:0b:86:7a:58:91:1a:de:af:a6:c3:7f:
ca:f9:66:53:96:66:34:61:4b:fc:b7:a7:e8:5b:3d:
e1:10:99:da:5e:9e:4f:97:41:7a:59:f4:06:9b:cd:
6a:a8:7c:64:52:84:73:18:97:d3:a2:36:a3:9c:69:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:08:F4:ED:5E:A7:56:09:FB:55:49:AC:54:07:2F:21:F7:E6:A8
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa
sbgp-ipAddrBlock: critical
IPv4:
147.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:99:00:96:b4:07:b6:70:1a:a2:4a:b3:0e:b0:41:5f:97:cc:
80:7a:0a:d5:5d:76:c1:48:48:76:14:b9:81:97:08:6c:9a:ea:
3f:c2:88:94:74:9e:fc:e6:94:7c:9f:f3:72:7c:da:6b:a8:5d:
7d:0b:82:8d:1d:0c:ef:ca:11:19:b1:19:9b:e4:83:4f:a9:15:
8f:d5:4a:96:be:3d:d4:36:d7:ea:9a:20:af:0f:81:64:97:77:
52:e2:3e:e1:8e:6a:51:dd:66:43:56:e7:17:73:bb:1d:f1:5d:
1b:2a:7a:c1:9d:15:c9:8c:fc:4e:f2:b3:83:de:a2:07:93:da:
d2:f4:61:5c:01:fe:4d:71:cb:5f:2c:95:7a:46:39:5b:b3:ab:
39:c0:9c:ee:dd:01:e4:30:0d:7e:20:20:79:8a:24:79:a6:ae:
3f:f0:b1:4c:4a:7b:ee:36:52:4e:05:58:3e:b7:5a:73:b8:d2:
23:51:0b:3b:9f:aa:61:eb:f2:ae:1f:9f:f6:e1:7a:c7:28:9a:
00:4f:1a:e1:a8:dd:5e:d8:a8:5e:37:63:64:9f:da:0e:a4:cc:
e0:d7:3e:1c:20:96:3d:86:4e:16:48:3e:d4:96:77:a9:c3:39:
d5:65:82:a4:7a:65:94:2c:c7:d4:b6:c3:b9:71:bc:0a:2e:9b:
14:af:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:39 2026 by rpki-client