
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/Ohq0rBKjMLBo_KeIhDaVqsYj2Ts.roa
File: Ohq0rBKjMLBo_KeIhDaVqsYj2Ts.roa (raw, json)
Hash identifier: mGvG0ChKGNztBfMJzLY7u3b5WuVCpMpxXSTjISE9f9c=
Subject key identifier: 3A:1A:B4:AC:12:A3:30:B0:68:FC:A7:88:84:36:95:AA:C6:23:D9:3B
Certificate issuer: /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial: 7E
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/Ohq0rBKjMLBo_KeIhDaVqsYj2Ts.roa
Signing time: Tue 31 Mar 2026 07:46:57 +0000
ROA not before: Tue 31 Mar 2026 07:46:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10011
IP address blocks: 223.27.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
Validity
Not Before: Mar 31 07:46:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3A1AB4AC12A330B068FCA788843695AAC623D93B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:3f:90:3f:d9:06:4e:5d:b5:ae:79:ea:a0:
7d:0b:09:c9:9d:88:84:74:ca:7a:f6:60:84:51:dc:
da:90:2e:eb:84:d0:71:38:e5:45:4a:9b:27:49:dd:
8e:81:46:c1:05:22:d3:ab:68:e3:af:ce:2e:59:59:
f1:4f:3f:9c:69:c0:14:ee:30:cb:fd:fd:9f:a5:77:
53:43:42:17:2e:23:99:68:41:69:eb:a3:33:26:a1:
8b:5d:e7:97:8a:d4:42:49:7c:9f:8b:6d:d9:ee:2f:
8a:cd:56:3d:2a:36:ce:d7:d6:9e:b4:18:8a:21:54:
ef:1f:5e:55:4f:05:fe:49:d7:f0:fd:94:08:91:de:
48:d3:bf:7f:dc:8a:03:e8:44:b2:20:e3:1f:9c:32:
eb:b8:5b:c5:28:77:e7:27:8d:14:d9:28:35:01:3f:
76:8a:43:43:1f:6c:4c:a7:4a:e4:b3:85:29:34:95:
a1:11:37:7b:2a:39:25:69:71:4e:47:a7:74:21:72:
3f:01:4b:78:25:b2:28:4b:3a:7b:9a:c0:16:20:c4:
39:d8:94:14:d6:7a:31:ee:65:ff:74:9a:22:a0:89:
6d:9d:ac:2d:01:2f:a8:5d:27:38:ce:05:b5:72:ef:
37:09:85:18:f6:0e:56:30:fc:1f:34:66:3a:01:69:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1A:B4:AC:12:A3:30:B0:68:FC:A7:88:84:36:95:AA:C6:23:D9:3B
X509v3 Authority Key Identifier:
keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/Ohq0rBKjMLBo_KeIhDaVqsYj2Ts.roa
sbgp-ipAddrBlock: critical
IPv4:
223.27.72.0/21
Signature Algorithm: sha256WithRSAEncryption
99:3f:b5:9b:78:36:48:11:d5:e5:f2:cb:f1:d2:e4:4f:8f:20:
d8:63:b5:51:f0:ef:4c:ef:f0:0c:6e:a7:16:b4:69:84:f4:b5:
f3:cd:1e:6a:df:56:6d:58:b8:39:68:e5:23:72:83:88:b4:13:
9c:9e:7e:33:8b:42:d3:41:b7:6d:b8:8f:96:02:63:1a:15:de:
cd:31:73:82:bf:50:f7:5f:1e:34:e8:d5:fa:57:f0:67:d0:be:
74:1b:41:c2:19:25:e4:66:46:9c:11:ed:fa:b5:5f:16:da:18:
1e:24:34:0e:d8:31:07:28:6a:fd:9b:ee:7a:04:a0:0e:e1:34:
f9:12:22:ee:7f:e8:3d:4f:94:a1:82:3f:50:b5:96:52:48:5e:
0d:c0:d3:75:03:ad:70:b5:62:a8:fb:33:aa:c3:02:a0:44:cf:
48:00:9f:8c:2b:63:b4:ee:75:45:ad:e1:e6:d1:da:c1:79:c8:
ff:0a:e5:b5:83:72:7b:59:ea:0c:4c:31:a3:1c:d4:cf:c0:7f:
53:a3:d6:e9:e3:cc:01:1b:c5:02:88:a0:b3:aa:44:88:91:a7:
9e:89:56:b2:40:74:5f:a0:90:5d:fa:5f:41:f1:d6:6f:1a:13:
74:2d:fb:74:34:5b:5b:ae:f5:04:ab:6d:4a:b0:37:cb:62:f9:
f1:50:38:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:15 2026 by rpki-client