
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/ikxphS2KRBzIZFqljgaB8n2IYQc.roa
File: ikxphS2KRBzIZFqljgaB8n2IYQc.roa (raw, json)
Hash identifier: DTmJSk5GxkDduvn4mhIWEojzMucH9ZIP0qlbPAp9rP4=
Subject key identifier: 8A:4C:69:85:2D:8A:44:1C:C8:64:5A:A5:8E:06:81:F2:7D:88:61:07
Certificate issuer: /CN=D405A6909AB9956CF7393D0E312A269A804005EF
Certificate serial: 45
Authority key identifier: D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ikxphS2KRBzIZFqljgaB8n2IYQc.roa
Signing time: Tue 31 Mar 2026 08:29:49 +0000
ROA not before: Tue 31 Mar 2026 08:29:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 131.129.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D405A6909AB9956CF7393D0E312A269A804005EF
Validity
Not Before: Mar 31 08:29:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8A4C69852D8A441CC8645AA58E0681F27D886107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:41:f6:74:62:06:6e:3f:d9:85:b8:0d:56:
1c:1d:8c:a1:a8:0a:01:61:15:72:d0:7e:aa:e5:98:
06:f6:23:ae:76:32:95:1a:57:a9:d6:6a:2b:7a:5c:
41:fb:d1:e3:de:7a:c5:21:45:d7:12:fe:41:32:df:
09:e8:aa:3f:37:a3:71:70:cc:6a:89:08:c2:04:59:
06:9e:07:87:e5:ba:0f:be:d0:5f:ef:1a:c7:31:a6:
68:b0:4b:82:08:d0:1e:d1:70:64:42:18:e5:94:6e:
5d:c6:aa:b1:d2:07:3a:16:8c:85:5a:35:c6:35:a3:
2d:e1:51:00:60:9d:01:39:75:71:cf:0d:98:c6:a0:
6f:e0:e0:3e:82:b8:3f:c0:39:8f:85:d5:c7:16:f4:
85:d7:f2:c8:94:d4:77:c9:26:6f:91:ef:98:6e:01:
e8:83:f9:57:53:58:4f:71:ea:ac:4a:21:99:7b:cb:
e9:f8:f8:e9:db:81:ac:5f:32:cc:06:45:93:6f:69:
fb:ca:50:c2:7c:5f:3a:7d:fa:93:8d:af:32:29:ad:
43:ae:34:4a:88:3b:42:fe:20:5e:d9:1a:6f:1e:c2:
8e:8b:17:a1:20:75:eb:ee:59:e3:37:50:68:8e:ad:
f8:20:5b:1a:b6:ca:c0:06:84:a1:9d:1c:02:44:09:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4C:69:85:2D:8A:44:1C:C8:64:5A:A5:8E:06:81:F2:7D:88:61:07
X509v3 Authority Key Identifier:
keyid:D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/ikxphS2KRBzIZFqljgaB8n2IYQc.roa
sbgp-ipAddrBlock: critical
IPv4:
131.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
82:4d:99:e8:67:ac:30:b0:7b:26:77:00:4c:3f:75:50:5f:02:
ef:f7:4e:9d:94:c1:10:93:82:2d:d6:bb:41:05:40:28:63:f1:
4b:6d:5c:d1:5e:85:04:f2:9e:54:8d:3f:bc:d0:3b:74:64:64:
bd:8b:47:3d:de:e6:55:de:d7:d4:cc:c0:a8:c0:39:3e:63:c5:
4d:e8:fd:00:52:26:06:da:e6:7c:4a:d6:fb:a6:86:d3:5b:de:
8c:ba:ec:57:7a:fd:61:38:ab:a7:32:ff:cf:92:56:c5:56:6d:
08:73:be:5f:f4:ed:d9:bb:b1:73:a5:71:e1:c7:81:1e:3b:c4:
c2:f6:db:c6:5c:e8:8f:9d:87:73:14:01:53:5a:81:c7:2a:0e:
87:7d:0a:c6:af:c6:d6:92:82:db:83:17:77:52:ad:30:2e:14:
27:19:b6:6c:4d:23:16:6d:d9:85:11:29:dd:b9:e0:c7:6c:d7:
03:a1:c4:e4:fe:28:be:07:08:5b:b8:9a:ec:e3:43:84:37:d2:
08:a7:36:07:f1:d6:fa:02:f9:b6:79:6c:00:d2:33:25:c1:ec:
a5:cf:6d:5e:9a:83:3a:9b:2a:02:7c:a2:2e:82:ef:b1:dc:05:
3a:86:2d:fc:71:5b:42:64:89:34:7c:cc:e5:4e:9f:7f:13:b4:
bf:71:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:53:04 2026 by rpki-client