
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/8DbqdOJF-kDXjCliosjSNYL-zls.roa
File: 8DbqdOJF-kDXjCliosjSNYL-zls.roa (raw, json)
Hash identifier: v+V2pfs4YmMN5+il920VSUBBJv2eDXjn04zeDB0YO7Q=
Subject key identifier: F0:36:EA:74:E2:45:FA:40:D7:8C:29:62:A2:C8:D2:35:82:FE:CE:5B
Certificate issuer: /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial: 77
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/8DbqdOJF-kDXjCliosjSNYL-zls.roa
Signing time: Tue 31 Mar 2026 07:30:54 +0000
ROA not before: Tue 31 Mar 2026 07:30:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38636
IP address blocks: 27.131.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Validity
Not Before: Mar 31 07:30:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F036EA74E245FA40D78C2962A2C8D23582FECE5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:a1:f0:14:96:ff:f3:ab:83:b8:9a:af:a9:
e8:20:5f:55:d2:fb:4d:2d:61:48:ce:28:55:e1:e5:
8e:fb:3a:e0:0f:bc:0b:e9:9f:91:ac:1d:6f:b8:92:
cd:8b:4e:a8:1f:c9:ca:17:87:aa:52:40:88:59:a5:
e8:6b:4d:39:1b:60:c2:a3:a4:53:a6:51:1f:0b:62:
27:24:cd:55:5c:c3:10:15:92:2d:fb:82:71:0a:22:
cc:c3:77:b8:64:ac:df:f1:76:1c:ce:25:44:52:9a:
10:2d:10:38:66:c1:54:85:48:52:d9:16:7a:32:13:
c5:63:7d:fe:f1:fb:d1:66:45:a1:0b:f0:22:d9:6d:
3f:46:cf:03:55:d9:77:a2:86:12:8f:3f:02:69:b8:
23:98:96:6a:df:d0:08:87:aa:ac:04:3f:18:50:1c:
73:53:06:8b:67:e3:78:5f:48:55:3c:f9:78:38:c9:
50:5c:68:b4:58:75:91:2b:22:53:41:fb:c5:65:77:
12:1e:c9:f9:a2:a0:e5:d0:26:21:a0:6c:2f:bc:e7:
70:94:8d:bc:fe:71:7e:01:7d:5e:24:97:f0:b8:7d:
dd:6e:ea:de:46:c0:a2:1b:97:6f:b6:8e:02:d3:0d:
d0:9c:37:53:98:59:5a:fc:22:b4:01:75:7c:77:a2:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:36:EA:74:E2:45:FA:40:D7:8C:29:62:A2:C8:D2:35:82:FE:CE:5B
X509v3 Authority Key Identifier:
keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/8DbqdOJF-kDXjCliosjSNYL-zls.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.11.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f6:6a:6f:bf:32:d5:db:89:99:0e:30:ac:5c:ee:06:fc:a1:
fe:46:d7:46:0e:61:be:69:d6:f9:b4:e3:13:28:e5:da:2e:44:
4d:3c:ce:d0:79:c9:e0:75:da:27:d0:31:95:77:0f:c8:0c:6f:
63:fe:aa:33:e8:7a:8e:85:d5:6e:fc:c4:bc:af:3b:b9:70:ab:
2c:66:5a:eb:36:45:a2:99:e8:13:4f:fb:ee:20:94:8c:bb:5d:
e0:5b:a9:98:99:40:e5:77:a3:19:fa:1c:08:26:78:58:3a:c3:
0b:52:a7:7b:06:ee:d8:df:94:1a:d2:9d:4a:1a:e1:41:89:37:
ac:fe:36:36:c3:18:f5:43:82:12:ed:0f:f9:cd:17:bc:db:f1:
fa:e1:48:5f:18:3c:61:9c:d1:f4:92:8e:7b:1d:08:77:6d:18:
6b:5a:00:91:cd:22:34:c0:4f:cd:a0:3e:da:ea:f5:3e:89:42:
2f:2d:aa:9f:1a:f4:74:8c:de:3a:d3:9f:96:00:31:31:ff:11:
1a:44:b7:d4:fc:d1:06:81:2d:96:42:a7:2d:2d:22:74:c7:e9:
50:27:01:36:14:bc:dc:07:fe:85:21:73:59:43:85:1d:22:76:
10:7a:48:dd:08:3b:30:6c:dc:bb:f1:55:69:f7:38:6a:c6:39:
23:23:7b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:55 2026 by rpki-client