
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa
File: aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa (raw, json)
Hash identifier: e49wC5CwEuNtcv9E2pDRUSK730KqAJCIMgNlJNojnY8=
Subject key identifier: 6A:2C:E1:18:39:A8:4F:88:C4:27:78:C5:25:5A:FC:47:E3:69:79:E1
Certificate issuer: /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial: 72
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa
Signing time: Tue 31 Mar 2026 07:30:53 +0000
ROA not before: Tue 31 Mar 2026 07:30:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 16509
IP address blocks: 27.131.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Validity
Not Before: Mar 31 07:30:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6A2CE11839A84F88C42778C5255AFC47E36979E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:c4:d9:71:4f:2e:2f:75:f2:58:d6:84:6f:
85:a4:b8:7d:a3:23:8d:1d:34:93:27:4a:32:8a:24:
f8:aa:dc:35:46:f8:d0:b4:c7:c3:ed:ad:77:2e:65:
1e:82:83:c1:5a:30:80:f7:83:d9:01:8d:14:b3:80:
5b:62:79:e0:92:ed:03:2a:f4:85:f6:d5:6f:ed:50:
70:6a:39:9d:64:1f:00:ac:76:d7:42:f3:6e:1d:7f:
72:88:ae:e5:fd:b5:3a:7e:59:ff:d5:4c:cb:5b:84:
ff:8c:66:85:28:c7:f2:04:19:87:aa:23:85:a8:18:
c6:a5:1c:5e:50:fb:71:da:46:6b:99:0f:86:24:34:
05:33:c4:af:00:c9:75:5e:2d:41:b8:10:70:26:43:
35:3a:7b:9b:d3:36:f8:c9:6e:25:34:6f:dd:63:7c:
83:0c:bb:03:41:38:91:c0:f8:8e:ec:a3:5e:42:80:
49:71:34:38:1d:b9:48:86:eb:41:d8:72:22:5c:df:
59:d3:76:7f:c7:32:04:19:fe:7c:8d:86:22:61:2e:
f9:a3:85:1b:12:98:a3:b1:8a:86:5f:50:d7:e1:c8:
36:44:da:67:31:45:60:ee:24:93:e9:5b:00:b9:4a:
5c:b7:23:50:77:37:f3:18:81:45:cb:96:9f:05:5e:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2C:E1:18:39:A8:4F:88:C4:27:78:C5:25:5A:FC:47:E3:69:79:E1
X509v3 Authority Key Identifier:
keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/aizhGDmoT4jEJ3jFJVr8R-NpeeE.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.8.0/24
Signature Algorithm: sha256WithRSAEncryption
46:7e:dd:07:42:42:97:07:fa:0d:30:b4:a3:d5:34:66:bc:47:
32:12:d9:0a:96:c8:1f:af:df:41:70:1e:67:8d:02:39:98:a5:
a8:81:45:e4:c7:d8:9c:5b:13:51:42:2c:e9:8e:c4:c0:b0:4c:
91:79:89:50:77:47:11:9f:a2:cf:e2:2a:47:e2:25:44:6c:32:
28:b5:da:80:fd:d8:31:ed:e8:62:05:d0:6b:d6:79:f4:1f:fa:
11:db:16:55:4a:c1:cd:c4:ba:df:ad:dd:5e:03:4c:11:9d:ca:
eb:aa:35:a8:24:18:a9:6d:a1:20:b5:f9:d5:fd:30:5f:d3:99:
27:19:be:ec:4b:60:98:a2:13:db:8f:0b:2f:ce:19:cc:65:d5:
ed:54:94:f3:03:60:1b:f9:9f:71:0b:b3:af:f4:ca:ad:f5:84:
ef:0f:b4:b8:6f:be:4b:2e:d3:c9:c4:2a:15:da:46:d2:0b:f6:
93:02:34:9d:ae:b3:10:37:e4:c6:52:d2:f7:19:38:31:47:16:
7a:c0:99:27:a6:35:34:94:7b:a7:a4:13:d9:e5:11:a6:86:9e:
60:57:8e:72:47:3b:7c:d9:e5:c2:65:03:57:9d:73:88:a5:b1:
26:c8:75:16:03:78:14:18:b7:f7:5e:62:73:a3:46:bb:17:8a:
66:6d:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:54 2026 by rpki-client