
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/XoudkGeuBKBSHFpVFze6JS7wN5o.roa
File: XoudkGeuBKBSHFpVFze6JS7wN5o.roa (raw, json)
Hash identifier: HP2CtU5Jtxog+xyb5oONJ1VWtVTgDgnlCeQgOFTZCmk=
Subject key identifier: 5E:8B:9D:90:67:AE:04:A0:52:1C:5A:55:17:37:BA:25:2E:F0:37:9A
Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial: 67
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/XoudkGeuBKBSHFpVFze6JS7wN5o.roa
Signing time: Tue 31 Mar 2026 08:31:41 +0000
ROA not before: Tue 31 Mar 2026 08:31:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24257
IP address blocks: 202.90.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Validity
Not Before: Mar 31 08:31:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5E8B9D9067AE04A0521C5A551737BA252EF0379A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:06:5f:23:62:f2:b8:7e:34:0b:13:35:8b:
5b:47:63:12:c4:8c:67:b5:ac:d3:0d:56:5e:f6:a4:
72:c3:c3:73:10:8a:8b:1e:10:c9:ac:ac:95:93:60:
c7:7f:2e:c5:52:24:6f:04:96:50:c6:f3:94:fb:08:
b8:79:42:84:8a:92:f8:67:dc:b5:90:5a:4d:bb:14:
f5:b2:a2:fa:72:d9:dd:9c:ba:d6:85:fc:1b:9a:e4:
46:12:7b:c3:20:b1:99:53:61:56:56:40:08:2d:82:
a3:3e:bb:0f:e8:42:6c:8a:3c:31:72:0b:9c:a1:6b:
6c:9d:01:50:62:c0:c7:0c:4f:43:d4:57:cf:b8:cd:
6b:6e:6c:c0:5f:80:42:bf:ab:42:a8:c5:f3:b4:cf:
aa:69:0e:e5:24:22:e0:27:9b:cc:9e:6a:22:00:e9:
a7:d3:b0:ed:c1:e1:32:88:bf:2f:bb:e0:3f:5a:b3:
15:51:1e:5a:6f:60:8a:8c:50:50:21:2c:a3:72:c9:
f4:b0:c3:42:ec:e6:40:60:7f:e9:f8:06:20:67:22:
5c:78:5e:73:f4:3e:11:64:c0:f4:e7:48:d6:0b:f2:
e9:fe:8f:dc:64:b1:a9:ca:8f:a9:cb:7a:12:2d:82:
3d:fd:90:46:c1:46:c3:46:21:a2:f9:4f:25:6f:3b:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8B:9D:90:67:AE:04:A0:52:1C:5A:55:17:37:BA:25:2E:F0:37:9A
X509v3 Authority Key Identifier:
keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/XoudkGeuBKBSHFpVFze6JS7wN5o.roa
sbgp-ipAddrBlock: critical
IPv4:
202.90.12.0/24
Signature Algorithm: sha256WithRSAEncryption
43:47:2e:9e:a9:d7:26:cc:2c:6a:a2:19:81:2a:77:c8:ba:3d:
af:6b:65:42:5e:ee:95:07:16:79:fc:f2:33:7c:cb:e2:aa:98:
9d:75:c5:9e:99:39:2a:95:91:ee:8f:ca:a2:e5:ad:04:22:94:
b1:b5:49:d3:0e:df:32:88:47:73:3d:ad:58:7f:34:63:b5:97:
31:df:45:6a:d8:ea:90:36:e1:01:ec:0a:29:04:e2:89:d7:68:
da:17:0e:79:70:e7:68:58:d0:78:c6:4d:ff:7b:21:3f:38:91:
6d:e0:c3:d7:71:96:6b:76:d7:ce:f0:38:5c:a4:18:56:07:f5:
ce:8a:fe:87:9e:6a:f7:02:75:2d:f1:c4:07:a7:18:5c:21:e7:
54:3b:45:73:26:0a:02:f4:71:b7:c0:76:a3:c5:11:c3:9a:a2:
3d:c6:e7:f4:4e:55:f9:5d:d0:21:ce:b3:45:d9:2c:ae:c6:d2:
83:13:89:3d:26:e5:19:43:20:9f:0d:21:87:82:a2:fa:43:c2:
cb:3f:92:7b:1f:57:8b:3d:2d:dc:a8:9d:cb:b0:8e:7a:87:eb:
94:ae:93:2d:78:12:d6:f6:39:e6:3f:0a:be:71:5a:98:37:7e:
30:e9:a1:29:bc:48:83:02:e9:6f:d8:a9:17:03:2f:aa:6a:9b:
2a:82:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:49 2026 by rpki-client