
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/5AT_UNZQQDkwBo1GOkvK4QFtjcM.roa
File: 5AT_UNZQQDkwBo1GOkvK4QFtjcM.roa (raw, json)
Hash identifier: AUdlBxJNghW0TGLv+jGAUTC8s70s8IQkFOJtgpZqNi4=
Subject key identifier: E4:04:FF:50:D6:50:40:39:30:06:8D:46:3A:4B:CA:E1:01:6D:8D:C3
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 067E
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5AT_UNZQQDkwBo1GOkvK4QFtjcM.roa
Signing time: Tue 31 Mar 2026 07:27:58 +0000
ROA not before: Tue 31 Mar 2026 07:27:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 42.125.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Mar 31 07:27:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E404FF50D650403930068D463A4BCAE1016D8DC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:cb:cc:f0:0c:d3:be:a1:a1:c6:ab:82:04:
15:10:ad:1a:03:02:c4:00:86:e8:cb:91:1b:3b:ca:
a2:03:b4:3d:15:98:29:db:e7:04:7d:55:2d:b8:7e:
93:df:22:49:0f:d1:d6:39:3f:b6:7b:44:9a:78:01:
28:06:d1:aa:30:df:59:f5:ed:bb:9f:96:93:e1:3f:
f2:eb:cd:42:54:8a:fb:da:f7:b8:a3:fd:60:17:6e:
37:69:1e:49:04:59:4e:3d:46:76:43:72:b1:4f:ca:
99:e2:94:78:f9:1a:aa:d6:9b:67:61:43:dd:0f:b5:
02:69:70:70:9e:5d:fd:73:1a:54:e2:e1:ae:80:36:
5b:eb:ad:b2:06:1d:95:02:a8:73:16:99:3e:36:22:
cd:79:18:2c:8e:d6:2e:cb:78:2c:1e:7a:c0:7e:53:
b7:a9:58:ee:e2:b9:d6:3d:49:a2:9a:b6:a4:42:cd:
79:35:30:ae:ff:d0:fa:8b:40:c2:6e:47:9c:54:a0:
3c:8d:2c:31:c8:46:17:b2:45:00:ad:c1:fc:18:d9:
0e:46:f8:6e:ae:20:cf:db:f3:01:80:fe:e0:6c:b9:
65:49:30:db:5f:f2:95:e0:dd:20:0c:85:f4:39:cd:
42:21:5f:e8:c8:c0:20:fb:1f:2c:1a:a9:1d:21:b8:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:04:FF:50:D6:50:40:39:30:06:8D:46:3A:4B:CA:E1:01:6D:8D:C3
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/5AT_UNZQQDkwBo1GOkvK4QFtjcM.roa
sbgp-ipAddrBlock: critical
IPv4:
42.125.232.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:1b:03:f0:9a:b7:ac:fb:60:d1:ee:9a:ac:9a:04:8f:ac:da:
57:72:59:85:ac:40:d0:5a:e0:3f:82:d9:db:f7:a3:4c:0f:57:
0a:56:7d:d2:96:a1:89:95:3a:f7:6e:24:ad:2a:5b:66:0c:04:
8e:8f:75:5b:b3:f6:51:70:05:70:b9:a9:df:83:ac:ef:72:50:
42:21:40:49:a3:76:84:76:b0:c6:fe:b8:f0:34:87:06:dc:1e:
4a:bb:70:39:d5:00:82:e0:34:35:f6:55:28:53:42:06:c3:91:
b8:7f:a7:b1:23:7b:22:9d:8f:04:ba:ac:1b:92:a3:48:2a:83:
7f:8e:68:2b:7c:d2:78:dd:be:a2:6e:f2:a5:fd:48:bf:4f:39:
0b:6e:54:70:7d:f4:1d:1e:cf:43:da:a8:5a:93:cd:ea:20:89:
2d:81:4e:6e:3e:19:c0:22:48:e9:9e:b2:c5:fa:4c:29:79:63:
c6:6b:29:89:74:f9:10:18:41:fe:3b:3c:7d:85:77:bf:3f:36:
79:0b:80:6c:9f:4d:4d:e4:bc:9a:0b:73:e2:0d:78:37:03:3d:
e7:d3:09:b2:50:76:96:34:e0:3c:97:89:d6:fc:d5:17:f2:fe:
2c:9e:a4:1c:cd:fb:66:40:d6:2e:80:6b:af:95:a2:21:3d:1a:
71:94:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:23 2026 by rpki-client