
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/lAICVGLbPE5olFHjiAUdfu0OdUs.roa
File: lAICVGLbPE5olFHjiAUdfu0OdUs.roa (raw, json)
Hash identifier: ix5Lqxb7+DE9XAhR+zFOks4Yxz/T8Cw4B2X5keBsAgQ=
Subject key identifier: 94:02:02:54:62:DB:3C:4E:68:94:51:E3:88:05:1D:7E:ED:0E:75:4B
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0676
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lAICVGLbPE5olFHjiAUdfu0OdUs.roa
Signing time: Tue 31 Mar 2026 07:27:55 +0000
ROA not before: Tue 31 Mar 2026 07:27:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 42.124.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1654 (0x676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Mar 31 07:27:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9402025462DB3C4E689451E388051D7EED0E754B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:13:59:c6:c2:dc:1a:d1:09:c5:88:8a:78:
3f:8c:74:38:f7:f7:0e:62:b0:16:d4:f8:0a:6b:3a:
cc:56:46:35:c4:78:cb:54:c0:10:74:0f:6d:d1:98:
f5:0c:4b:1f:81:85:f1:0b:b4:cc:a3:63:5e:43:de:
12:8c:38:5d:60:e2:70:26:25:06:20:d2:d8:7e:df:
42:a2:1e:83:8a:df:90:0f:69:d4:b8:8b:1f:17:a7:
b1:00:39:c3:0d:6b:4a:2d:8e:87:db:ba:aa:01:ad:
f7:bd:a8:92:44:71:e1:5b:d5:a7:62:79:6f:b9:6a:
c4:3a:28:a4:6f:76:f1:b8:88:96:b4:9a:b4:44:94:
9f:97:7e:4d:4a:3f:70:15:bb:7e:4d:40:ac:ca:79:
51:43:1a:8a:29:d9:d4:23:b8:e6:4f:e4:a2:7b:df:
f6:55:a6:ba:d9:b7:e4:b9:ea:6a:ab:38:4a:b8:b1:
62:be:ef:93:7e:a8:76:e9:83:70:8e:d4:8c:89:67:
cc:09:60:04:1e:6c:8b:59:17:b7:ae:e8:65:e4:15:
f0:02:11:86:0c:9a:a2:50:56:a2:8b:67:63:53:dc:
2a:83:e5:95:17:4c:35:13:7e:2d:23:27:56:d0:09:
9c:7d:dd:76:c8:60:12:9b:65:e6:4b:a2:0e:fb:72:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:02:54:62:DB:3C:4E:68:94:51:E3:88:05:1D:7E:ED:0E:75:4B
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/lAICVGLbPE5olFHjiAUdfu0OdUs.roa
sbgp-ipAddrBlock: critical
IPv4:
42.124.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:1a:a4:c2:f7:8a:70:6a:4f:7e:ff:dd:7d:ff:fb:31:b9:10:
3f:c5:9d:8e:70:44:2e:01:68:6d:f5:df:cb:22:6c:f9:2f:b1:
aa:d3:4f:1e:79:f7:20:66:7a:c5:06:76:47:ca:7a:1e:0e:27:
42:c8:2e:cc:8e:7e:cf:db:ac:79:98:c0:46:26:06:87:a8:1c:
77:46:d1:7e:03:33:97:b6:99:0b:0c:43:a2:b1:cb:04:fb:46:
11:f7:6c:f2:48:cf:e9:65:02:54:07:13:f9:c6:45:4d:ac:a2:
63:82:41:ed:84:72:ae:94:c5:5e:67:58:00:81:15:d2:5f:95:
00:ad:b5:0c:ad:c3:78:73:f7:d3:b2:5b:21:00:ff:fb:c8:9f:
1d:a4:8d:38:e3:94:91:15:75:1a:e3:94:cc:81:45:0b:ae:2b:
e8:d2:18:18:06:99:10:1b:20:95:c6:c5:e9:ee:f5:b9:f5:e7:
f4:1f:85:3b:79:40:34:a2:bf:04:d1:a8:03:39:4e:cf:1e:e4:
11:05:94:84:78:58:6e:b4:c2:e1:1f:f0:82:67:a6:37:43:dc:
a8:7f:ee:c2:ad:be:56:75:a4:c9:05:cf:5a:7f:3e:46:9e:97:
35:f5:fc:4e:c3:35:60:e0:de:bb:59:8d:05:34:ed:7f:4a:8f:
7d:49:8f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:48 2026 by rpki-client