
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5736/gkaHUvMSB8d4-SH0RGQvHCLCg8k.roa
File: gkaHUvMSB8d4-SH0RGQvHCLCg8k.roa (raw, json)
Hash identifier: oOR10e2l2Z9r4/guftFNHHyGmuHVyKHM45tKN1PqWs0=
Subject key identifier: 82:46:87:52:F3:12:07:C7:78:F9:21:F4:44:64:2F:1C:22:C2:83:C9
Certificate issuer: /CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3
Certificate serial: 0B
Authority key identifier: D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/gkaHUvMSB8d4-SH0RGQvHCLCg8k.roa
Signing time: Tue 31 Mar 2026 08:46:59 +0000
ROA not before: Tue 31 Mar 2026 08:46:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 152870
IP address blocks: 165.101.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3
Validity
Not Before: Mar 31 08:46:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=82468752F31207C778F921F444642F1C22C283C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:53:2f:77:ad:08:2f:f2:4d:0f:7f:49:e4:
d7:6b:34:f7:c8:c5:d0:6a:88:af:e0:b1:4c:29:31:
19:20:65:fc:9e:28:97:c3:8d:11:94:d3:df:d7:71:
d0:b4:03:22:b3:55:bb:d4:ba:b7:f3:a5:e3:15:b6:
82:b9:14:17:b9:eb:d3:89:40:8c:2f:d3:1b:43:40:
a1:ec:66:9e:f8:1d:7a:76:cc:83:73:69:41:b7:3c:
e7:d5:6f:2e:f4:1e:27:5e:59:f8:68:2b:8c:7e:9b:
d5:ec:ac:25:9a:58:9e:8a:36:1a:f6:2b:28:ea:c7:
a9:d8:f5:62:46:eb:a1:00:45:6a:23:9e:19:d6:46:
66:95:20:b1:05:3c:27:94:37:50:3f:1f:01:19:5e:
e1:f6:5a:6e:ea:f7:99:80:66:46:0f:4f:0a:38:c7:
55:3b:01:e9:2c:47:9a:9b:99:c9:24:d5:68:01:4f:
88:fa:b3:52:d5:ce:fc:e2:96:f4:14:6e:a8:61:62:
bc:db:ee:7b:af:30:21:70:38:21:e6:fd:c0:47:50:
9a:87:2e:c6:22:3e:6e:bf:0c:ef:3c:41:46:f9:ef:
f1:e8:f3:fc:b4:96:a8:35:66:c6:3c:0d:d5:9a:ed:
c0:33:fd:a5:3d:5c:eb:9e:0c:b8:34:5f:e2:9a:1e:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:46:87:52:F3:12:07:C7:78:F9:21:F4:44:64:2F:1C:22:C2:83:C9
X509v3 Authority Key Identifier:
keyid:D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/gkaHUvMSB8d4-SH0RGQvHCLCg8k.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2e:2d:12:0d:f0:23:02:78:a4:6b:26:8d:78:b0:7f:00:df:
2e:ad:49:f7:11:1c:06:7a:63:6c:9c:72:40:57:a2:a0:30:59:
a8:8e:34:92:a3:01:4c:f5:6a:c6:fa:66:76:5d:8e:53:cd:99:
9f:c4:bc:3c:39:0c:70:c8:2b:41:6c:ca:32:19:46:a0:f5:d2:
a3:6a:da:2c:b3:9a:f3:b8:8e:e5:96:b4:aa:6a:1b:90:40:b3:
98:d0:87:d2:2d:fa:6e:47:26:3d:02:39:d1:4a:19:2f:94:c1:
aa:a2:ef:23:63:dd:09:c9:7c:62:cc:60:a4:37:d8:48:7f:3f:
b3:0f:9c:ba:2c:23:c0:60:f4:73:b8:75:d8:f2:9e:21:bb:78:
5b:fb:5c:d8:81:66:bb:eb:45:79:d0:9e:fc:0a:2f:d8:72:b7:
44:61:ed:0c:e9:10:19:d1:6c:ea:43:25:37:8b:b7:3c:55:f9:
9a:c1:8f:62:3d:4b:bc:c3:a9:6b:b0:9e:f3:48:aa:a6:0f:01:
e0:f3:25:49:70:62:34:65:43:17:21:08:55:8c:43:49:59:14:
fd:f4:be:cd:5c:a3:8b:93:e0:fe:74:b8:92:08:d7:91:63:36:
9f:13:6f:63:68:f0:56:16:67:dc:c3:fb:48:70:93:2e:a5:a7:
25:8a:79:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:27 2026 by rpki-client