
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5750/l9E1FQkYwigPmo67UPbAADTvaTo.roa
File: l9E1FQkYwigPmo67UPbAADTvaTo.roa (raw, json)
Hash identifier: bMwId/PSzzMmhgnFnsB4IUch24BwKY07/Oigc8DM8DU=
Subject key identifier: 97:D1:35:15:09:18:C2:28:0F:9A:8E:BB:50:F6:C0:00:34:EF:69:3A
Certificate issuer: /CN=DC7ACE41B68FB5C26ECA14355EF2D74BE3EBCFC5
Certificate serial: 08
Authority key identifier: DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/l9E1FQkYwigPmo67UPbAADTvaTo.roa
Signing time: Tue 31 Mar 2026 08:47:44 +0000
ROA not before: Tue 31 Mar 2026 08:47:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 152874
IP address blocks: 138.252.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC7ACE41B68FB5C26ECA14355EF2D74BE3EBCFC5
Validity
Not Before: Mar 31 08:47:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=97D135150918C2280F9A8EBB50F6C00034EF693A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:d5:de:fc:a1:b4:76:db:27:8b:d7:1c:a5:
c6:45:50:b4:50:49:93:cc:08:0d:03:13:c2:8e:29:
19:73:aa:9d:f7:43:1d:4e:6e:8e:2e:70:3b:af:8e:
78:c3:1b:be:09:c2:e3:ca:4d:8c:01:e0:95:8a:35:
6d:ca:90:f4:e5:c2:fa:20:fb:f4:81:28:3d:96:46:
ef:d7:0b:17:25:87:4f:21:46:c2:75:c2:98:0f:63:
8b:ea:92:eb:40:f0:eb:81:ee:5e:1a:8a:6f:4d:25:
8e:37:8b:ec:b2:4f:d5:ca:5d:2d:f1:28:7f:78:12:
fb:19:11:c3:f0:28:73:dc:2f:e4:7f:df:82:80:9f:
7d:f0:3c:f0:f1:1d:c3:61:8a:98:87:31:bc:31:a7:
23:2e:44:b6:bb:a7:4d:8f:3e:f4:90:45:e3:c1:26:
58:1e:f2:82:22:04:c5:ba:a4:26:06:76:9b:9f:71:
13:de:0e:bf:e1:8f:be:49:e7:28:7a:28:70:16:81:
2c:d5:d0:ab:e9:d7:9d:48:52:90:d7:c9:fa:25:98:
ff:b1:13:75:b1:8a:c6:f1:4f:45:31:b2:d2:91:00:
96:d2:9b:61:74:f1:d4:ab:db:8d:d1:f1:be:ac:c4:
09:d1:85:bc:14:04:eb:72:cb:48:79:9d:0b:32:5a:
fc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D1:35:15:09:18:C2:28:0F:9A:8E:BB:50:F6:C0:00:34:EF:69:3A
X509v3 Authority Key Identifier:
keyid:DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/l9E1FQkYwigPmo67UPbAADTvaTo.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.25.0/24
Signature Algorithm: sha256WithRSAEncryption
da:9f:f1:4c:65:ed:09:93:cc:b0:66:17:fd:75:eb:c4:58:07:
a7:f5:be:50:29:b3:8e:21:55:e5:19:1e:d3:dc:55:ad:44:36:
40:39:82:60:d7:17:97:1c:5a:38:c9:ba:70:74:2a:eb:b3:42:
1e:d7:36:b1:b3:b3:4b:62:9c:5f:ac:65:0c:37:cc:87:e3:4e:
0a:47:fe:6d:76:30:3b:43:cf:5e:00:2e:a9:e9:3e:71:3d:88:
06:ff:f6:b4:37:99:9d:c4:05:d6:96:f9:6f:72:67:20:5e:a8:
19:5b:bd:ec:e6:58:a4:05:3b:5c:4e:08:1c:6d:d0:a1:bf:90:
9a:fa:c5:71:fc:84:c7:83:11:42:37:ce:a4:f1:79:66:c5:1f:
1e:bc:97:8d:0c:25:1f:a6:d2:17:96:24:96:d6:bb:1a:24:28:
47:87:9d:8c:08:a8:1f:22:f7:3b:c8:46:73:99:70:fd:cb:17:
5c:e1:d5:75:14:aa:19:8d:ae:1f:3e:28:60:c6:fa:3a:19:1a:
a9:83:27:1c:dc:bc:fc:86:56:1b:1a:7f:35:e7:fa:e3:ff:a7:
9d:9f:96:c7:f7:57:d0:8e:d7:c3:69:71:1f:b0:8a:df:d8:40:
6b:0f:7d:95:34:e6:04:f0:06:04:7d:e8:91:3d:7c:a1:14:cb:
c0:cd:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:22:20 2026 by rpki-client