
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4QH08ZXn_YBwJwkkB3-w5RZRDSE.roa
File: 4QH08ZXn_YBwJwkkB3-w5RZRDSE.roa (raw, json)
Hash identifier: uSOXTdKP8SQy7+eFV6YsDlUa5GO3EP4y5JlKhKBzyeI=
Subject key identifier: E1:01:F4:F1:95:E7:FD:80:70:27:09:24:07:7F:B0:E5:16:51:0D:21
Certificate issuer: /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial: 91
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4QH08ZXn_YBwJwkkB3-w5RZRDSE.roa
Signing time: Tue 31 Mar 2026 07:40:55 +0000
ROA not before: Tue 31 Mar 2026 07:40:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7514
IP address blocks: 113.192.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
Validity
Not Before: Mar 31 07:40:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E101F4F195E7FD8070270924077FB0E516510D21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:1e:96:89:39:2b:e4:d5:75:99:67:49:ef:
64:95:61:53:05:55:1c:e2:43:d7:df:72:8d:54:ae:
56:a0:b8:f0:13:5f:79:b2:a9:2d:28:3e:8d:72:f4:
f1:9a:1a:96:d7:17:ca:4f:40:91:44:d2:41:a2:81:
0b:71:c9:a6:f7:00:60:4b:d3:a5:60:e1:76:3e:f3:
e0:98:0a:fd:cf:48:db:f7:b3:a3:21:57:10:54:12:
d2:19:89:24:64:65:81:55:59:07:4e:2f:fe:72:d0:
b3:ac:25:92:81:e4:d5:5b:cb:1f:ad:68:a7:4a:26:
95:6d:73:bf:03:57:5b:a7:18:13:12:a5:ed:ec:ad:
bf:f4:73:3e:e8:b3:6b:64:29:78:c1:b2:0c:6b:be:
52:ee:75:2c:21:65:df:4f:0c:34:0c:83:9e:37:18:
26:41:32:fb:97:5f:2a:6c:4b:0f:98:b4:9d:59:78:
29:ff:08:84:3e:67:4f:4e:ec:23:69:42:df:06:6d:
82:68:94:45:87:25:1b:de:31:63:fe:1e:70:aa:4b:
7f:4a:34:86:56:72:df:88:10:d6:fa:4a:9a:f3:58:
66:9c:77:9f:76:bc:b8:b9:11:1d:8c:a6:8b:38:14:
ef:d1:17:7a:36:a9:be:95:b5:cb:50:bf:01:22:fc:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:01:F4:F1:95:E7:FD:80:70:27:09:24:07:7F:B0:E5:16:51:0D:21
X509v3 Authority Key Identifier:
keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4QH08ZXn_YBwJwkkB3-w5RZRDSE.roa
sbgp-ipAddrBlock: critical
IPv4:
113.192.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5e:3b:32:1d:54:c2:e6:c5:96:45:99:01:ec:c3:eb:bd:71:29:
f3:9e:be:73:6c:23:84:e7:c3:6c:58:7d:cf:25:d7:01:eb:79:
76:03:3b:c7:e6:cf:89:4e:8e:02:a2:76:96:90:47:5b:1b:10:
e7:67:b0:c6:8a:90:c8:31:86:a4:f3:ad:a3:61:4c:ba:4c:11:
b0:74:33:39:e7:c7:bd:5a:bf:c4:1f:a9:b2:e3:1a:2c:3a:1e:
63:62:a1:d1:cb:41:0e:6c:ec:af:bc:b1:7b:be:d0:0e:96:ac:
28:42:8b:1b:e1:b2:c1:b1:d0:89:c0:32:b5:ca:e6:2b:b5:67:
c0:05:55:90:a1:13:2a:68:d4:a6:40:4b:fd:fb:5a:bf:ba:27:
71:03:fc:d7:1f:06:0f:36:36:2e:93:80:05:1e:fd:fe:3f:1c:
92:6e:30:0e:cc:5c:63:10:31:c7:c1:98:01:cf:67:a2:54:a0:
2d:40:ba:dd:df:59:e7:6c:9c:04:02:ac:89:0f:55:36:61:33:
cc:a4:9a:aa:e0:f4:b5:e8:ee:27:d8:b8:04:9c:71:4f:d9:21:
4c:dc:00:39:fd:66:18:da:e7:71:8f:8d:0b:0c:2a:c7:c9:96:
b0:42:e7:17:09:f3:c5:9d:ca:2a:78:18:a9:42:bb:1f:e1:f2:
7a:61:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:33 2026 by rpki-client