
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5I1vYK25b65i6oJPLiLdunjZWmg.roa
File: 5I1vYK25b65i6oJPLiLdunjZWmg.roa (raw, json)
Hash identifier: rG1Sp6tCQ4nQjCoBRgDwfC9zUoVgSFTNhC9kVaRx+Y8=
Subject key identifier: E4:8D:6F:60:AD:B9:6F:AE:62:EA:82:4F:2E:22:DD:BA:78:D9:5A:68
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 9B
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5I1vYK25b65i6oJPLiLdunjZWmg.roa
Signing time: Tue 31 Mar 2026 07:35:20 +0000
ROA not before: Tue 31 Mar 2026 07:35:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 103.10.112.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E48D6F60ADB96FAE62EA824F2E22DDBA78D95A68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4a:0e:c9:ee:4a:97:76:34:cc:61:d7:5e:fe:
d1:29:1c:2b:62:d3:0b:b9:d7:44:9b:dc:63:50:e0:
80:70:c8:a8:40:cb:ca:72:ee:a3:c1:27:c7:6e:e9:
ea:f9:c6:36:c1:8b:33:31:0b:ed:cc:87:df:09:2c:
9a:8c:11:16:56:98:e5:6a:86:0b:91:20:60:11:d4:
8f:3b:05:bc:68:ac:16:f6:ff:7d:c1:07:76:e8:c6:
0c:02:d1:ce:0d:38:4b:64:f6:00:47:3e:e9:ca:6e:
f2:f6:96:67:67:a3:5e:c2:a1:ac:f1:81:94:02:b8:
39:bc:29:67:d0:1c:00:d0:2f:c8:04:03:ee:73:da:
f8:e2:76:d3:8e:64:82:46:23:25:22:6d:0e:a8:5c:
1f:d9:0c:80:45:b8:9e:8c:4e:6a:45:2f:2c:ed:88:
c8:7a:23:86:6d:86:84:cb:0c:4d:47:cb:3e:c5:53:
78:e0:4e:57:f0:5d:7e:67:55:72:05:d3:dd:27:6d:
b7:51:f7:bb:0d:66:af:55:c3:5b:0b:a7:4b:90:fa:
37:9a:e0:fe:31:eb:80:14:1a:77:89:d1:1c:bb:80:
a3:a9:2f:b9:90:ce:b9:2a:02:de:e9:19:4d:51:76:
20:05:8c:b5:3d:81:8f:e5:79:8d:5e:9f:d3:53:76:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:6F:60:AD:B9:6F:AE:62:EA:82:4F:2E:22:DD:BA:78:D9:5A:68
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5I1vYK25b65i6oJPLiLdunjZWmg.roa
sbgp-ipAddrBlock: critical
IPv4:
103.10.112.0/22
Signature Algorithm: sha256WithRSAEncryption
14:bf:a3:06:cd:96:c2:c2:a6:53:fd:92:8f:80:2e:f1:cc:6b:
1f:fe:d1:8f:e4:40:1e:fb:31:76:04:7a:ed:11:88:98:34:f2:
84:40:97:5b:0f:e1:ed:1c:0a:04:a6:3c:36:a6:a2:26:21:81:
1a:bb:c8:74:07:d6:11:c2:c8:14:0f:cc:c3:41:e7:cf:99:15:
7e:8d:fe:20:cb:62:c4:5c:b5:b9:3f:1d:67:1e:e0:f7:25:93:
c6:0d:89:de:a2:12:b4:54:71:11:aa:e2:d7:44:ef:ea:97:8c:
48:96:79:f0:64:30:97:e7:60:83:ca:26:df:e5:9a:4d:c2:78:
02:75:78:93:1f:6d:28:ae:12:71:94:79:d4:bc:49:a5:7d:27:
c6:c2:49:26:3c:0c:a8:4c:a4:e7:d9:fe:e7:3e:9d:00:b7:51:
8f:28:64:a5:8f:cc:c3:ab:43:f9:79:b3:c6:d1:b1:4a:8e:b6:
0a:f9:eb:e5:10:fc:a6:8b:a9:02:00:13:07:34:89:83:8a:1b:
2a:e9:74:41:7a:5b:3a:fe:bc:cd:e0:a1:85:38:84:5b:ed:14:
54:f6:27:10:00:05:03:5b:cd:f2:81:0e:0b:79:1b:62:fe:a9:
00:76:16:3d:0c:f2:d0:9d:92:3d:74:27:34:93:57:dc:18:02:
3a:12:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client