
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/D1k3ts1uNo6F7MLR9igpgGGkXpE.roa
File: D1k3ts1uNo6F7MLR9igpgGGkXpE.roa (raw, json)
Hash identifier: 1irhL4dt/PifIqnlPLkT+bFwIpxsybyJHj8wx6DLCQk=
Subject key identifier: 0F:59:37:B6:CD:6E:36:8E:85:EC:C2:D1:F6:28:29:80:61:A4:5E:91
Certificate issuer: /CN=8A57051C84A2BF078749E7BB34BE19678E131119
Certificate serial: 60
Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/D1k3ts1uNo6F7MLR9igpgGGkXpE.roa
Signing time: Tue 31 Mar 2026 07:47:06 +0000
ROA not before: Tue 31 Mar 2026 07:47:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 14418
IP address blocks: 150.35.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119
Validity
Not Before: Mar 31 07:47:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0F5937B6CD6E368E85ECC2D1F628298061A45E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:ff:15:6d:15:26:27:2b:1d:c8:f1:64:11:
6c:c2:ca:39:45:22:7f:98:69:97:51:89:3c:61:12:
d8:33:ea:ae:d5:65:3a:05:70:4e:78:1a:7c:50:28:
0b:d6:62:43:6c:a3:d3:9a:02:ec:db:36:2c:cf:40:
ae:ca:b5:2d:9c:47:1c:dd:e6:6a:57:a6:bc:39:a3:
d1:96:7e:23:f9:50:4b:ff:fb:10:b7:81:cd:d6:05:
3e:83:e4:e0:48:3e:3b:e4:ef:34:81:86:28:65:d8:
e8:cb:23:f7:ff:ff:d3:62:a5:46:c1:98:6c:d3:51:
ea:d3:f4:19:23:73:ac:64:1c:79:1a:8e:5e:db:a7:
74:36:34:a2:03:b8:19:f4:97:fd:d2:a0:2f:05:d3:
cb:39:7d:1c:31:e3:9e:27:fd:48:58:ef:3d:e1:a0:
58:98:cc:42:97:85:c0:9b:a2:a1:38:6d:ef:c3:e9:
b5:e1:1e:f7:b8:06:cc:a0:09:12:97:86:d3:a8:2b:
2d:0a:7d:da:6b:cd:44:74:ce:94:34:50:5e:eb:61:
b0:d7:2f:0a:67:32:ba:c3:55:56:7c:2c:9c:30:63:
68:39:a7:e2:4d:a8:6c:d7:a6:7d:2e:1f:46:e3:d5:
54:8e:c0:90:d6:76:1a:02:8d:61:d2:78:e9:d0:4a:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:59:37:B6:CD:6E:36:8E:85:EC:C2:D1:F6:28:29:80:61:A4:5E:91
X509v3 Authority Key Identifier:
keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/D1k3ts1uNo6F7MLR9igpgGGkXpE.roa
sbgp-ipAddrBlock: critical
IPv4:
150.35.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:76:57:36:65:74:46:30:cc:4f:17:0f:03:ab:1a:dd:34:9d:
14:f6:42:17:a0:42:1d:35:c9:e8:ce:94:13:0d:fb:a3:29:f7:
f6:8b:26:91:84:73:82:65:87:c0:e2:97:7d:f3:63:d0:3d:92:
74:97:aa:9b:45:ae:dc:86:32:19:0a:76:d1:c3:0e:b4:35:cc:
f2:81:d5:bc:9c:f2:f2:06:90:4d:75:a7:d9:9d:d1:30:55:ca:
66:8a:36:ca:64:68:31:c0:d4:58:2d:ca:37:5b:13:1e:e7:4f:
9d:ad:8a:43:db:8a:b7:f5:04:9a:e6:c0:38:c7:db:74:98:97:
85:55:46:ab:ee:33:04:c5:80:5c:b5:59:5b:6a:ed:0b:33:18:
49:88:cd:a7:91:80:9e:dc:e7:d2:d4:03:47:c3:9b:cc:c8:f2:
2f:01:fc:f9:0f:21:7a:bd:8a:c7:db:94:df:ab:e0:08:ec:6b:
7d:9a:8f:84:ec:82:e7:cb:d1:13:1a:a4:6d:45:da:4a:d6:d0:
80:94:c8:da:e2:2e:fe:11:31:73:64:8d:c0:8b:8c:92:93:d0:
f2:a2:cf:d4:ea:fa:99:47:5f:5c:21:71:f9:18:e8:f0:82:44:
27:b6:c0:d2:14:1a:0e:09:ed:eb:ee:6f:81:45:fc:40:ec:54:
d6:ee:89:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:54 2026 by rpki-client