
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/OdmK9oFpY2chyVRTQwq8J36ibW8.roa
File: OdmK9oFpY2chyVRTQwq8J36ibW8.roa (raw, json)
Hash identifier: 4OTeblOiVAgqC5P2Cp3+9R4PQdk2+j2MopZFfPZajrA=
Subject key identifier: 39:D9:8A:F6:81:69:63:67:21:C9:54:53:43:0A:BC:27:7E:A2:6D:6F
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 027E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/OdmK9oFpY2chyVRTQwq8J36ibW8.roa
Signing time: Tue 31 Mar 2026 07:33:33 +0000
ROA not before: Tue 31 Mar 2026 07:33:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4713
IP address blocks: 114.160.0.0/11 maxlen: 11
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638 (0x27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 31 07:33:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=39D98AF68169636721C95453430ABC277EA26D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:1a:4f:61:4a:39:21:10:b3:10:31:fe:8d:
eb:e0:34:06:1e:04:c0:5b:a6:90:f4:d7:1c:c8:48:
b1:53:78:ec:e3:f1:2d:ff:bd:53:90:dd:13:16:be:
8c:95:7f:65:c2:97:aa:df:9e:31:64:9b:06:f2:78:
b4:b8:75:b6:ad:a6:7d:92:cd:a2:7e:5d:c4:e7:8a:
66:7a:22:f7:04:44:9d:68:30:b4:02:cf:57:dc:9b:
90:e6:e0:9e:7e:4e:a5:c1:ee:83:9b:ff:99:62:88:
69:3d:07:df:ed:c0:1c:1b:1a:3d:5a:52:7c:10:6f:
51:13:b2:82:e3:1c:a3:37:86:3b:1f:95:66:ed:7a:
48:6c:27:b8:d5:49:9c:9f:f3:0c:55:f1:e1:41:f4:
8b:0e:83:dc:43:ec:58:7e:1f:79:c7:35:cb:2b:3f:
2a:46:27:d1:c7:b3:f4:d1:37:b3:67:1f:82:0b:10:
4a:6b:21:2a:9f:28:ac:6c:89:7a:cc:e1:33:31:33:
f2:1b:ad:0a:28:b5:29:a8:02:b8:8d:37:7f:cc:01:
26:06:61:16:77:17:3f:e6:48:50:cc:c5:70:e7:a5:
16:15:db:d0:ed:32:4a:40:bb:56:c8:5e:17:71:64:
95:1c:79:fa:16:fc:cf:8c:1f:44:5d:b2:4f:70:0f:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:8A:F6:81:69:63:67:21:C9:54:53:43:0A:BC:27:7E:A2:6D:6F
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/OdmK9oFpY2chyVRTQwq8J36ibW8.roa
sbgp-ipAddrBlock: critical
IPv4:
114.160.0.0/11
Signature Algorithm: sha256WithRSAEncryption
95:50:ec:fd:c1:5a:8e:01:2e:4f:cd:bf:50:f0:ae:ad:91:07:
5f:2e:6d:5a:2c:12:3f:97:15:3f:f8:cd:6a:84:07:22:d4:b6:
87:1f:30:e4:43:b5:49:e7:dd:5b:13:8e:1b:10:1d:0c:5d:81:
5a:79:09:92:50:32:b8:90:6d:95:8b:e6:d7:15:58:61:c2:22:
58:af:32:d7:62:21:ec:57:73:4a:61:61:a1:d0:70:c8:a8:c9:
30:23:0b:f0:e5:b3:ec:cd:a3:20:f5:5c:7a:c9:57:53:7f:97:
bd:85:9a:df:fb:5b:28:6f:f0:70:c8:aa:3b:0a:33:a3:d7:2a:
2d:e8:6f:c9:64:79:e1:8b:62:23:0d:f7:12:40:6e:fe:78:e1:
d1:a8:1b:6c:0c:7c:8e:12:82:22:4e:f4:03:2e:e7:7a:12:07:
82:8d:97:b9:4f:0b:4d:72:18:a5:34:f5:29:0b:6a:df:2b:91:
38:80:b3:06:23:1c:cf:ad:a7:97:e1:0c:3c:ae:54:c1:4b:76:
03:db:e9:a9:44:f1:bb:84:a2:46:89:96:85:bf:c1:c2:0b:78:
dd:3a:21:c4:70:0d:2d:26:0a:6c:48:d6:cf:8e:68:59:83:ec:
0c:56:66:4c:69:95:2b:3c:a1:36:d4:72:3f:dc:be:12:9c:05:
83:20:6f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:11 2026 by rpki-client