
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/cj5qeZLObXO7rnePFE_BE0iXPVI.roa
File: cj5qeZLObXO7rnePFE_BE0iXPVI.roa (raw, json)
Hash identifier: RVFTf/zhRqiOy6YIBZ9ztMNWOe7hZPK62F/N0tXfhJo=
Subject key identifier: 72:3E:6A:79:92:CE:6D:73:BB:AE:77:8F:14:4F:C1:13:48:97:3D:52
Certificate issuer: /CN=DBCABDC53755C35CD5BC8744886E745742C7FED0
Certificate serial: 0E
Authority key identifier: DB:CA:BD:C5:37:55:C3:5C:D5:BC:87:44:88:6E:74:57:42:C7:FE:D0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/cj5qeZLObXO7rnePFE_BE0iXPVI.roa
Signing time: Tue 31 Mar 2026 08:46:14 +0000
ROA not before: Tue 31 Mar 2026 08:46:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131958
IP address blocks: 157.14.64.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 03:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBCABDC53755C35CD5BC8744886E745742C7FED0
Validity
Not Before: Mar 31 08:46:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=723E6A7992CE6D73BBAE778F144FC11348973D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:bf:66:bb:dc:8f:85:6b:95:5b:ef:14:5b:
ac:bb:06:cd:c7:03:0b:fe:43:f2:ca:9f:35:f4:96:
48:06:35:49:e0:51:85:86:66:61:f3:3c:94:c6:ea:
16:7f:37:0d:09:f9:f4:0b:3f:0a:28:8e:4b:69:e9:
81:60:09:3e:19:57:fb:31:e4:68:94:8c:78:a4:da:
ea:1b:ea:ed:b4:fb:7f:62:2d:1f:e5:9c:68:73:e2:
88:16:b9:09:15:0f:70:6f:19:c3:21:ef:53:13:87:
80:df:e1:76:26:ae:d8:84:0b:c5:c9:5f:c3:38:bb:
6e:04:89:60:2f:e7:60:d5:75:7d:85:a8:05:62:51:
d5:c1:f6:13:6e:e1:27:cc:62:98:51:6e:c5:f8:25:
5a:b5:66:6c:f5:d2:57:69:6e:48:ed:e4:87:01:1b:
43:2f:71:67:6e:3f:77:03:57:16:d0:49:88:f2:49:
84:04:9c:86:34:25:8f:eb:fc:b9:53:c7:ac:74:5f:
32:56:eb:c6:7c:3d:2a:22:26:9e:99:ac:14:32:76:
9a:4b:f7:0a:a1:8b:0d:41:55:06:6f:d5:18:7e:e8:
bf:99:c2:92:1d:25:f3:8f:4e:0b:4d:38:78:51:b0:
c6:e9:7d:91:4f:8c:62:ca:a2:dd:1f:50:16:28:d7:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3E:6A:79:92:CE:6D:73:BB:AE:77:8F:14:4F:C1:13:48:97:3D:52
X509v3 Authority Key Identifier:
keyid:DB:CA:BD:C5:37:55:C3:5C:D5:BC:87:44:88:6E:74:57:42:C7:FE:D0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/cj5qeZLObXO7rnePFE_BE0iXPVI.roa
sbgp-ipAddrBlock: critical
IPv4:
157.14.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:16:5b:d0:dd:e5:5b:11:7f:54:5d:60:65:36:42:b6:57:83:
d8:eb:db:68:6b:6d:6f:94:50:38:94:4b:53:20:58:26:4a:42:
bb:20:22:2c:a4:c7:58:46:01:85:80:71:06:49:1b:91:83:e2:
6c:02:95:7e:a6:e9:cc:4c:13:3e:a5:39:c1:e8:d2:60:d4:dd:
a0:5c:70:84:1d:29:65:d3:e6:42:0c:d2:5e:62:d5:d9:62:28:
37:1e:df:ff:22:90:4b:48:f8:d5:de:42:e0:61:28:0c:00:3c:
38:73:75:3d:8e:ee:0e:ef:11:a5:50:15:72:4e:f4:ab:67:ff:
31:16:e2:b5:65:5b:20:80:a9:b8:93:88:01:d7:43:2f:16:89:
0f:12:87:a3:84:b1:36:1a:34:82:ca:f3:f6:5c:83:c6:81:44:
6d:67:c5:10:cd:23:f8:e8:f7:fb:cf:d2:f2:43:a2:89:d8:92:
39:fa:b3:09:75:ba:d5:aa:b9:02:0f:67:d6:3b:49:76:3f:ea:
46:5b:57:f1:47:ed:29:4f:99:bd:5f:21:b9:4d:24:f3:3d:33:
2c:9f:65:8e:7f:0c:de:87:b5:d3:98:d9:d0:95:c3:a3:67:d2:
f3:6a:72:b8:3e:3f:e8:c4:86:a5:42:b0:ce:14:00:db:85:4e:
c7:e6:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:35:02 2026 by rpki-client