
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/0H88wzc66gO7FwTiPNfNqZdrGhE.roa
File: 0H88wzc66gO7FwTiPNfNqZdrGhE.roa (raw, json)
Hash identifier: NnPcicQdb4/39OUABMGb8GBTC5Sf6OBi4auuvbkyThk=
Subject key identifier: D0:7F:3C:C3:37:3A:EA:03:BB:17:04:E2:3C:D7:CD:A9:97:6B:1A:11
Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial: 9D
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/0H88wzc66gO7FwTiPNfNqZdrGhE.roa
Signing time: Tue 31 Mar 2026 08:37:11 +0000
ROA not before: Tue 31 Mar 2026 08:37:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7679
IP address blocks: 125.56.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Validity
Not Before: Mar 31 08:37:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D07F3CC3373AEA03BB1704E23CD7CDA9976B1A11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:66:d3:e6:62:38:50:cb:b2:d4:7e:6c:24:
1c:f5:4d:c5:f4:a5:df:58:e6:ab:3a:1e:4d:40:48:
06:67:fe:fc:5c:99:0f:db:fd:e7:8b:97:b3:31:79:
90:c1:2e:69:01:24:67:b9:60:d8:f4:d6:a9:a2:1c:
22:c3:44:cb:8c:8f:08:94:26:d7:c5:75:cc:60:32:
59:56:37:7e:e8:2d:1b:de:14:93:37:00:6b:c5:65:
19:95:6b:e4:c5:98:d2:5e:37:fd:95:d8:2e:6c:28:
99:4d:6e:8f:ed:9b:d9:79:f7:09:0e:fb:19:86:25:
06:4f:a1:63:7e:2a:0b:43:8c:ba:c4:02:47:39:0d:
67:75:ca:a7:d6:58:3c:55:cd:c7:67:4b:7b:ca:2f:
03:77:b8:bb:28:12:fa:d6:a3:21:75:cf:e7:35:22:
97:4d:c2:92:a7:cb:1c:fb:43:25:b5:de:72:a6:79:
e7:a6:e5:33:8f:af:ff:9e:05:25:9d:d8:ff:0f:ec:
62:d6:69:29:ee:b0:d3:cf:ae:5d:47:97:e7:c2:56:
79:f0:b5:af:7d:c8:1e:84:3f:78:6e:36:59:9a:ac:
d8:e9:8b:eb:3e:cd:cc:8a:55:f0:88:ea:39:ea:7a:
10:95:00:20:d1:4f:05:93:b2:1e:aa:08:03:72:75:
9a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:3C:C3:37:3A:EA:03:BB:17:04:E2:3C:D7:CD:A9:97:6B:1A:11
X509v3 Authority Key Identifier:
keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/0H88wzc66gO7FwTiPNfNqZdrGhE.roa
sbgp-ipAddrBlock: critical
IPv4:
125.56.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a9:4f:9b:71:d9:a9:df:8a:e7:de:a1:c5:95:62:bd:c5:e0:03:
e8:e4:99:97:2d:e9:e0:7e:57:0e:2a:ef:fd:da:d7:cc:4b:e2:
1c:7f:61:d8:48:fb:4c:95:2d:a5:47:94:b4:f9:6a:92:14:46:
b1:a2:d4:4e:b7:f7:5d:c9:56:67:0c:23:0f:0b:60:c6:02:a7:
c1:dc:2c:84:cd:c7:82:74:6f:d0:8f:84:2c:7b:68:d3:53:3b:
88:0f:38:25:a5:ff:10:6a:39:b4:62:7b:e1:0f:a2:fa:1e:a5:
18:c6:4f:22:08:1d:ef:94:eb:e0:57:d3:ba:e2:0c:ef:ed:60:
27:03:3d:36:09:19:7b:d8:43:64:7e:19:70:20:25:0f:f7:c5:
94:37:9d:e5:ef:0c:d8:69:ff:fb:25:8d:6a:5a:df:db:59:18:
8b:5a:12:52:65:47:02:e2:8c:4e:bb:0d:31:b5:8d:3c:dc:b9:
28:9a:7d:99:ea:6e:79:79:63:18:01:f3:70:37:a8:35:e1:85:
8f:12:99:54:77:94:70:95:2f:1d:48:0c:7d:b9:e9:03:97:b5:
e3:7b:c5:b0:35:26:55:cb:61:ab:09:fe:23:58:e8:b9:cc:65:
71:92:64:6b:e1:35:1e:4e:5a:74:46:96:1f:2d:6f:06:e4:5f:
ae:d5:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:37 2026 by rpki-client