
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/EkEig6l1089pQGJgE62AD6YdAvY.roa
File: EkEig6l1089pQGJgE62AD6YdAvY.roa (raw, json)
Hash identifier: acrVhLJr7b+5hdjdYiSQaszF5vyYfDr4xjLVZLYjIFI=
Subject key identifier: 12:41:22:83:A9:75:D3:CF:69:40:62:60:13:AD:80:0F:A6:1D:02:F6
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 79
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/EkEig6l1089pQGJgE62AD6YdAvY.roa
Signing time: Tue 31 Mar 2026 07:52:00 +0000
ROA not before: Tue 31 Mar 2026 07:52:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63789
IP address blocks: 202.9.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Mar 31 07:52:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=12412283A975D3CF6940626013AD800FA61D02F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:aa:1b:ba:b3:c0:e3:31:0b:e0:b1:c5:73:6c:
08:61:48:8e:46:83:13:b6:59:e1:d6:2e:a9:e5:43:
77:d6:ab:88:11:22:ee:7c:4c:43:0d:fa:ba:15:e5:
d3:6a:16:fe:d5:45:8d:63:86:fe:b3:a7:09:8c:50:
e8:cc:b2:b3:08:77:53:42:54:83:89:da:4f:d4:4b:
ac:dd:a9:5a:d3:dc:fa:ee:b0:8a:1e:20:6a:74:85:
cd:09:00:90:ae:f1:f7:35:ea:cb:6e:54:80:bd:0e:
a2:e0:a9:1f:e3:92:48:4b:aa:c1:7f:7a:87:6b:9e:
1f:ba:f3:82:74:88:a7:20:22:d7:ae:ba:b5:ad:46:
d7:27:53:86:0c:ec:e2:b5:bd:79:17:08:10:26:d6:
79:54:72:21:4c:b8:0a:c5:fa:63:a9:04:61:8f:6e:
b6:60:f0:46:13:b2:b3:2c:20:23:7c:41:08:ba:c5:
35:22:8e:ef:26:54:09:a7:86:95:77:8b:88:79:b7:
fa:d0:e3:00:7c:f6:24:17:22:6e:30:84:95:c6:de:
e8:e8:01:f4:c3:ec:4d:f2:e8:e1:b9:3d:43:44:b8:
2f:40:98:92:c3:ec:f8:a6:38:d9:0c:ca:d3:65:bd:
9f:37:a4:d5:49:45:59:92:97:dc:80:ab:85:a6:37:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:41:22:83:A9:75:D3:CF:69:40:62:60:13:AD:80:0F:A6:1D:02:F6
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/EkEig6l1089pQGJgE62AD6YdAvY.roa
sbgp-ipAddrBlock: critical
IPv4:
202.9.208.0/23
Signature Algorithm: sha256WithRSAEncryption
11:93:d2:60:fa:58:e0:08:15:97:03:15:d8:36:f5:4a:52:98:
08:5c:e3:90:48:17:3b:1a:e5:eb:b6:81:ba:ce:79:08:80:fc:
a5:f6:93:cf:8a:c6:59:89:7c:80:56:87:38:ff:e1:30:af:fd:
59:13:4a:a3:97:8a:5d:3e:86:11:9f:67:a2:48:09:f2:8d:53:
94:be:66:71:12:ab:4c:c4:fc:57:59:5c:70:ee:a2:27:30:4b:
3a:f0:bd:cb:63:ae:df:a0:ef:16:88:f6:5d:cb:1c:cc:a6:6a:
da:34:17:0c:2b:72:46:ad:f5:4f:4d:aa:5a:13:4b:2b:08:5f:
23:01:4f:5a:fb:26:3b:c9:21:aa:5d:81:1d:66:ce:ee:99:fb:
77:5a:64:f1:b6:be:34:c2:20:78:da:c9:58:4e:5f:39:70:b2:
89:01:0c:88:8b:bb:88:40:d6:0e:54:9e:b5:cd:54:98:04:03:
c3:ce:30:7f:1b:59:15:78:d5:23:2d:b1:81:18:3e:98:5f:c4:
83:8e:49:1a:de:fd:9c:d4:ad:f8:81:50:e2:6d:d8:4c:5d:fe:
5e:b3:76:3e:59:ef:8e:5c:c9:91:25:d1:a1:6e:6f:4c:be:95:
89:dc:fb:19:d8:01:bd:45:fb:6e:21:25:83:de:c7:e8:52:79:
09:e2:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:36 2026 by rpki-client