
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/UOHMOVJhswnqbDdxhwzda5G-Y2U.roa
File: UOHMOVJhswnqbDdxhwzda5G-Y2U.roa (raw, json)
Hash identifier: CiFPpil4YbeICv+dOHiIZbycHzagD0rI0h9Lnku9Bd8=
Subject key identifier: 50:E1:CC:39:52:61:B3:09:EA:6C:37:71:87:0C:DD:6B:91:BE:63:65
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 015F
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/UOHMOVJhswnqbDdxhwzda5G-Y2U.roa
Signing time: Tue 31 Mar 2026 07:30:30 +0000
ROA not before: Tue 31 Mar 2026 07:30:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7530
IP address blocks: 210.231.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Mar 31 07:30:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=50E1CC395261B309EA6C3771870CDD6B91BE6365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:74:df:1c:51:ba:f2:20:9b:39:f2:d0:ca:91:
44:12:bc:6f:d1:c2:e9:ed:54:c1:7d:09:e4:5a:8a:
ef:8d:29:dd:65:21:fc:08:40:66:1d:6f:92:49:49:
2f:38:44:b9:f2:1e:1c:2f:f6:f7:3e:ce:9f:e9:08:
01:41:a9:39:8d:ab:45:e9:82:e5:8b:f2:9c:fa:52:
4d:aa:66:70:41:c4:33:3a:eb:c3:b7:6f:df:e1:f0:
14:52:82:5c:f4:d3:e7:a2:54:12:fc:47:14:38:4b:
77:13:e9:6e:3d:01:32:55:99:5f:5b:4b:8b:09:83:
c2:e8:98:d2:a2:65:22:34:59:ce:b6:55:70:ac:bf:
67:3a:bb:98:ec:23:51:e5:bd:fd:e5:1c:6c:37:4f:
41:88:8f:45:cd:fc:fb:cb:0b:e6:f3:71:63:f0:a0:
e7:e6:3a:f7:8f:09:62:41:98:0f:ea:4f:6c:bb:9c:
03:5b:bd:eb:1b:a5:67:b3:19:eb:6b:ef:59:43:62:
c8:5c:f5:73:15:e8:54:b2:e9:7c:43:ce:66:53:d5:
2f:6a:e7:5e:b1:e6:0d:3b:f2:a6:47:83:b7:49:ff:
99:b3:17:a2:fe:aa:c1:77:bc:16:17:1f:36:46:00:
5c:ca:7c:77:24:99:f6:f0:79:7a:c9:55:b2:b5:91:
e3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E1:CC:39:52:61:B3:09:EA:6C:37:71:87:0C:DD:6B:91:BE:63:65
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/UOHMOVJhswnqbDdxhwzda5G-Y2U.roa
sbgp-ipAddrBlock: critical
IPv4:
210.231.220.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:7e:9d:f3:f5:ab:70:4b:b2:3f:6b:0d:e6:d9:8e:ba:de:c4:
ba:32:61:c8:63:fa:3b:b2:e2:8e:33:a9:0b:86:a0:ce:40:ca:
a8:b2:b8:9d:03:25:c1:b5:7a:8b:77:cf:96:39:2b:82:f2:0c:
88:bd:e9:1d:2b:95:d8:d2:f6:46:d8:ba:59:21:31:90:50:4a:
95:27:e6:87:2c:bc:1c:e7:d2:7f:14:a8:6c:be:ef:d9:c7:32:
e1:14:b3:0f:93:d3:c9:82:3b:99:f7:26:27:96:bb:f2:85:7a:
b2:8f:3d:17:64:f9:f1:03:5b:a0:94:57:06:94:2b:ed:4c:4d:
76:66:bc:75:90:3a:0f:cb:a5:72:4a:b8:3d:38:f6:aa:1d:b7:
dc:f5:09:fe:7e:bd:d8:e4:6a:95:a7:67:a2:ce:ed:fd:78:58:
cf:a6:79:b5:00:15:f1:6f:f2:a7:f9:dd:13:f1:7f:ad:ff:a2:
3d:c6:70:d1:b1:7a:68:b8:c7:69:18:33:32:d7:df:40:c5:56:
99:c6:f0:a8:ba:8a:09:2c:a6:5b:89:dd:46:73:70:02:7a:6f:
8c:3c:8b:0a:86:3b:9b:de:8e:9b:0d:03:5c:65:65:06:69:82:
63:4b:e6:49:12:8c:f4:f2:4f:64:0c:14:1f:90:bc:a2:b4:c9:
30:8a:11:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:19 2026 by rpki-client