
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/dzjmR7UJ9qjnQzb36xYEfKsG7MQ.roa
File: dzjmR7UJ9qjnQzb36xYEfKsG7MQ.roa (raw, json)
Hash identifier: o0isKrXKK01J3K2c6C1W8EQTJ2FSV4+QCAbfvzLMnAk=
Subject key identifier: 77:38:E6:47:B5:09:F6:A8:E7:43:36:F7:EB:16:04:7C:AB:06:EC:C4
Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial: 5E
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/dzjmR7UJ9qjnQzb36xYEfKsG7MQ.roa
Signing time: Tue 31 Mar 2026 08:23:26 +0000
ROA not before: Tue 31 Mar 2026 08:23:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9615
IP address blocks: 153.125.0.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Validity
Not Before: Mar 31 08:23:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7738E647B509F6A8E74336F7EB16047CAB06ECC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:d5:41:86:ef:da:8d:d1:a0:00:50:d2:86:
5c:ef:b6:54:d4:0a:1d:ef:1d:b2:4b:88:c7:5f:63:
37:1b:28:33:c7:41:23:30:02:b2:21:be:02:9d:d2:
f9:3e:01:f0:7c:ab:eb:74:9c:b4:43:39:61:f3:3d:
02:e8:8e:8f:cd:72:9a:a1:fa:e7:36:61:91:03:d4:
b4:57:99:82:b1:cd:04:3c:86:13:02:04:ba:fe:f2:
7f:41:e0:a0:36:f7:73:3a:6d:b9:d7:d5:1b:e7:9f:
80:7f:87:42:50:1e:ed:04:e6:a6:98:3c:9c:95:c8:
e7:f8:38:a9:4d:6f:7a:33:e3:41:bf:40:ce:0a:19:
9b:43:0c:33:46:8b:7a:2d:aa:3a:97:e7:89:9a:43:
50:ea:d2:40:02:d2:3c:f1:b6:45:1b:2d:3c:3f:7e:
90:36:f1:ce:1c:80:a9:1b:e4:75:d3:32:d3:dd:5d:
47:42:70:15:1e:dc:ac:05:a4:a1:25:ee:c1:91:df:
ee:a3:81:0d:eb:06:e0:d4:70:f7:98:c1:6f:8c:19:
79:0b:85:c1:ea:9b:7c:3f:a2:c9:57:34:b7:f3:e8:
59:58:2c:b3:59:3b:9e:2e:0f:0e:7e:e5:10:de:1c:
6d:23:db:c9:84:36:e5:4d:9e:35:f7:34:3a:95:33:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:38:E6:47:B5:09:F6:A8:E7:43:36:F7:EB:16:04:7C:AB:06:EC:C4
X509v3 Authority Key Identifier:
keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/dzjmR7UJ9qjnQzb36xYEfKsG7MQ.roa
sbgp-ipAddrBlock: critical
IPv4:
153.125.0.0/17
Signature Algorithm: sha256WithRSAEncryption
82:b2:3f:23:e8:b1:d8:30:ce:8c:2c:b9:69:85:24:f1:81:fa:
d3:9b:19:2c:5d:37:d4:06:77:ee:bd:59:f5:26:b5:dd:16:e2:
e7:67:16:4f:00:c3:8f:a6:78:da:d0:f7:65:7c:97:14:b1:e9:
38:ac:cb:8c:35:d0:4f:25:11:44:18:11:20:87:43:56:bd:af:
70:61:66:d4:7f:01:82:1c:2d:0b:1e:89:2b:f0:ef:0f:ff:65:
ac:36:40:04:6b:6e:96:6d:b3:0a:84:48:08:a9:4a:a5:49:3b:
16:ed:03:0a:85:0c:8b:1c:6e:6b:fc:4c:b5:ad:3d:78:c7:6b:
43:94:2a:fb:f2:30:66:32:27:3b:55:53:15:16:00:81:10:57:
39:e7:2c:ca:5e:7e:ee:b9:17:38:e8:8c:2e:0c:d2:a8:fa:a6:
d6:b3:8a:da:22:0a:11:06:10:af:5d:58:4a:3c:06:86:c4:ca:
74:ad:11:4c:c7:eb:cc:89:f4:3e:ae:aa:6c:f9:f6:4e:ef:8b:
e5:9c:19:a2:a8:59:08:8f:b4:d6:ec:f1:0e:4c:d9:15:9e:39:
dc:40:de:51:c5:f0:10:fb:ff:15:ed:c1:63:06:e7:68:31:ac:
1c:7b:49:6f:5a:28:6c:ea:d7:44:2b:de:f6:23:99:25:0f:1b:
fa:3f:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:35 2026 by rpki-client