
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xEB7sz2tlA9m2aZW7Riuh02BOK4.roa
File: xEB7sz2tlA9m2aZW7Riuh02BOK4.roa (raw, json)
Hash identifier: vO/o8m/r4wO5d8Ehr9xYDzzLz2zNqAv/yvu0MJkmF9E=
Subject key identifier: C4:40:7B:B3:3D:AD:94:0F:66:D9:A6:56:ED:18:AE:87:4D:81:38:AE
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0625
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xEB7sz2tlA9m2aZW7Riuh02BOK4.roa
Signing time: Tue 31 Mar 2026 08:21:33 +0000
ROA not before: Tue 31 Mar 2026 08:21:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 61.44.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:21:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C4407BB33DAD940F66D9A656ED18AE874D8138AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:3d:1b:f5:5c:4e:ae:21:fe:f9:81:09:60:
17:1d:22:a1:c2:ec:c5:7c:9f:3c:3d:6e:ff:1b:7f:
0d:86:c6:8c:f9:e7:5b:97:b4:78:f6:9f:74:6f:82:
2f:3b:70:fe:6a:b7:0b:69:d5:00:b7:2a:db:b4:34:
7d:5a:de:0c:ca:50:81:c9:f8:d6:97:42:1e:48:ba:
49:cb:06:b2:2e:6b:e2:87:9b:50:1e:54:22:f8:5b:
50:29:cc:b5:79:ae:9a:1b:98:31:35:30:4b:99:a1:
5a:2e:f5:0e:7d:3f:a4:0d:79:17:f1:e4:33:6a:0f:
94:cc:74:cd:6a:12:67:75:63:3f:43:c6:a0:e7:1a:
98:d5:5d:a3:9f:cf:86:78:bc:8c:e4:8c:c5:f7:d8:
85:3b:ab:e3:cb:f0:fc:d4:6b:4f:db:4a:71:ec:2f:
6b:fb:8b:15:ee:7f:0f:fc:3b:4f:1e:26:bb:a2:fc:
03:d3:8f:c2:a8:d0:60:1d:cd:db:70:7c:50:5c:fd:
9c:e2:83:dd:89:fb:1b:71:4d:f7:0b:f2:a0:ed:6b:
0e:7b:0c:0d:e3:a0:89:95:e5:54:99:c9:e0:04:e4:
bd:16:42:d0:01:37:83:0f:c8:51:09:3a:4c:ec:a3:
00:b7:93:be:a1:a2:4c:72:94:bf:12:80:d1:9d:c9:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:40:7B:B3:3D:AD:94:0F:66:D9:A6:56:ED:18:AE:87:4D:81:38:AE
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xEB7sz2tlA9m2aZW7Riuh02BOK4.roa
sbgp-ipAddrBlock: critical
IPv4:
61.44.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:f9:e3:70:19:cf:2b:86:d4:96:18:51:db:13:33:69:ae:45:
07:80:72:d4:8c:b5:75:80:c9:19:b4:42:65:8f:6b:bf:a0:b6:
31:8e:70:f9:ba:28:c7:09:2a:dd:45:57:6b:7d:ee:0f:a8:07:
83:51:a7:69:58:c9:3f:59:72:02:b9:15:84:91:71:f3:4d:c8:
76:c9:2b:9c:9d:e5:58:6c:7a:7e:21:17:19:1a:2f:b9:e9:f3:
9c:53:34:38:ea:1f:94:3a:36:b3:8c:9d:7d:bb:09:27:92:7a:
62:92:2b:bf:4e:58:dd:1b:f1:73:36:3b:f7:a5:30:e2:b7:15:
24:44:3f:b9:8b:50:54:58:d5:39:26:f4:4b:57:5f:15:de:10:
ee:82:3b:b6:48:ee:aa:5c:cf:d3:39:d7:2d:3b:fb:24:50:13:
37:a2:db:5f:cb:74:79:e0:25:89:6b:fb:b3:ee:32:07:c9:88:
79:e1:d6:89:b9:11:aa:06:66:af:35:9b:df:5e:55:27:10:f1:
df:51:24:38:19:b9:bf:5a:ca:86:14:3c:64:fa:f9:0f:41:0b:
45:e6:74:60:19:a2:7b:45:9a:a2:aa:2c:e0:04:db:2e:88:3b:
8d:87:67:7b:3b:f0:dd:cd:65:4c:dc:22:1f:a7:f2:05:86:36:
ff:ae:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:22 2026 by rpki-client