
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/-YicE6Wq4sw5i7oIFhaOLP8cdGg.roa
File: -YicE6Wq4sw5i7oIFhaOLP8cdGg.roa (raw, json)
Hash identifier: Pl9eF/BUcP+3Wu2RJTwt6QHdV3iCeJbkvxOcvUtJ2vE=
Subject key identifier: F9:88:9C:13:A5:AA:E2:CC:39:8B:BA:08:16:16:8E:2C:FF:1C:74:68
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 6C
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/-YicE6Wq4sw5i7oIFhaOLP8cdGg.roa
Signing time: Tue 31 Mar 2026 08:31:22 +0000
ROA not before: Tue 31 Mar 2026 08:31:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 23:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Mar 31 08:31:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F9889C13A5AAE2CC398BBA0816168E2CFF1C7468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:93:5e:53:0e:55:ae:be:47:16:b9:c8:23:
5f:70:28:d2:99:56:8d:cb:ae:a0:03:8f:ca:82:39:
5f:b9:dc:fe:76:d2:5c:c3:a7:11:b9:a4:e5:65:c8:
99:90:f3:69:5f:4f:a5:cb:cd:a6:68:3a:62:9f:35:
e1:97:e2:68:e3:60:d2:d8:89:0d:b9:56:30:5a:55:
c6:7a:1f:89:32:be:34:a1:ab:17:b2:f6:ec:b7:09:
eb:f9:4d:f5:d8:31:d8:9f:29:73:29:3a:36:f6:53:
23:01:23:de:9c:a1:84:c4:96:e6:62:39:46:36:b3:
ab:1b:f1:ff:29:df:09:23:6f:c9:89:70:e4:38:be:
1d:e3:e0:df:5f:20:3b:af:3a:37:44:b9:54:c4:d8:
b9:26:2e:f5:2c:e6:03:aa:4f:e9:ef:8f:15:3d:9b:
e0:46:16:82:7f:3c:42:41:69:98:97:f8:cb:be:b9:
57:a9:28:55:c0:48:87:e8:32:50:38:fa:77:93:6d:
50:b0:b4:22:e6:58:a1:c6:f3:fa:80:50:36:9a:57:
58:cc:72:35:d4:c9:32:3a:79:d0:00:52:f6:b8:64:
4b:06:8b:fb:5c:0e:00:83:7e:15:0e:79:bf:f8:49:
75:b0:6a:d5:2a:1f:c5:f3:ca:d9:9f:63:5e:8d:02:
08:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:88:9C:13:A5:AA:E2:CC:39:8B:BA:08:16:16:8E:2C:FF:1C:74:68
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/-YicE6Wq4sw5i7oIFhaOLP8cdGg.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cf:c1:9b:7d:7a:76:53:fa:6e:d0:01:3b:26:41:42:b6:e8:
10:1e:60:20:5d:33:92:2a:e7:10:2e:d0:17:af:7e:a6:80:c9:
9a:de:d2:3f:00:e5:d0:66:da:d8:e7:3b:24:8f:f9:ce:2f:dd:
c8:ff:69:8a:bd:98:1a:04:8d:97:80:e1:f2:c9:24:03:6d:6a:
6d:18:96:68:04:d9:ec:4f:06:dc:d6:82:eb:5b:5c:5d:cc:43:
bc:d3:32:69:1b:01:73:10:e8:c0:4e:53:5b:77:bc:83:1d:b5:
85:1a:94:32:b5:f7:9d:39:e9:cb:9e:ed:5b:ed:5e:20:34:b0:
85:cf:ae:7d:82:c6:a7:b1:36:6d:31:cc:64:a5:a7:4e:f7:88:
f8:f4:56:cf:a0:ca:07:26:ab:55:99:9e:12:80:fe:ec:a3:e8:
cd:45:f4:dc:df:ca:96:09:44:b3:0e:1d:36:b4:b4:9b:f3:74:
18:7d:c5:15:cf:51:20:bf:1f:99:d6:2f:e5:1b:f9:a7:ac:22:
38:e6:e0:15:00:dc:f8:52:45:07:9c:f2:91:9c:59:0d:f9:94:
46:32:a7:2d:f1:f7:b9:df:c9:80:c7:8b:62:c0:57:2d:82:96:
66:ec:81:7f:12:ca:37:11:e1:49:2e:00:eb:c4:fb:df:04:a0:
b6:7d:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:19:53 2026 by rpki-client