
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/0UJiTreTquxHZzA0IsRJ6p64pM0.roa
File: 0UJiTreTquxHZzA0IsRJ6p64pM0.roa (raw, json)
Hash identifier: DRSqla/U2g/Jk2YBhvBtqh8usWETyq9Qhr2y5EVtYBY=
Subject key identifier: D1:42:62:4E:B7:93:AA:EC:47:67:30:34:22:C4:49:EA:9E:B8:A4:CD
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 70
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/0UJiTreTquxHZzA0IsRJ6p64pM0.roa
Signing time: Tue 31 Mar 2026 08:31:23 +0000
ROA not before: Tue 31 Mar 2026 08:31:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Mar 31 08:31:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D142624EB793AAEC4767303422C449EA9EB8A4CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ab:86:72:90:0e:9e:16:df:40:e6:f0:af:f6:
c5:46:e1:66:99:70:09:72:87:3e:c1:5e:bb:4c:bb:
67:15:5f:d8:c8:4b:94:f1:aa:1c:5f:58:25:3b:ad:
8c:d7:7b:41:1e:07:95:59:d8:a6:4d:75:56:36:50:
7d:1e:37:57:c8:c2:34:14:a9:3d:3c:fc:e1:62:bf:
2c:1d:da:c7:72:16:44:df:cd:bb:33:bb:4d:99:b5:
dc:59:0e:f8:42:9e:72:f8:75:36:b7:d3:75:a7:3a:
ac:3c:4a:e2:4e:1f:9d:04:e6:ba:60:6a:4e:71:bf:
d7:a7:46:65:8c:37:c8:46:30:2b:fc:28:24:bd:0d:
b6:5a:02:a4:da:2c:7f:ad:bb:b2:4c:0a:28:21:89:
45:89:f1:cd:17:66:71:a2:39:05:c6:af:eb:a9:53:
f4:07:42:36:40:bf:2c:7b:26:8d:61:74:28:c1:57:
6f:18:66:42:70:79:4a:c9:74:e1:a4:90:b7:1b:1f:
85:56:af:c1:e6:63:a0:2c:8f:9d:b3:b0:e5:a6:66:
aa:45:87:8d:47:4d:97:ec:a7:4d:4d:1b:fd:61:66:
46:36:79:18:11:25:61:3f:ec:92:80:23:eb:85:81:
f8:f9:04:a1:e4:de:1b:d4:5a:df:d9:b4:07:4e:d0:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:42:62:4E:B7:93:AA:EC:47:67:30:34:22:C4:49:EA:9E:B8:A4:CD
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/0UJiTreTquxHZzA0IsRJ6p64pM0.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.131.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:13:ed:2d:b6:89:9f:4b:cb:66:be:cc:54:ee:2f:f6:26:ee:
14:a3:b9:a2:ae:d4:28:59:3a:0a:d0:3f:7f:ff:27:dc:21:f2:
d8:dd:20:c2:63:c8:2f:66:16:12:f1:bd:55:ff:1e:02:16:df:
fb:8e:2d:b1:c4:e8:12:68:7c:bb:ee:38:0d:c4:49:d0:13:fc:
37:d5:0a:d9:a7:50:c1:7c:c2:87:82:49:10:b2:92:43:86:ef:
82:17:f1:89:a0:65:c4:8b:c7:4d:8a:51:7a:e8:a3:d2:96:c4:
f9:d6:79:df:2e:36:09:67:39:69:d0:a6:18:e2:71:40:09:1a:
ee:eb:77:93:57:8d:2a:82:ef:8d:88:44:45:81:b8:c0:b7:80:
d3:69:43:bc:1e:6b:40:e2:e7:20:75:9c:d3:f2:80:9a:16:ae:
f3:67:96:f3:ac:64:f2:6a:20:ca:08:df:a9:de:3e:15:95:8f:
90:f7:60:ab:81:3d:17:4d:2a:9d:8c:53:61:42:e4:e4:64:3c:
a4:62:28:a9:3a:2d:1c:87:2c:62:dd:6c:19:10:e8:0b:3e:79:
07:be:e2:e0:27:f2:1d:e6:70:d1:04:d2:18:56:44:9b:ca:67:
2f:65:e4:ae:7d:e2:ca:9c:dd:8f:c4:87:32:82:ab:ca:5d:31:
be:28:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:18:32 2026 by rpki-client