
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/F5lbEN6GCmgr8TIoOU9lSlQ0nnM.roa
File: F5lbEN6GCmgr8TIoOU9lSlQ0nnM.roa (raw, json)
Hash identifier: CXEq776gaB2zWdiQKvz9PGm067qWlBpL/4HvMaNHuC8=
Subject key identifier: 17:99:5B:10:DE:86:0A:68:2B:F1:32:28:39:4F:65:4A:54:34:9E:73
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 76
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/F5lbEN6GCmgr8TIoOU9lSlQ0nnM.roa
Signing time: Tue 31 Mar 2026 08:31:26 +0000
ROA not before: Tue 31 Mar 2026 08:31:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Mar 31 08:31:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=17995B10DE860A682BF13228394F654A54349E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:84:92:72:a6:a6:d0:26:3a:a3:60:ef:f2:
5f:d9:ef:56:ad:2f:df:50:01:a6:1e:18:36:1d:cf:
22:21:b2:b7:20:e9:d9:bf:3f:e2:51:0a:bf:95:ac:
0f:96:e4:4a:c7:2c:ae:27:0b:ce:b4:07:c5:96:42:
83:0e:d4:03:66:a0:a2:dc:2c:fe:0c:08:26:fd:cf:
5f:c0:06:1a:04:07:9e:e3:2e:c3:ab:39:9c:2f:3f:
c5:49:82:45:4a:df:bc:3a:cb:2a:82:8e:f5:ea:5e:
64:65:40:45:0d:04:38:c1:d2:97:29:34:12:e1:fe:
ec:7d:f7:c0:33:84:e5:cf:61:d1:d7:4c:67:f6:51:
27:4e:d7:fe:b6:20:ce:59:bc:5b:54:53:a1:2d:ed:
0d:3d:f8:2f:e1:36:d0:1a:01:87:4e:8f:e9:08:82:
2c:fd:81:35:31:11:b9:69:c3:a4:07:04:fb:aa:f9:
21:34:96:1c:fd:b5:61:5b:57:21:0d:5f:94:79:da:
b3:84:ea:96:eb:81:63:3b:69:7e:50:03:6d:cd:76:
a3:4a:59:86:7e:3a:87:46:cb:f3:29:af:f2:87:dc:
25:99:ed:3f:58:41:7d:ec:0b:37:bd:f4:8a:07:5b:
fd:87:e7:17:e6:bd:38:5b:47:78:09:7a:cd:4d:09:
80:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:99:5B:10:DE:86:0A:68:2B:F1:32:28:39:4F:65:4A:54:34:9E:73
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/F5lbEN6GCmgr8TIoOU9lSlQ0nnM.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.138.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:fc:42:4c:db:4f:4f:7c:b2:bf:56:ab:1c:ac:17:31:fc:7a:
29:c6:aa:dc:01:4d:a1:a2:0d:9e:a3:ce:b0:1e:06:84:e6:17:
22:8a:bb:05:ba:67:74:6a:b2:c5:a4:a0:4f:d0:16:66:9e:cd:
3e:e0:58:2f:7d:ef:04:cf:10:7b:9e:f4:c6:19:04:ea:77:6b:
51:2b:40:92:a6:be:1b:17:46:aa:28:61:f2:8e:32:07:d0:7a:
f9:1e:91:79:4b:0f:e6:8d:d8:de:0f:d9:a7:4f:f9:45:54:69:
2b:0f:1d:19:6c:ff:f4:92:c8:d2:79:24:2a:e6:fd:5d:b8:49:
6a:4f:3b:fa:9c:43:cf:f2:42:5b:bc:b3:5d:7c:dc:0c:76:59:
60:28:58:32:d0:45:56:4d:fa:e5:c4:f0:14:6f:c7:88:b0:49:
4e:f8:42:14:00:71:16:cb:dd:94:a1:b0:a9:3f:b2:d6:4c:3e:
78:14:db:b8:d3:a3:97:96:c1:50:1e:5d:4d:b8:f7:5c:8d:1f:
54:e8:db:95:4f:dd:d0:98:36:5b:82:b2:2f:7c:88:4e:4b:47:
4e:dd:0f:4c:1b:19:85:2c:7b:9f:a0:9a:2c:33:f2:e6:4a:a9:
dd:12:ab:73:99:15:77:42:79:9b:a2:c8:39:13:34:ea:72:57:
c0:ae:3d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:19:13 2026 by rpki-client