
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/KmF75nD-FeljUpIYYFKx9-eBFl8.roa
File: KmF75nD-FeljUpIYYFKx9-eBFl8.roa (raw, json)
Hash identifier: f+DrJvm798lZjXsOAx+7DzISoo0s5m8HtHK9AexxpHc=
Subject key identifier: 2A:61:7B:E6:70:FE:15:E9:63:52:92:18:60:52:B1:F7:E7:81:16:5F
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 71
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/KmF75nD-FeljUpIYYFKx9-eBFl8.roa
Signing time: Tue 31 Mar 2026 08:31:24 +0000
ROA not before: Tue 31 Mar 2026 08:31:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Mar 31 08:31:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2A617BE670FE15E9635292186052B1F7E781165F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:38:cf:08:ed:e5:00:8b:52:4a:23:3d:00:
f0:b0:1e:87:69:5f:f3:8d:56:4b:c5:f0:92:2f:8f:
12:95:a4:6d:06:71:87:2b:39:e5:01:1c:7c:96:d6:
03:bf:6b:4d:02:d6:1e:aa:1d:a2:77:50:7e:dc:83:
72:04:f3:fa:aa:21:51:9f:4c:4d:a2:25:e0:f5:eb:
c4:88:0a:d5:32:f2:36:68:5b:6d:d0:e9:ac:e6:48:
44:bd:66:16:bd:2c:2f:8d:1c:3c:ff:51:a4:20:0c:
a6:94:3d:28:75:a4:78:bc:8f:77:16:1b:8c:f8:2e:
00:b7:3a:52:6e:54:6c:6f:18:7c:5b:b6:cf:6b:30:
8b:bc:09:d6:bf:9f:e6:45:6d:2f:0a:f9:4c:c8:e0:
0e:35:f4:82:58:84:38:c7:f3:de:83:e2:a6:69:58:
d6:34:33:56:33:0a:6f:46:16:4d:74:a0:c8:03:ad:
a8:4d:db:bb:5f:a4:8b:70:e7:63:eb:6c:91:b1:fd:
3b:f6:f6:bb:1c:93:6d:bd:1c:be:c8:4a:11:94:93:
21:3d:ca:4d:e4:54:0c:9d:d2:b0:e1:fa:24:56:6c:
dc:c9:b5:b4:6c:61:f6:46:de:88:c1:92:e9:80:7e:
6d:65:b9:00:1d:38:fa:2f:0d:5d:79:3c:0c:9b:c1:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:7B:E6:70:FE:15:E9:63:52:92:18:60:52:B1:F7:E7:81:16:5F
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/KmF75nD-FeljUpIYYFKx9-eBFl8.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.132.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3f:d8:7a:ff:1b:99:10:d2:d1:72:4f:42:22:8e:90:c0:b9:
35:65:21:5d:76:31:4d:e6:28:21:8e:c8:b1:95:f9:43:eb:62:
68:f1:80:2d:6c:49:c7:fa:94:ab:5d:51:e0:01:29:55:e0:3f:
bb:b6:56:cc:b3:1e:9b:56:74:c4:f5:aa:5b:7c:af:3f:94:49:
74:79:97:a8:d0:17:8b:8a:b3:30:9c:cc:51:b4:74:1c:40:4a:
1f:ed:f9:fe:c9:f8:fa:a8:0d:fe:94:96:a8:b2:fd:7c:37:84:
03:51:97:d1:89:3c:03:27:55:3d:cb:39:8c:eb:8e:9b:f9:5f:
48:4d:f5:ed:1a:a4:35:d9:bb:7d:f9:9f:43:7d:b2:d0:7d:f5:
d8:0d:d0:6c:37:51:d5:bd:19:2b:55:e9:57:f4:2a:95:b5:6b:
da:49:4e:18:01:dd:3d:cb:59:49:cf:05:05:f4:9e:96:e5:ad:
55:43:a4:80:e4:df:24:d5:fb:e5:56:72:14:87:7c:20:a4:4d:
6e:48:e7:11:03:a4:61:64:1d:83:9f:e5:9e:fc:02:70:15:a4:
98:fb:f5:5b:b6:aa:3e:af:87:f8:83:88:45:c8:53:2e:4d:4a:
0e:40:73:74:d3:00:8f:63:4d:94:d1:e2:3e:3e:62:c0:19:65:
07:d0:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:18:22 2026 by rpki-client