
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/i0FIuqnQ7bCImIf4t8dsp1xvmfY.roa
File: i0FIuqnQ7bCImIf4t8dsp1xvmfY.roa (raw, json)
Hash identifier: UYNx++saGmum+XC+Txz88ukgXU3P5jM59UNGdMR41s0=
Subject key identifier: 8B:41:48:BA:A9:D0:ED:B0:88:98:87:F8:B7:C7:6C:A7:5C:6F:99:F6
Certificate issuer: /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial: 6B
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/i0FIuqnQ7bCImIf4t8dsp1xvmfY.roa
Signing time: Tue 31 Mar 2026 08:31:21 +0000
ROA not before: Tue 31 Mar 2026 08:31:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9619
IP address blocks: 211.125.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Validity
Not Before: Mar 31 08:31:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8B4148BAA9D0EDB0889887F8B7C76CA75C6F99F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:5f:8d:0d:1a:4a:60:57:47:58:b5:40:2e:
ac:49:a3:53:00:44:61:e9:e8:f5:51:7f:44:9b:cb:
87:7f:41:b1:56:cd:15:fb:d0:a9:06:17:c2:ea:80:
a5:7c:ab:95:47:0e:eb:9b:8e:38:1b:f9:d4:7a:28:
d6:cc:8b:82:fd:03:5e:5c:93:4f:82:84:99:13:29:
d4:8b:87:82:42:af:77:9a:d5:24:b8:05:a6:1b:06:
f4:61:1a:46:ba:b4:a3:9b:af:c8:23:9f:3c:1b:85:
80:bb:de:84:27:70:d1:33:e7:7a:90:a1:a9:6a:ef:
96:2c:56:47:8c:04:ab:e8:ac:1f:04:13:f4:e3:cc:
cb:2d:a4:58:ec:e5:1f:b6:2a:03:fa:71:70:59:66:
b0:ef:1b:da:2d:bd:6b:92:66:2a:32:ea:73:4d:f0:
78:6d:b4:f6:3a:e3:2b:86:2b:89:31:57:19:b0:15:
05:34:3c:13:01:3c:cc:8d:9b:8e:e3:77:21:e7:2d:
76:95:7b:5a:7a:7e:b5:58:59:bc:0f:60:ad:5d:d8:
22:54:ce:67:48:1b:ff:77:cd:51:40:bf:77:1c:db:
1a:0a:96:de:81:ac:9d:00:a2:62:75:57:b6:61:83:
ae:8f:5a:05:69:31:e4:d0:fb:16:16:43:00:81:2d:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:41:48:BA:A9:D0:ED:B0:88:98:87:F8:B7:C7:6C:A7:5C:6F:99:F6
X509v3 Authority Key Identifier:
keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/i0FIuqnQ7bCImIf4t8dsp1xvmfY.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.141.0/24
Signature Algorithm: sha256WithRSAEncryption
14:59:8e:68:2a:7e:d5:2e:2b:92:44:ca:9f:c1:31:0d:7d:de:
b4:2d:42:c6:70:8f:64:6b:f3:c4:8c:46:1b:30:6b:10:10:4c:
51:d5:63:24:70:78:bb:ec:b0:c3:cc:d8:3b:11:bc:3c:cd:65:
e9:25:51:52:f8:01:41:5f:50:03:9a:3a:fb:fe:73:16:ee:c6:
d6:ce:2c:8c:d3:94:4a:a9:50:26:d5:f3:4a:9b:6b:88:ef:35:
59:44:23:af:95:49:77:f7:64:fa:04:a8:70:c1:92:bc:52:38:
4a:00:98:0d:b5:44:6a:a6:f2:df:0c:b1:7b:e1:6c:a1:b9:80:
8b:66:65:cd:d9:5a:f6:97:07:9b:b4:99:aa:01:7f:99:e9:80:
4d:c4:ca:bb:78:e9:1c:24:a3:05:f9:c3:2c:bc:96:82:02:b1:
56:b5:e6:a9:1d:a2:aa:23:68:70:94:91:c1:4d:3c:5b:e1:f1:
32:a7:f3:16:b5:08:2a:d1:5d:78:59:61:88:21:1c:f1:d9:5a:
6e:6b:92:6a:67:47:ac:1d:34:e1:24:dc:bc:e5:0b:37:ab:6d:
a4:62:8d:75:86:b0:78:37:70:16:86:0f:c4:88:34:5b:68:6d:
85:8b:9d:f7:82:3a:5d:e3:9d:72:eb:d7:e0:ea:66:80:fb:b8:
e6:1d:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:19:11 2026 by rpki-client