
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/5WPhD9sAkVKcANZ_YgDqLuv8pds.roa
File: 5WPhD9sAkVKcANZ_YgDqLuv8pds.roa (raw, json)
Hash identifier: 9fdqLoRKeN0JzrFyIZzsHLz2n9e4QaWbEe/yryUueCw=
Subject key identifier: E5:63:E1:0F:DB:00:91:52:9C:00:D6:7F:62:00:EA:2E:EB:FC:A5:DB
Certificate issuer: /CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Certificate serial: 0A
Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/5WPhD9sAkVKcANZ_YgDqLuv8pds.roa
Signing time: Tue 31 Mar 2026 08:49:01 +0000
ROA not before: Tue 31 Mar 2026 08:49:01 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10001
IP address blocks: 49.128.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Validity
Not Before: Mar 31 08:49:01 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E563E10FDB0091529C00D67F6200EA2EEBFCA5DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:f8:09:f9:c2:bb:0b:d9:d8:17:61:4b:bc:
dd:bd:ba:78:29:e1:7d:ba:d9:93:ba:b5:24:85:ab:
96:a1:91:c0:d0:68:c7:98:d2:4b:13:e1:1e:45:b7:
29:f6:06:b2:f5:24:41:63:90:eb:6c:94:5f:0d:2b:
c6:74:c2:38:89:3d:2b:69:4f:e1:e0:9e:b8:3c:2e:
a4:57:0f:be:d4:f1:eb:75:a9:82:2a:4e:4e:cb:75:
cd:2b:af:b5:76:0d:46:4c:7d:71:9d:95:33:35:55:
13:d7:60:69:31:7a:a3:e5:3e:f3:a2:ee:d7:e9:ba:
22:31:e6:0f:27:d3:5a:59:53:25:8b:28:d1:60:cf:
2c:40:c4:16:90:10:a6:3d:c1:4d:c8:a5:08:fd:79:
69:63:79:0f:3b:6e:a9:f3:67:f6:f8:9d:43:67:70:
c1:57:8c:ad:c8:49:6b:99:ad:19:02:09:0d:dd:92:
71:55:da:a7:48:88:b6:f9:38:48:98:ba:cf:3b:c8:
03:2e:06:b8:73:6a:de:08:1a:53:dd:35:7e:43:d7:
36:43:58:2e:ba:2c:b7:b0:e1:33:73:76:88:ed:58:
51:7f:4e:89:74:0f:6e:35:9a:b0:09:4f:5a:90:f9:
5c:2a:89:29:32:71:e7:a5:84:e7:50:8a:33:a2:68:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:E1:0F:DB:00:91:52:9C:00:D6:7F:62:00:EA:2E:EB:FC:A5:DB
X509v3 Authority Key Identifier:
keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/5WPhD9sAkVKcANZ_YgDqLuv8pds.roa
sbgp-ipAddrBlock: critical
IPv4:
49.128.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:d3:20:43:ea:b1:5b:b6:df:00:66:c2:48:75:b1:7c:60:76:
95:9f:fe:1b:c2:b0:25:75:f0:12:d7:9f:36:10:07:8f:fd:e7:
bf:8e:16:60:35:c4:6e:a2:ba:a7:36:11:5a:99:85:ab:90:29:
82:cf:fd:97:9f:34:b3:28:71:71:00:f1:17:59:50:b4:15:f2:
ed:79:38:8a:82:cd:7b:55:59:46:44:fd:45:91:42:36:d4:4e:
96:33:4b:35:6b:64:bf:a6:e5:06:82:ff:ba:47:6a:40:c8:f5:
c7:fc:95:01:c2:03:fd:f6:95:f0:d6:33:02:03:be:3a:da:b7:
3e:75:87:6d:54:1d:c5:ff:8b:06:57:81:e1:4e:2b:40:c0:1c:
87:49:46:dc:f6:06:12:ac:c8:07:b5:a3:de:eb:6c:67:27:ca:
10:05:03:34:f7:20:05:25:c6:10:c0:22:28:72:69:d2:70:54:
9f:5f:fa:89:13:37:d0:43:fd:af:6c:04:a4:07:31:3c:00:a9:
85:ba:6d:66:ea:a4:c7:32:7b:96:12:9a:5c:67:0e:cf:95:f7:
90:7e:fa:af:9d:f2:cb:1d:c3:67:c7:08:eb:b2:49:e4:12:bc:
15:e4:eb:d2:71:da:d2:a9:8c:af:3d:0c:63:f9:4e:9a:13:da:
e1:ac:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:45 2026 by rpki-client