
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/5SbbJJXHKNgz7Qhqp9ZonOU0lo4.roa
File: 5SbbJJXHKNgz7Qhqp9ZonOU0lo4.roa (raw, json)
Hash identifier: tWBqyG+2n/WJWcmC4yd9ufUjAH4bS8TidLLPiPp7wiU=
Subject key identifier: E5:26:DB:24:95:C7:28:D8:33:ED:08:6A:A7:D6:68:9C:E5:34:96:8E
Certificate issuer: /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial: 84
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/5SbbJJXHKNgz7Qhqp9ZonOU0lo4.roa
Signing time: Tue 31 Mar 2026 08:24:31 +0000
ROA not before: Tue 31 Mar 2026 08:24:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10000
IP address blocks: 114.134.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Validity
Not Before: Mar 31 08:24:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E526DB2495C728D833ED086AA7D6689CE534968E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:e6:65:72:bf:5a:f0:44:50:96:91:99:58:
8b:df:3d:51:61:39:e6:db:c0:71:ce:ec:4a:df:d9:
11:01:ed:5d:26:2f:f1:4b:2d:75:71:85:81:ce:72:
90:51:c6:35:94:76:0f:76:54:8a:86:1e:57:40:2e:
77:23:f6:7e:26:22:9e:e3:af:62:6f:b2:83:ee:aa:
b0:65:0a:09:e8:9c:d7:d1:10:2d:99:2e:9e:ba:bf:
c8:80:42:90:01:82:43:69:ee:55:0f:ff:15:d8:a3:
3d:12:94:d7:31:6a:2d:6e:a9:57:09:4a:ed:c7:03:
bf:46:88:12:0c:ea:5f:32:16:a0:e5:09:35:15:85:
5c:9f:e6:04:51:44:2c:c9:97:1f:90:f6:f6:6c:e3:
be:6f:c2:39:40:8f:72:0e:90:ad:a4:9d:ea:ba:46:
d9:41:ff:10:ee:62:04:62:0a:d6:fa:9f:68:76:2b:
bf:1f:85:47:7d:5d:a6:29:6f:fd:53:65:bd:06:0d:
e8:56:e9:6f:85:11:e8:1a:ef:96:95:df:fb:fc:42:
cf:2a:21:8e:6b:c2:43:f1:a1:54:b0:a7:82:81:de:
41:d8:24:65:88:c4:e6:3b:02:2b:1a:fc:b7:90:d6:
17:4d:3b:54:b2:2e:1a:b6:3f:72:2c:b7:fe:5d:53:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:26:DB:24:95:C7:28:D8:33:ED:08:6A:A7:D6:68:9C:E5:34:96:8E
X509v3 Authority Key Identifier:
keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/5SbbJJXHKNgz7Qhqp9ZonOU0lo4.roa
sbgp-ipAddrBlock: critical
IPv4:
114.134.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:e1:1d:22:00:2d:de:7f:43:e1:2b:70:f4:05:9e:df:31:ec:
d6:f3:bb:59:b7:07:8a:b3:89:71:a9:57:13:22:27:a0:75:65:
99:09:56:c3:37:a6:57:78:e7:71:2a:e6:e9:69:d5:8d:9e:75:
5a:50:58:29:14:ea:99:d5:94:18:d2:c9:5b:93:97:80:27:b7:
c3:c5:85:8c:93:cb:9a:82:44:db:04:83:c1:30:ae:fb:d9:78:
23:94:da:1a:41:b7:08:a3:27:79:41:26:91:1c:ba:6d:f2:eb:
aa:c6:bf:62:0a:14:8f:7b:ec:a9:96:2b:e5:3b:11:38:ac:5d:
7e:1d:03:de:a7:ad:d4:21:db:51:74:48:ca:cb:a8:1d:ad:2f:
27:42:49:ed:31:d0:5d:4d:ee:ca:e0:db:5e:bc:78:43:d4:a4:
5b:05:ae:6b:62:4f:e4:15:94:48:61:9e:a4:ac:25:59:dc:91:
a1:ff:f6:0d:68:50:e1:5b:e7:31:fc:6f:be:f3:c6:37:d3:11:
00:56:30:88:c1:74:a4:81:45:61:a2:d8:bf:1f:8e:17:01:00:
8f:54:b5:fd:8f:07:b5:4f:4d:23:f5:11:8b:ff:49:ac:04:0a:
4b:b4:2e:56:65:b3:77:f8:84:48:8f:c9:ee:bc:eb:13:27:4e:
c1:2c:20:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:56 2026 by rpki-client