
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/xaRiZZ-GBlbzPEAhz-fW20hNKt4.roa
File: xaRiZZ-GBlbzPEAhz-fW20hNKt4.roa (raw, json)
Hash identifier: B16KSdNJDoQ5rMNrFEQtmzrM7Y4F61cmgSMlHy92X5o=
Subject key identifier: C5:A4:62:65:9F:86:06:56:F3:3C:40:21:CF:E7:D6:DB:48:4D:2A:DE
Certificate issuer: /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial: 71
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/xaRiZZ-GBlbzPEAhz-fW20hNKt4.roa
Signing time: Tue 31 Mar 2026 07:30:53 +0000
ROA not before: Tue 31 Mar 2026 07:30:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 14618
IP address blocks: 27.131.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Validity
Not Before: Mar 31 07:30:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C5A462659F860656F33C4021CFE7D6DB484D2ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:52:e8:96:c8:9d:97:26:14:42:ef:ac:9c:
d6:a8:1d:ee:00:5f:fe:d8:e6:67:f6:10:80:ea:9d:
09:e0:8c:5f:1d:21:90:9d:a9:8c:a2:46:e4:cb:30:
d8:16:53:a6:7f:38:34:98:a6:e6:d6:47:82:df:3e:
78:96:37:70:28:6c:88:a5:fa:0b:ba:69:82:5a:9d:
fc:f7:66:54:44:f5:56:ff:18:a0:41:2c:45:e1:4b:
77:bd:fb:54:e4:e3:b2:5b:d7:a3:6a:fe:64:4d:ca:
69:68:e5:c5:7d:f2:1a:50:64:3e:6f:52:6e:d0:e5:
ba:c4:00:e7:9e:2a:b7:ca:df:b1:66:03:b4:7b:99:
4c:25:0c:e2:76:bc:e8:05:50:82:15:45:4d:4d:b6:
51:98:63:fd:f5:0e:fe:fe:73:9a:b3:c0:56:27:0c:
5a:d7:72:ac:cf:32:32:c0:ff:36:c2:9d:99:ee:41:
b6:2f:e8:11:dc:b4:a7:4a:b0:74:e1:ad:98:9d:54:
01:19:f3:ba:ec:ca:33:3b:1c:77:09:c9:a9:78:68:
a2:6e:37:1b:88:72:bd:13:e6:b9:db:5b:0d:5f:70:
82:3e:24:9a:00:c2:a6:2d:74:30:28:69:3e:3b:d4:
89:5c:5f:c9:19:84:77:25:94:5f:3b:58:ad:06:00:
d8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A4:62:65:9F:86:06:56:F3:3C:40:21:CF:E7:D6:DB:48:4D:2A:DE
X509v3 Authority Key Identifier:
keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/xaRiZZ-GBlbzPEAhz-fW20hNKt4.roa
sbgp-ipAddrBlock: critical
IPv4:
27.131.8.0/24
Signature Algorithm: sha256WithRSAEncryption
35:da:b1:82:2d:df:62:fd:65:f2:43:73:db:19:39:5b:5d:58:
8c:29:5b:28:51:a2:13:c1:ed:eb:92:23:75:08:d6:ca:c4:b6:
75:02:59:86:9c:b5:45:a1:0c:dc:ba:6f:9d:4c:a2:25:f7:28:
4c:61:5f:6d:f6:09:57:3f:73:f0:64:09:c6:07:a9:a5:c3:5a:
eb:1c:8a:6b:32:b6:1e:1a:2a:23:00:c7:39:74:40:87:df:ae:
93:3f:bc:e1:2f:8f:21:80:2e:cd:62:b4:dc:53:91:be:d3:d2:
a7:06:5c:ec:ee:59:01:ca:ed:1d:91:92:d1:aa:f8:5c:2a:37:
9c:6a:08:aa:09:5e:2b:30:9b:73:20:48:95:60:8c:30:45:11:
47:d7:42:92:f1:88:00:6f:9f:ca:fb:bd:bb:98:0f:0c:f2:13:
1b:7d:00:d2:ef:c7:49:5b:6b:2d:2b:fc:a4:83:c8:d1:eb:98:
1c:11:0d:ad:18:75:9e:4e:17:a8:26:5f:33:17:e2:1e:55:3b:
da:13:25:4a:69:55:2f:30:23:bb:8d:b7:c1:12:3d:e3:ea:6f:
d9:5d:90:56:da:63:03:a4:2a:1d:dc:68:f4:47:31:18:fb:b9:
51:02:29:43:82:58:fa:2d:30:39:2a:97:43:56:d0:b0:34:c0:
6e:da:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:18 2026 by rpki-client