
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/9emOeM6zW6OShKq_lGsfbMNCXWs.roa
File: 9emOeM6zW6OShKq_lGsfbMNCXWs.roa (raw, json)
Hash identifier: nYxFxrKTCPpTn5PuFZWNH4hVHtFhfzo3V8NeCaQe4Vc=
Subject key identifier: F5:E9:8E:78:CE:B3:5B:A3:92:84:AA:BF:94:6B:1F:6C:C3:42:5D:6B
Certificate issuer: /CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Certificate serial: 5B
Authority key identifier: B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/9emOeM6zW6OShKq_lGsfbMNCXWs.roa
Signing time: Tue 31 Mar 2026 07:37:24 +0000
ROA not before: Tue 31 Mar 2026 07:37:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55900
IP address blocks: 109.236.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8DD1D6D77FF33931BF748BA9BF0EBF4939D8031
Validity
Not Before: Mar 31 07:37:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F5E98E78CEB35BA39284AABF946B1F6CC3425D6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:de:60:32:b9:69:df:0f:46:21:b4:df:af:
8e:d8:d6:da:c6:4b:e5:49:28:1c:2b:a9:1e:f7:6f:
0e:1b:32:03:32:9c:48:d2:32:eb:5a:02:7c:a0:aa:
82:4b:d0:f3:14:9a:c8:6f:29:c8:6b:10:6d:29:57:
b8:e6:d4:6d:dd:86:53:f1:a5:84:b4:b4:87:d3:d8:
11:f2:41:7b:18:8b:df:05:c1:a4:12:ce:0c:a7:a5:
7f:19:1b:ef:5f:69:0d:f0:91:2a:25:4b:65:19:e4:
fe:36:ed:1d:df:c0:33:c7:ab:f0:9b:c7:45:73:d9:
9e:ba:3d:2d:49:4e:89:95:3d:57:65:3c:fc:51:49:
94:02:7a:c5:a7:77:74:b8:2a:c4:ed:c6:c3:ea:aa:
70:e5:36:6b:c8:3e:d0:d0:b3:65:94:90:9b:b8:b7:
d9:24:93:9f:d3:a2:0a:7b:ba:70:dd:18:f2:6e:12:
56:91:1f:7a:97:32:fc:ad:9b:ea:78:96:61:86:5a:
87:90:ef:5e:99:d9:21:67:74:f7:c3:2d:03:ca:5e:
54:e9:38:24:6e:9c:4e:9e:c4:41:87:19:ae:18:51:
e4:64:f6:07:03:f9:0b:c9:5f:8f:39:7e:d2:90:36:
1e:b6:01:be:aa:89:57:b4:57:09:48:71:78:13:25:
79:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E9:8E:78:CE:B3:5B:A3:92:84:AA:BF:94:6B:1F:6C:C3:42:5D:6B
X509v3 Authority Key Identifier:
keyid:B8:DD:1D:6D:77:FF:33:93:1B:F7:48:BA:9B:F0:EB:F4:93:9D:80:31
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uN0dbXf_M5Mb90i6m_Dr9JOdgDE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/9emOeM6zW6OShKq_lGsfbMNCXWs.roa
sbgp-ipAddrBlock: critical
IPv4:
109.236.0.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:22:21:7a:e4:b5:3f:0b:b1:10:b6:45:a2:39:e6:c0:0c:7f:
63:50:64:8f:6e:03:7b:6f:ff:c9:ed:2f:b8:87:85:46:6f:15:
8a:ee:34:62:90:b0:bb:12:e4:20:4c:62:3b:57:fc:44:1f:11:
fa:ff:53:05:0b:75:e4:44:40:7d:92:d8:23:b3:cb:72:ff:62:
01:7c:d3:48:0a:b9:bb:66:53:dc:7c:6e:d1:ba:9b:09:78:52:
57:7b:82:31:d0:93:bb:f7:27:95:de:cd:fc:4b:5c:ea:b7:90:
ba:83:bc:1b:09:0e:32:dd:95:b5:e7:5c:5d:cc:c3:19:bf:88:
e2:95:ef:75:69:a1:83:62:6e:db:1d:ad:4c:66:57:09:c0:54:
db:57:11:30:62:3a:08:c7:97:b1:c3:3b:83:c3:a9:bb:fe:ab:
36:37:fe:21:1a:07:ae:61:4c:82:d6:84:6d:42:09:a8:a6:9e:
24:f6:c3:9e:0b:03:b0:7c:a3:2a:84:f2:5f:5e:db:3e:41:40:
04:7f:47:56:2e:79:cf:14:3a:e5:72:41:5a:ac:6b:d4:be:ea:
f3:c8:c4:23:0d:ba:2b:25:90:f8:5a:3a:a4:59:5b:e4:10:33:
a0:fa:26:d9:d6:15:7c:87:bf:8c:dd:ee:5a:72:5d:b7:ec:0d:
6e:e0:ac:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:26 2026 by rpki-client