
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/556/EHatf6om-mj2IGG26NbZea2EfCo.roa
File: EHatf6om-mj2IGG26NbZea2EfCo.roa (raw, json)
Hash identifier: gSRKMQEmaDkeWIRoaeUlAGFM2w0he17PJH2W6X3VAHI=
Subject key identifier: 10:76:AD:7F:AA:26:FA:68:F6:20:61:B6:E8:D6:D9:79:AD:84:7C:2A
Certificate issuer: /CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
Certificate serial: 1D
Authority key identifier: 5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/EHatf6om-mj2IGG26NbZea2EfCo.roa
Signing time: Tue 31 Mar 2026 08:44:27 +0000
ROA not before: Tue 31 Mar 2026 08:44:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 58648
IP address blocks: 219.100.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B940BB63134F9E9F2FE124FCD86E307EBF8B253
Validity
Not Before: Mar 31 08:44:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1076AD7FAA26FA68F62061B6E8D6D979AD847C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:29:65:5f:00:67:87:54:de:a3:60:60:ce:
7c:31:b0:9a:de:8d:8e:94:40:62:5c:30:8c:0b:a1:
c9:11:39:03:7d:6a:3e:bb:65:fd:62:26:0e:da:bb:
81:a4:d2:9c:46:86:ee:11:eb:94:99:d8:e2:18:a8:
73:d6:5c:b2:77:6d:c0:1b:f3:06:cb:84:a1:b2:27:
2b:e7:c5:c3:33:d8:3f:11:ad:da:16:cc:b5:e2:88:
38:8f:02:5d:1a:08:86:9a:6e:89:4f:9d:96:2f:b0:
66:c8:52:68:fe:10:fb:27:a9:10:bd:ee:28:ce:a9:
ff:de:24:41:39:0d:4c:89:bf:a9:24:15:a8:42:35:
30:12:56:f2:0a:ee:96:7f:45:2e:7e:87:da:12:e9:
ad:f9:02:3a:50:4a:89:ec:32:77:90:03:23:9d:29:
32:b2:09:10:04:8a:3e:fd:a1:ff:2d:5c:4c:bb:38:
7f:c3:d1:5d:e5:fd:58:dd:c2:cf:7b:28:80:dc:53:
db:45:ab:4b:6c:33:d2:05:73:1c:20:32:26:f4:0c:
19:75:0d:56:54:e8:d0:65:21:da:09:ff:f7:28:a9:
32:1f:96:04:9e:d0:dd:e4:13:21:5a:e5:46:93:5f:
7e:2b:f5:2c:53:ea:6d:bb:09:8d:61:a5:da:8b:fb:
fc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:76:AD:7F:AA:26:FA:68:F6:20:61:B6:E8:D6:D9:79:AD:84:7C:2A
X509v3 Authority Key Identifier:
keyid:5B:94:0B:B6:31:34:F9:E9:F2:FE:12:4F:CD:86:E3:07:EB:F8:B2:53
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/W5QLtjE0-eny_hJPzYbjB-v4slM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/W5QLtjE0-eny_hJPzYbjB-v4slM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/556/EHatf6om-mj2IGG26NbZea2EfCo.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.252.0/24
Signature Algorithm: sha256WithRSAEncryption
41:76:1e:50:ef:93:4d:69:24:96:bd:f3:d3:ee:8f:ca:79:d7:
d3:be:e1:dc:08:bc:c2:e4:eb:47:4f:83:49:b2:1c:3d:fe:24:
2f:56:42:97:b9:e1:f8:5b:81:01:f0:f9:c5:12:6d:04:85:69:
d2:0d:e0:e8:bc:49:0f:8a:f7:89:35:60:a8:4f:8d:f7:bd:e8:
a7:69:01:83:b0:f0:bc:a1:02:1a:d0:06:bc:c0:4f:00:ca:05:
4c:89:4e:af:33:8d:38:44:5f:50:8e:ea:cb:10:4f:14:6e:ee:
fd:d9:23:4e:93:75:3d:12:37:65:0b:16:fc:b0:dd:de:f6:ed:
2d:bf:a7:d2:55:70:1b:8a:35:dc:94:ca:4a:82:fe:e0:5c:3a:
05:eb:21:44:5a:f8:05:c3:7f:44:09:6e:73:b3:50:8e:3b:d9:
b9:b9:48:25:f3:58:e0:ae:86:c9:56:53:e7:1d:a9:75:d2:87:
16:d3:2a:3c:59:5f:d1:1c:06:97:0d:1d:12:e7:fa:6e:7f:a5:
21:12:ee:7a:26:92:4a:f9:1e:ee:9c:72:20:1c:ce:12:a9:b5:
2a:f2:d3:1b:73:c4:c3:5e:ed:65:4f:68:d0:72:71:b6:64:1a:
a5:0c:f8:95:c2:18:6b:ee:f5:d3:2a:c5:80:69:bf:56:e6:e0:
5f:f4:2b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:04:27 2026 by rpki-client