
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/E1J8g1TVnb1szoMvMhLq4dStCZA.roa
File: E1J8g1TVnb1szoMvMhLq4dStCZA.roa (raw, json)
Hash identifier: 27C6QuXx0GdudAfK4FjCZ2ntNa+F+Z30Io2Y03V/1s4=
Subject key identifier: 13:52:7C:83:54:D5:9D:BD:6C:CE:83:2F:32:12:EA:E1:D4:AD:09:90
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0243
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/E1J8g1TVnb1szoMvMhLq4dStCZA.roa
Signing time: Tue 31 Mar 2026 07:36:03 +0000
ROA not before: Tue 31 Mar 2026 07:36:03 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.159.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:36:03 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=13527C8354D59DBD6CCE832F3212EAE1D4AD0990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2d:23:36:3f:2c:c4:b4:e6:92:8a:98:af:1c:
b5:b6:bc:a5:27:8d:0a:0e:90:fd:48:e5:d9:62:04:
1c:01:85:44:85:8f:7d:f0:22:2a:ff:43:ab:ca:89:
ee:bd:65:e9:e3:e5:dd:d3:46:86:84:a8:ba:e6:ba:
4a:fa:df:06:e1:28:64:01:7c:e4:49:ed:6b:98:21:
49:02:56:9e:e9:8d:3d:a4:43:ff:be:ec:69:ea:15:
5a:ae:49:f7:1d:17:fe:90:96:e6:31:8a:35:b2:d0:
ef:c5:a6:bd:ba:a3:84:d7:19:8e:a1:18:f1:8f:2e:
ef:64:70:b1:f3:a2:c8:fe:7d:b3:9d:29:fe:7d:4f:
f4:7d:54:1b:99:8e:0d:e0:ea:db:29:c5:cc:a8:d5:
14:e6:86:44:85:42:26:e6:60:f1:a1:ba:81:18:4b:
a4:9d:4a:90:16:02:b4:67:f6:4b:03:79:d1:88:2e:
74:71:7c:ef:da:df:76:38:be:cd:69:b4:ca:71:fe:
5b:79:68:33:52:ff:1c:dd:eb:9a:d7:bf:44:22:de:
8b:13:59:10:d0:4c:ad:59:20:65:b2:1a:4b:07:5e:
b0:6d:8d:ac:d2:4b:b2:b3:6d:3f:00:82:1e:e2:54:
4d:5f:84:7a:fa:20:92:a4:2b:ae:db:63:3d:34:7a:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:52:7C:83:54:D5:9D:BD:6C:CE:83:2F:32:12:EA:E1:D4:AD:09:90
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/E1J8g1TVnb1szoMvMhLq4dStCZA.roa
sbgp-ipAddrBlock: critical
IPv4:
133.159.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:e7:67:28:24:bf:6b:9f:86:32:6e:26:81:bd:58:07:61:e6:
88:cc:d7:67:25:b5:48:55:8d:f5:a8:8a:46:b8:92:8b:9f:e9:
85:01:78:bf:15:ee:aa:bd:fb:13:0d:b7:f9:42:e2:d5:2a:8d:
e3:b8:08:3e:03:17:ce:85:e1:5e:73:04:a7:dc:94:86:d3:d9:
7f:dd:7d:21:bf:61:25:cb:e9:0e:ce:fc:97:a6:c1:d3:6d:3d:
b1:f2:6b:40:91:3e:bd:c3:5e:f6:b4:e4:f2:3d:28:b9:b8:bf:
4a:c7:db:a4:12:3b:b9:75:a7:df:02:13:ed:56:49:a9:d3:f3:
39:80:31:7b:e3:af:68:86:da:f3:c2:95:b3:d0:b7:e5:59:02:
6b:10:a4:5f:57:6c:76:6c:97:3b:e5:1c:f9:08:b7:e5:16:51:
d4:0a:b5:ff:75:0b:6b:13:06:a7:88:e1:79:13:20:c2:15:61:
7e:1a:0d:de:41:85:d6:6b:5f:30:a5:e8:71:2f:fa:ea:44:6c:
14:7b:e9:66:33:5e:ff:cb:dd:5d:0e:cb:9b:00:46:fc:34:0a:
47:cc:c2:6f:42:2a:12:84:d3:0c:5d:f2:f4:ea:f2:46:d6:88:
3b:fe:eb:cf:72:8b:ed:b2:86:01:6b:d7:cf:5a:12:e9:3b:6e:
b5:43:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:12 2026 by rpki-client