
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/650/jMEqWRCtMDCiWIwzQu90Mxwpq-M.roa
File: jMEqWRCtMDCiWIwzQu90Mxwpq-M.roa (raw, json)
Hash identifier: IMhSl9BHELu8bugqcucNjghkEKtvRvDQUPHsixqlRKo=
Subject key identifier: 8C:C1:2A:59:10:AD:30:30:A2:58:8C:33:42:EF:74:33:1C:29:AB:E3
Certificate issuer: /CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Certificate serial: 25
Authority key identifier: 0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/jMEqWRCtMDCiWIwzQu90Mxwpq-M.roa
Signing time: Tue 31 Mar 2026 08:44:16 +0000
ROA not before: Tue 31 Mar 2026 08:44:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17936
IP address blocks: 218.40.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4E32227E13122FE80340BF3AED3D793D26B457
Validity
Not Before: Mar 31 08:44:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8CC12A5910AD3030A2588C3342EF74331C29ABE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:99:84:dd:f7:18:4f:69:a0:eb:94:ee:be:
94:ce:4f:80:69:07:4b:b8:61:a6:d9:0e:92:8b:67:
fd:c9:74:41:e8:b2:90:b4:ae:b3:c6:4d:d6:d8:5c:
29:d6:94:1e:10:92:3c:63:d8:d9:d8:a2:32:97:9c:
ae:fd:2c:b6:66:fd:1d:7b:35:81:d3:10:0e:46:9a:
8a:e6:44:d5:88:ff:fc:a4:24:50:d1:05:8f:8c:5b:
56:b5:60:7d:07:11:51:6b:d8:39:11:19:0b:e6:d8:
64:5e:37:2d:0f:0a:80:14:a1:91:7b:db:99:60:61:
61:28:34:dd:04:8e:0c:8e:f6:7c:5a:85:c4:b2:ac:
d2:cb:24:d5:59:a6:49:56:d1:09:bc:9e:e7:69:08:
1d:99:fa:0b:d7:4d:dc:cf:35:ee:22:fa:5c:0f:91:
6e:ac:d2:fd:de:91:6b:f0:52:61:6b:8a:11:e8:05:
10:e0:05:e3:ae:f2:c7:94:c4:15:4f:8c:ab:83:96:
fc:9f:a3:ee:c9:58:6d:6f:31:a2:b1:7e:9f:08:f2:
14:b9:4f:23:cd:6c:3a:a6:e1:f0:93:c7:80:f6:0f:
a3:5c:c9:33:68:79:3f:df:fd:51:d0:76:0d:ae:db:
74:42:75:fd:43:8f:df:74:eb:a4:df:5d:85:07:68:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C1:2A:59:10:AD:30:30:A2:58:8C:33:42:EF:74:33:1C:29:AB:E3
X509v3 Authority Key Identifier:
keyid:0E:4E:32:22:7E:13:12:2F:E8:03:40:BF:3A:ED:3D:79:3D:26:B4:57
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Dk4yIn4TEi_oA0C_Ou09eT0mtFc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/650/jMEqWRCtMDCiWIwzQu90Mxwpq-M.roa
sbgp-ipAddrBlock: critical
IPv4:
218.40.240.0/20
Signature Algorithm: sha256WithRSAEncryption
83:c6:40:c3:37:d7:11:55:9d:f0:7e:e6:7d:ec:02:ad:01:05:
69:05:ca:0a:6d:27:9e:d9:2b:bc:22:0f:21:0a:5c:aa:f6:f9:
ab:5b:c5:a5:a1:b9:d8:9a:8a:9b:91:b9:04:d5:9c:97:3a:5f:
60:36:dd:fc:79:f5:76:cd:70:28:33:24:59:d0:89:74:75:d5:
07:89:30:0e:3f:48:15:7c:ae:59:2f:a0:48:aa:eb:56:2d:ca:
84:0d:62:f0:5f:b1:ea:a8:91:1e:19:28:34:5a:50:08:0b:35:
c2:02:55:9c:85:50:6e:c0:20:dd:96:56:50:50:ec:11:78:ac:
b2:25:d6:5c:13:ee:fe:d3:00:37:04:8a:c7:20:5e:f2:33:f6:
22:13:64:97:5c:75:b8:22:99:43:4d:86:c6:6f:76:77:32:75:
04:49:6a:ae:e6:f1:f6:bc:dc:21:4e:f0:a5:b7:31:78:7e:b3:
12:f1:58:cd:35:76:aa:ae:83:b9:27:a6:37:40:32:5c:24:ed:
43:67:e9:09:44:76:3c:9d:55:f0:25:d4:57:71:97:f6:b5:3d:
57:d4:5a:02:89:eb:2e:90:aa:48:fa:f5:bf:41:c6:ba:a4:5e:
96:ea:65:44:99:96:18:fb:7f:b5:45:5e:63:ea:fa:e9:a6:53:
d9:79:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:53 2026 by rpki-client