
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/DlSUfh9p7xeypvzMk8PlueBaoXw.roa
File: DlSUfh9p7xeypvzMk8PlueBaoXw.roa (raw, json)
Hash identifier: ZRay2tRS1iSXPgud1hKTFuZGpqptyFbSTqIQ03W41pc=
Subject key identifier: 0E:54:94:7E:1F:69:EF:17:B2:A6:FC:CC:93:C3:E5:B9:E0:5A:A1:7C
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 8E
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/DlSUfh9p7xeypvzMk8PlueBaoXw.roa
Signing time: Tue 31 Mar 2026 08:24:57 +0000
ROA not before: Tue 31 Mar 2026 08:24:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9374
IP address blocks: 116.89.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Mar 31 08:24:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0E54947E1F69EF17B2A6FCCC93C3E5B9E05AA17C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:87:5c:e8:3d:a1:8e:65:e4:65:68:c3:af:
31:de:db:fa:3f:ba:c2:63:47:68:f5:54:81:e0:83:
26:d2:2c:fc:84:bc:cc:29:d4:27:7c:a9:58:e4:36:
f3:28:4f:f2:3e:da:cf:fc:64:a6:35:a1:bd:ed:c5:
d4:f0:3e:53:75:98:ed:b4:b1:50:ab:b0:00:51:14:
64:52:b8:66:88:df:6d:a5:89:4a:46:5d:7b:60:94:
1c:eb:5d:99:04:db:ac:dc:fd:ad:28:50:8d:69:54:
c4:68:c8:53:1f:b8:74:ca:80:07:64:d1:e6:b8:9c:
95:31:11:e8:23:82:ca:70:24:24:c8:5b:de:e1:47:
42:71:dd:47:73:75:e9:83:44:e1:1d:0a:67:e5:b1:
85:f3:28:b8:ed:69:65:5e:a5:12:4f:92:f0:b7:60:
3a:d8:46:d2:99:1e:3b:d4:a5:ae:4e:85:02:f5:73:
98:de:98:5d:56:70:77:38:ab:59:f0:c7:c3:93:98:
ab:8d:5d:19:3a:7e:6e:0f:cb:ba:b7:1d:3a:06:52:
e4:1b:85:e1:25:0a:12:79:ce:37:dc:bf:a4:ae:fa:
43:1e:99:80:44:36:cc:9d:e9:f3:06:27:18:39:6b:
26:53:98:ac:25:b0:4d:8b:32:eb:9d:8d:45:78:c8:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:94:7E:1F:69:EF:17:B2:A6:FC:CC:93:C3:E5:B9:E0:5A:A1:7C
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/DlSUfh9p7xeypvzMk8PlueBaoXw.roa
sbgp-ipAddrBlock: critical
IPv4:
116.89.208.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:3b:22:79:49:c8:88:46:e0:60:cf:6f:ca:74:fc:12:f5:bd:
33:5c:05:80:df:fc:29:0a:5c:ab:89:7c:d0:b9:43:97:57:e6:
ec:e1:6d:14:e9:f0:62:92:8f:46:9b:03:4c:10:5a:65:ef:cf:
59:41:1a:b7:6c:9d:8e:b1:b0:b3:8f:72:dd:86:48:2a:8c:d3:
c1:2c:de:1e:27:27:89:a4:f8:0c:2a:fb:90:3b:44:05:41:74:
4b:48:e3:da:a5:de:c3:c4:7c:49:7a:69:c6:c1:14:38:1b:a7:
fc:ef:2b:c7:1c:fa:76:c3:29:f0:50:be:32:a4:1d:7a:b7:be:
4a:74:b5:b8:d8:f1:5d:7d:35:a2:9b:ed:b5:91:ca:d9:74:30:
cb:87:5f:a8:57:65:9d:14:3f:2b:54:ca:9f:c9:7b:49:8f:91:
8b:de:ad:04:d3:ec:1d:89:22:18:56:9c:71:99:4a:be:21:a4:
ff:44:b7:22:0d:97:8c:b5:6f:e3:28:82:14:33:f8:58:20:24:
a4:52:7f:59:6e:96:25:00:b5:13:01:2e:ca:25:ed:1e:85:07:
17:ea:53:98:49:5f:0f:d7:7b:c1:a5:3c:72:00:e2:6c:e0:6e:
c3:51:79:50:a5:00:ce:b8:a8:e8:16:f5:59:38:1d:27:65:b1:
77:c9:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:02 2026 by rpki-client