
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/oM8abkdeuvii7OZe6q_YLaLEme8.roa
File: oM8abkdeuvii7OZe6q_YLaLEme8.roa (raw, json)
Hash identifier: EVAQ9TbrhKVc5ErL4R/rWpx6/U1LkNFV6kRCwWUCPqw=
Subject key identifier: A0:CF:1A:6E:47:5E:BA:F8:A2:EC:E6:5E:EA:AF:D8:2D:A2:C4:99:EF
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 93
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/oM8abkdeuvii7OZe6q_YLaLEme8.roa
Signing time: Tue 31 Mar 2026 08:24:59 +0000
ROA not before: Tue 31 Mar 2026 08:24:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9374
IP address blocks: 123.255.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Mar 31 08:24:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A0CF1A6E475EBAF8A2ECE65EEAAFD82DA2C499EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:87:82:65:1c:62:e1:ae:ab:99:bb:d1:27:
27:0d:69:77:1e:1d:95:50:d2:c3:ee:84:0d:73:1b:
a3:6b:c4:5e:b9:7e:33:f7:79:cd:73:d0:fc:9b:f0:
88:a6:73:04:a7:da:8b:06:54:9c:d5:a8:3c:82:9b:
64:4a:24:eb:52:70:76:a8:28:1f:4b:99:a0:26:86:
6f:4e:e3:c2:d7:c2:82:81:23:1d:46:b0:09:c2:09:
01:9c:a3:e8:eb:07:dd:7f:56:9d:69:66:c4:b8:d1:
40:d5:68:87:a3:3c:50:74:83:53:fd:7a:55:c6:57:
41:e1:67:60:20:97:b8:73:1b:46:75:6c:0a:93:f6:
7e:81:23:08:de:8d:1a:b5:e9:3e:ca:11:9a:3b:cb:
d6:7b:4e:4c:fb:f6:0e:8f:de:78:61:2e:71:b9:5f:
12:d4:b3:45:cd:90:7a:fe:55:06:0e:2b:c2:0c:8f:
3f:60:1d:41:ba:3f:61:de:c1:6b:c8:c9:7d:5c:d7:
d3:72:07:0d:0c:48:4f:30:e4:2e:e6:e8:f4:81:ac:
d1:2c:8c:91:b8:d0:5a:2d:5c:54:8d:e6:9b:77:8e:
35:81:b6:06:e8:fc:49:0f:4e:a5:b6:9f:b1:db:72:
83:12:32:21:0f:08:ec:55:1a:1b:0f:a6:5e:7f:5c:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CF:1A:6E:47:5E:BA:F8:A2:EC:E6:5E:EA:AF:D8:2D:A2:C4:99:EF
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/oM8abkdeuvii7OZe6q_YLaLEme8.roa
sbgp-ipAddrBlock: critical
IPv4:
123.255.128.0/18
Signature Algorithm: sha256WithRSAEncryption
97:4d:9f:a9:10:ba:bf:4a:4c:ad:44:02:0a:ce:b7:e2:f2:6b:
3e:be:8b:ae:b1:97:48:5b:f9:b3:16:af:2f:fa:b1:40:4d:4c:
8c:4e:47:f4:57:f1:ca:d1:10:fe:8d:79:4e:46:76:83:18:fc:
1d:12:21:07:8a:3a:5c:67:00:82:d4:ae:11:e7:af:26:9d:ef:
cb:30:23:da:36:d4:23:e7:c5:fa:80:cc:1a:ba:9e:01:4e:94:
cd:91:95:70:57:c7:c6:0a:bd:1f:38:75:7d:bd:b5:0f:19:33:
9f:4b:f9:a5:49:6b:fb:b3:95:60:5a:13:45:ac:63:ec:b9:69:
f5:c0:25:79:6b:3c:a8:1a:8c:bb:c9:c3:fe:44:3b:a8:24:71:
a4:95:50:8a:d7:95:79:95:d7:3a:1d:40:06:f1:88:00:5d:cb:
e3:11:aa:ec:b4:a3:7e:24:8d:19:41:01:c9:9e:70:d8:0c:9f:
62:00:6b:cf:dd:7e:30:1d:25:47:b6:f5:e1:61:71:48:cf:e3:
35:0d:50:0d:18:18:50:73:2b:c8:4e:c2:fd:3b:be:0c:38:6c:
25:36:af:d2:ba:85:e6:c5:b2:13:6b:02:58:02:ba:2e:16:73:
44:f8:3a:d1:39:54:af:b7:94:4c:34:18:20:f4:3f:03:6f:b5:
a2:1d:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:54 2026 by rpki-client