
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/dOx5lXfM_42SyvmNV_6ZqPi8hkU.roa
File: dOx5lXfM_42SyvmNV_6ZqPi8hkU.roa (raw, json)
Hash identifier: I87JIkLlJWjW9jf+SXtofC1j0jtmEKF5DPF/RBi4Gv0=
Subject key identifier: 74:EC:79:95:77:CC:FF:8D:92:CA:F9:8D:57:FE:99:A8:F8:BC:86:45
Certificate issuer: /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial: 91
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/dOx5lXfM_42SyvmNV_6ZqPi8hkU.roa
Signing time: Tue 31 Mar 2026 07:50:39 +0000
ROA not before: Tue 31 Mar 2026 07:50:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18144
IP address blocks: 27.133.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Validity
Not Before: Mar 31 07:50:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=74EC799577CCFF8D92CAF98D57FE99A8F8BC8645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:78:1c:db:83:8b:9f:fd:69:11:46:c8:46:62:
45:c7:fb:a9:98:df:d0:eb:04:5c:5d:19:65:d5:2f:
a3:a7:d1:00:82:5d:c7:9f:e5:19:8b:d5:fa:f9:d5:
1f:31:f0:94:2a:41:de:e8:be:f9:85:00:ad:25:9d:
e3:61:18:42:57:f6:7e:af:a2:f3:8d:6b:25:68:87:
b7:0e:96:6a:f9:95:35:86:4a:c3:f0:31:9b:cc:26:
28:7f:bf:92:b6:a6:24:44:a7:6f:67:85:89:58:20:
4f:eb:16:e5:cc:02:d4:f4:1a:de:04:03:c7:ef:f9:
30:4c:fc:ff:cb:b4:07:eb:20:8d:42:5a:74:b9:f6:
6b:c3:f0:b3:da:1b:e2:ee:a7:6c:c9:d8:c7:a1:2b:
b4:55:98:11:93:78:b2:82:ee:d4:c1:f0:47:b0:f1:
34:ce:b4:54:03:43:e3:ab:15:11:74:60:f2:de:84:
7e:55:d1:79:ac:0e:c7:a9:56:9e:79:f4:ba:21:61:
be:f0:75:ab:ba:47:13:d7:5a:c9:e2:0a:8d:95:b1:
54:9b:d9:4d:7f:54:e8:d0:c3:0b:04:8a:70:cd:07:
51:ed:c0:f2:5d:e4:d5:e2:10:15:9d:43:70:c3:85:
30:de:3e:c2:bb:ac:d9:3f:fd:b1:6c:0b:75:b6:7a:
99:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EC:79:95:77:CC:FF:8D:92:CA:F9:8D:57:FE:99:A8:F8:BC:86:45
X509v3 Authority Key Identifier:
keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/dOx5lXfM_42SyvmNV_6ZqPi8hkU.roa
sbgp-ipAddrBlock: critical
IPv4:
27.133.176.0/21
Signature Algorithm: sha256WithRSAEncryption
09:b8:5a:50:25:a9:af:16:da:e4:a8:f4:1a:8a:9a:8f:e6:1e:
d1:44:28:34:bb:ce:49:ea:31:eb:4f:dd:5b:d9:ef:6e:0a:a5:
53:04:7d:d7:a7:63:48:c5:64:11:ed:6c:fd:8f:d9:80:79:6f:
5c:82:46:e9:f6:a5:8e:8b:25:40:12:9b:91:a0:ac:66:f6:58:
27:41:95:aa:6c:1b:d1:2b:ef:15:0d:5f:2a:22:d2:74:f5:23:
11:3d:18:c5:b9:a9:49:ad:50:09:3e:78:ff:33:38:d6:d8:4d:
dd:34:4a:42:f7:ad:59:a5:bb:ce:8d:e3:f9:8c:f7:f8:e4:e6:
77:f3:6e:86:08:a0:a8:bd:9b:0d:a4:79:67:cd:c0:87:4a:de:
e6:4c:d2:92:f1:1c:e3:a7:81:0c:5f:f6:ba:ca:ed:0d:a9:60:
82:f1:6f:b9:76:c5:56:b6:ee:40:08:c3:36:21:56:fe:4b:c1:
96:f9:88:16:90:6b:76:f2:60:5b:68:f4:c0:1f:9a:73:30:16:
57:d9:b7:b2:2f:74:af:5b:ef:ac:16:07:92:69:d1:fb:e9:92:
4d:2b:0e:32:39:8d:f5:d3:4a:ff:d1:0e:36:28:ec:06:ec:12:
8d:fd:01:10:5f:47:be:0f:76:e6:88:05:72:fa:47:4b:18:0c:
3e:dc:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:57 2026 by rpki-client