
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/IZJHJaKXOKSaDlFNwUiMHoBonSc.roa
File: IZJHJaKXOKSaDlFNwUiMHoBonSc.roa (raw, json)
Hash identifier: OKViRoTiEJKyqFHuIOm3gRHfzqFnST+ckLsmtoQf3DI=
Subject key identifier: 21:92:47:25:A2:97:38:A4:9A:0E:51:4D:C1:48:8C:1E:80:68:9D:27
Certificate issuer: /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial: 59
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/IZJHJaKXOKSaDlFNwUiMHoBonSc.roa
Signing time: Tue 31 Mar 2026 08:16:16 +0000
ROA not before: Tue 31 Mar 2026 08:16:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23618
IP address blocks: 150.9.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Validity
Not Before: Mar 31 08:16:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=21924725A29738A49A0E514DC1488C1E80689D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:f6:1c:bc:aa:fd:bf:58:c3:6b:5a:22:d5:
f1:8d:c8:fd:9c:8e:f8:6e:fd:87:34:f1:90:5b:89:
9e:ef:20:b0:ee:4e:9b:a4:e7:7f:36:b6:0b:77:e2:
fd:88:98:5e:38:5d:fc:b1:90:bb:c2:52:c1:f4:8e:
bb:6a:b5:78:de:3f:6b:e9:64:ba:c3:bd:a2:29:18:
5a:bf:28:53:91:f8:92:50:d2:47:85:b1:1f:51:f5:
b6:23:01:ec:45:8d:dc:67:71:04:11:b9:aa:3a:e9:
82:a0:16:20:15:f2:0c:58:cf:55:62:5c:01:2f:59:
4a:86:02:9a:87:ee:aa:2c:af:13:69:30:a0:08:20:
e4:97:62:e0:36:5d:13:d3:f1:2a:2e:26:45:9d:d5:
ab:ff:30:0b:45:fc:dc:a9:c4:ec:61:54:6a:83:4f:
f7:a9:9e:f7:42:cf:25:12:3d:d1:46:ce:ee:7e:5e:
a5:76:26:2c:e0:1a:8f:42:47:53:de:20:aa:66:99:
a3:08:7c:67:92:8d:ce:b3:d6:2a:fc:8d:56:65:b7:
a9:5c:f7:3b:e8:42:e9:69:d8:b4:03:84:fe:32:31:
58:c2:1f:29:d3:1b:d0:47:b2:76:70:ce:71:1b:60:
af:21:fe:fa:10:b7:94:cd:17:a9:7b:72:22:8e:9f:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:92:47:25:A2:97:38:A4:9A:0E:51:4D:C1:48:8C:1E:80:68:9D:27
X509v3 Authority Key Identifier:
keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/IZJHJaKXOKSaDlFNwUiMHoBonSc.roa
sbgp-ipAddrBlock: critical
IPv4:
150.9.208.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:5e:cc:a5:2f:d8:34:22:78:83:82:d6:a9:45:3b:c4:7c:a9:
f0:07:d6:fa:2d:47:74:0e:76:9e:d1:75:3f:00:10:62:d9:3a:
e4:b7:51:c6:cb:12:69:83:31:69:8d:a4:18:00:10:35:36:13:
8e:58:2d:fa:e2:d7:74:0f:28:50:b4:3e:1b:f7:da:f7:51:73:
9f:a7:59:ce:6f:f8:77:f3:22:4b:fa:9d:a6:b8:db:c4:0f:32:
f2:45:85:df:ca:b9:e1:44:2b:4e:ad:c4:f4:ef:ff:96:45:45:
a4:9b:30:6b:f8:2f:66:ab:fc:cd:85:e0:d9:02:32:28:d6:c0:
13:ac:4b:ab:50:cc:60:bd:91:bf:36:2c:2c:4a:63:53:f3:23:
0c:38:7e:13:35:91:24:bd:8f:83:c9:5a:55:f1:38:17:25:8d:
a3:b7:f4:60:4e:02:1b:1d:37:f2:e1:97:04:43:f6:44:1b:30:
b6:4c:5d:72:4b:72:c9:8f:93:3c:39:46:14:4a:77:5d:f2:72:
53:19:50:f0:7a:d6:ed:b6:f7:9e:85:6b:6c:99:e4:92:04:1a:
a5:a3:38:2d:bc:74:3e:26:12:3a:aa:5e:45:f8:0b:53:b9:67:
3c:2b:9d:96:77:c3:cc:95:af:50:34:84:8e:82:c7:ff:78:cf:
ef:5f:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:40 2026 by rpki-client