
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/DO0llmGA0JrIe58mFFH81PVEz1w.roa
File: DO0llmGA0JrIe58mFFH81PVEz1w.roa (raw, json)
Hash identifier: lTHhjajwgVNc5hyCK5uDOUH9slaViBTFZMkW2FGZBQ4=
Subject key identifier: 0C:ED:25:96:61:80:D0:9A:C8:7B:9F:26:14:51:FC:D4:F5:44:CF:5C
Certificate issuer: /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial: 3E
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/DO0llmGA0JrIe58mFFH81PVEz1w.roa
Signing time: Tue 31 Mar 2026 08:38:22 +0000
ROA not before: Tue 31 Mar 2026 08:38:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23831
IP address blocks: 223.27.180.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Validity
Not Before: Mar 31 08:38:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0CED25966180D09AC87B9F261451FCD4F544CF5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:50:e7:50:d8:d1:67:c1:60:0c:0c:f7:04:40:
68:25:04:ca:1a:91:39:18:7b:e8:5a:cf:a6:fd:17:
66:2a:27:a6:b4:98:10:65:5e:17:b2:7d:68:48:24:
51:9d:b4:aa:7b:61:3a:b3:80:4b:29:cb:d1:13:d6:
14:e4:fe:bf:4b:d6:07:04:02:8b:67:20:5a:85:c4:
f3:59:a3:8e:17:8d:8e:d9:ef:c2:6a:9c:a9:6d:4d:
61:aa:16:ab:9c:fa:2b:20:64:30:52:1f:29:ee:5a:
a8:f4:07:ce:c7:b8:89:77:36:be:94:6e:c0:dc:95:
c8:45:a9:2a:43:4a:b5:68:4a:5b:a5:cb:45:e1:4f:
af:4d:5b:13:1c:31:35:29:0c:00:de:c8:0f:33:e5:
cb:f2:e0:9e:6f:28:8f:6f:a2:9b:16:ae:6d:ba:41:
40:ce:c8:8f:3e:83:ec:52:2a:93:71:e1:aa:7a:b4:
3e:52:18:05:5c:c4:e7:6f:79:c8:36:57:4c:68:c8:
e7:65:9d:71:02:7f:29:89:84:6e:d7:e9:47:12:61:
2d:a0:4d:33:81:ff:48:1f:26:40:ce:b2:07:d0:d9:
4a:da:00:69:02:6f:92:84:30:a7:09:97:4b:aa:79:
50:2f:34:56:eb:d1:31:cd:3a:fd:49:a8:e8:13:c3:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:ED:25:96:61:80:D0:9A:C8:7B:9F:26:14:51:FC:D4:F5:44:CF:5C
X509v3 Authority Key Identifier:
keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/DO0llmGA0JrIe58mFFH81PVEz1w.roa
sbgp-ipAddrBlock: critical
IPv4:
223.27.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:41:d5:06:f4:e4:09:f8:36:dc:1a:16:6a:6f:be:86:4b:85:
58:13:a6:9a:23:45:32:7c:1a:f6:cd:54:9e:72:f1:9d:16:fe:
6c:48:20:40:bc:e5:07:12:2b:98:b0:4a:2d:48:c8:cd:a8:68:
4a:a3:36:95:39:9b:a9:84:b9:c6:42:29:e9:b6:cd:5b:1f:87:
bc:7d:ff:bb:84:a0:cb:60:fe:89:64:e9:48:6d:b4:a4:33:d7:
71:dc:8a:91:df:a0:d2:17:40:d0:30:e2:c4:67:18:77:26:ce:
35:b8:fd:4c:71:d3:7b:41:92:62:79:b6:41:f2:74:d3:ac:bd:
26:66:46:fd:b1:19:bf:e4:0f:06:b5:e5:41:f0:0a:52:17:0b:
2b:28:a7:3a:db:75:d6:78:55:b3:75:0f:f6:d5:f0:7a:2e:6a:
c0:e2:f1:55:df:c0:19:cd:93:ef:85:0b:a4:7a:5f:05:9d:23:
de:24:62:78:72:67:90:45:ef:81:ea:32:a6:29:e9:92:c8:cc:
66:80:85:6a:86:72:02:3f:fe:cd:ce:16:68:fd:9d:e2:26:d6:
62:27:f0:ef:31:a8:97:c9:b5:33:99:b3:2c:1d:82:67:01:8f:
ae:1e:b6:03:ad:14:7c:38:64:b3:d4:9a:39:92:c2:e6:d4:48:
84:1a:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:19 2026 by rpki-client