
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/EI5cMnykLLY_pg2d2sykB8UvA0k.roa
File: EI5cMnykLLY_pg2d2sykB8UvA0k.roa (raw, json)
Hash identifier: xkq75G4TS3cntW0/7Bj/4pyDJwWHbtZEej8vZs1zaUA=
Subject key identifier: 10:8E:5C:32:7C:A4:2C:B6:3F:A6:0D:9D:DA:CC:A4:07:C5:2F:03:49
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 60
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/EI5cMnykLLY_pg2d2sykB8UvA0k.roa
Signing time: Tue 31 Mar 2026 08:24:12 +0000
ROA not before: Tue 31 Mar 2026 08:24:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 219.97.76.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 31 08:24:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=108E5C327CA42CB63FA60D9DDACCA407C52F0349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:b8:84:16:44:e0:f9:a2:3f:3f:44:6f:1d:
e0:18:e2:ce:78:13:4c:c9:78:51:7f:8e:f9:5a:fc:
70:e4:0a:b6:c0:5a:43:31:2a:3d:aa:9d:b7:4a:2b:
b4:6a:18:5a:0e:db:7c:c3:19:0c:f5:02:ac:e5:34:
70:67:6f:75:f4:90:6f:d8:15:f1:be:c1:81:42:26:
c0:2c:50:8c:f8:5d:9a:b2:cd:95:09:8d:ed:94:a6:
07:0f:50:a6:e6:1b:64:e3:2e:49:9d:16:8b:d9:a0:
18:7f:28:76:56:f2:b3:28:ef:47:59:be:40:81:24:
a0:f3:eb:99:37:cd:dc:3b:9d:33:2c:35:a9:52:80:
fc:6e:af:2e:3d:3d:68:b9:77:a0:43:b6:96:61:f0:
a8:30:c7:df:5d:f3:94:78:93:7f:12:08:af:fa:5b:
76:48:05:77:81:ef:3b:77:98:21:dc:bc:f0:21:87:
c0:b9:0f:53:85:36:92:60:cb:b4:2a:e7:37:fe:07:
21:95:45:67:15:e6:48:2a:e5:20:08:59:b5:a7:31:
53:45:48:0e:df:9f:08:15:ea:61:c1:a2:89:82:60:
96:d7:f3:5f:b5:e4:fd:90:dd:97:e8:e5:7d:79:f3:
56:cb:91:6e:7c:50:62:99:88:26:04:8e:f5:10:5c:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:5C:32:7C:A4:2C:B6:3F:A6:0D:9D:DA:CC:A4:07:C5:2F:03:49
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/EI5cMnykLLY_pg2d2sykB8UvA0k.roa
sbgp-ipAddrBlock: critical
IPv4:
219.97.76.0/23
Signature Algorithm: sha256WithRSAEncryption
11:41:d7:a8:85:8a:f5:02:2c:62:d9:92:eb:f2:54:27:b4:5e:
9d:cd:bb:9c:e3:7b:2d:ec:18:79:08:3e:b5:fa:ba:e2:d8:1d:
e2:16:db:f4:3d:5e:0e:db:99:9a:69:89:f5:b7:ca:72:2f:e7:
a9:a0:a1:cf:c5:a2:22:22:26:b0:b4:ce:47:fc:3c:4e:49:6e:
cd:3b:19:cc:ef:f3:13:1e:fb:ed:af:42:ff:29:a0:32:c1:06:
12:fa:f9:b8:d8:d9:88:06:cd:ef:dd:d9:dc:fb:9a:87:c5:23:
77:b3:5b:69:94:ff:e7:69:68:e4:1a:10:54:ba:b8:8e:66:9b:
17:e1:d5:ac:12:47:ae:14:13:e4:1a:0b:9b:b6:bc:92:d9:61:
a6:30:a8:ef:ef:66:ca:50:a8:38:d2:12:21:c5:9e:d9:92:ee:
e6:ca:5e:a2:2c:9b:a9:9b:f4:29:0f:cd:02:c1:a3:c4:00:d0:
88:e0:84:e2:b3:b2:90:8b:c2:18:ce:20:b0:fd:57:c5:3e:18:
c2:55:ae:fc:43:79:8c:0c:63:53:33:dc:82:9b:17:08:93:8e:
49:47:e3:50:72:d8:02:6f:74:3f:dd:70:d0:52:7c:ed:1a:37:
df:94:73:6a:3c:e0:9c:aa:46:0f:87:44:ed:47:d6:cb:47:3e:
67:af:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:35:00 2026 by rpki-client