
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/EJgAj4Af-eYCUGgLS_psGxDYYI4.roa
File: EJgAj4Af-eYCUGgLS_psGxDYYI4.roa (raw, json)
Hash identifier: 2FmbS0hv9oOgBjhY7XFTKMRwlxGDxMTGoTnQ8LN7Xrg=
Subject key identifier: 10:98:00:8F:80:1F:F9:E6:02:50:68:0B:4B:FA:6C:1B:10:D8:60:8E
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 5E
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/EJgAj4Af-eYCUGgLS_psGxDYYI4.roa
Signing time: Tue 31 Mar 2026 08:24:11 +0000
ROA not before: Tue 31 Mar 2026 08:24:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 126.209.240.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 14:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 31 08:24:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1098008F801FF9E60250680B4BFA6C1B10D8608E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:fd:83:45:1b:d3:bd:24:74:29:36:85:31:
de:56:5b:bd:21:6e:ce:4a:89:c9:40:30:96:0f:56:
31:c7:84:15:74:6e:68:68:5a:f0:65:8c:2d:4c:16:
e2:4d:66:a3:8f:c6:24:d4:b7:bb:4a:b4:f9:c4:dc:
58:02:69:cb:9a:13:5d:68:83:8b:c3:41:90:70:cb:
e9:4c:f3:b5:49:da:3d:f6:bf:de:56:e7:8a:b4:01:
e7:4d:af:18:13:e2:7c:28:22:74:1a:76:1e:10:ea:
34:0c:80:4d:32:e2:04:6b:9b:0a:f2:66:a7:27:43:
ee:01:21:d9:1b:26:d4:3b:bc:7c:c7:f8:f5:d8:da:
fb:c5:26:32:ef:26:98:f2:a6:85:55:c7:f7:1c:37:
1b:77:68:5f:89:ae:2a:3e:1e:3f:18:4b:0c:14:f5:
37:71:09:3d:63:97:60:5b:07:9e:39:1f:9f:c6:d2:
77:ae:8e:eb:02:c3:04:d2:6a:6a:e7:ae:8f:1c:1b:
fc:50:02:4f:b3:21:7c:ef:04:a5:41:26:45:fe:f5:
e6:1e:f8:ed:f4:9c:82:6b:a4:cc:b4:9f:2c:65:13:
49:4a:62:c8:a0:1b:4b:33:0a:79:ae:ef:7b:1b:6a:
0f:6a:6e:0f:37:81:0b:76:05:8e:2d:59:e5:32:ad:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:98:00:8F:80:1F:F9:E6:02:50:68:0B:4B:FA:6C:1B:10:D8:60:8E
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/EJgAj4Af-eYCUGgLS_psGxDYYI4.roa
sbgp-ipAddrBlock: critical
IPv4:
126.209.240.0/20
Signature Algorithm: sha256WithRSAEncryption
63:1a:49:08:48:4d:c8:f5:de:0f:7f:3a:95:05:61:15:de:ba:
6b:4a:83:a9:b1:f8:ee:f6:e1:07:dd:3d:41:ac:8e:9b:38:d0:
34:88:31:2a:72:08:02:9f:da:3d:1b:10:e1:80:08:68:7b:e0:
70:18:a7:15:a2:5c:93:6d:db:98:04:dc:0e:a6:15:46:19:59:
17:37:77:b3:a2:29:ec:ce:5d:08:4b:73:28:d8:a4:4f:65:09:
24:92:84:03:d2:b9:c5:be:30:c4:b5:f8:8f:3c:1a:a9:10:a5:
5d:45:c3:0c:34:9d:3a:b6:fb:6a:82:e5:79:0f:db:60:46:70:
96:b0:65:d8:fe:ae:a2:0e:86:01:f3:db:06:7a:ee:dc:94:af:
ff:29:fe:b5:28:79:d8:6a:c8:d5:33:bd:e6:c5:55:ff:a3:79:
9a:38:d0:f2:1c:94:48:07:62:94:68:6f:16:33:65:1e:fe:0a:
5d:cf:15:6b:49:b4:e5:0d:e0:d3:b9:08:3b:5b:96:e3:12:c7:
ee:ee:bf:b5:da:c9:cd:a2:62:33:50:fb:30:2d:c6:db:19:e8:
ef:ae:16:9f:ac:95:96:22:37:6e:57:8c:02:e1:79:60:59:4a:
8a:1c:22:87:e6:66:7a:62:5c:a3:18:e9:ef:0e:32:08:01:67:
ab:1c:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:35:05 2026 by rpki-client