
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/dXzvRFW8Vmkvx68BmGbWFmzmCOo.roa
File: dXzvRFW8Vmkvx68BmGbWFmzmCOo.roa (raw, json)
Hash identifier: EgA29+e+DMY+FVEY8DrU6IjNISGH02ylBXJoekHEW0o=
Subject key identifier: 75:7C:EF:44:55:BC:56:69:2F:C7:AF:01:98:66:D6:16:6C:E6:08:EA
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 59
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/dXzvRFW8Vmkvx68BmGbWFmzmCOo.roa
Signing time: Tue 31 Mar 2026 08:24:08 +0000
ROA not before: Tue 31 Mar 2026 08:24:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 115.84.184.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 13:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 31 08:24:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=757CEF4455BC56692FC7AF019866D6166CE608EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:28:4b:85:99:ea:00:3e:b7:46:7a:83:49:
aa:6f:b6:4e:00:d3:c4:16:98:91:45:02:86:5b:30:
98:61:c0:30:23:9b:8b:f7:b0:39:f5:bb:89:e4:78:
6c:7b:34:70:45:82:7d:ea:07:c2:4e:eb:9a:00:7f:
16:02:57:32:b3:84:e9:21:20:e5:55:4a:c7:c6:ed:
e0:8b:a2:ef:8d:04:f4:b5:43:78:a1:f3:c0:37:d5:
51:56:35:76:a0:3c:6f:bd:f8:b2:61:c6:96:7e:25:
6d:80:cc:ee:76:b7:92:0d:94:a2:50:da:e5:d0:e6:
ea:fe:95:3f:c1:d4:68:49:42:d3:25:79:c0:4c:e4:
d7:f7:80:e7:9f:3c:6e:7d:b3:d1:62:8a:03:d9:08:
ad:a9:cb:89:a7:aa:66:33:0e:bc:40:c6:c2:2f:b1:
e5:10:43:ec:ba:39:d1:38:1f:65:0d:d4:d2:f3:ff:
0a:9b:39:f8:85:15:b3:62:15:b9:69:99:29:12:a0:
b8:c8:63:96:15:f7:e0:d1:f6:40:1b:87:e8:25:7d:
1a:9a:ad:cc:13:f2:fb:62:61:45:37:a6:f5:01:d6:
35:50:c9:66:54:de:d4:bf:dc:4a:a3:e1:63:66:88:
4a:b3:48:86:85:bd:41:6e:46:48:ec:1d:a9:d5:47:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7C:EF:44:55:BC:56:69:2F:C7:AF:01:98:66:D6:16:6C:E6:08:EA
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/dXzvRFW8Vmkvx68BmGbWFmzmCOo.roa
sbgp-ipAddrBlock: critical
IPv4:
115.84.184.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:51:a8:97:81:d8:27:5c:e8:5a:01:57:2b:c8:18:ff:29:7e:
6f:f0:6d:dc:1b:4f:ab:3c:57:c8:0b:60:11:a0:72:ef:60:71:
4f:54:e8:db:83:76:b1:63:aa:2f:e6:bf:b7:3b:ab:cc:5e:f0:
1b:1a:bc:ce:0e:76:f8:08:eb:0b:34:ed:f2:5a:82:2f:43:a1:
bb:5e:4b:67:da:aa:32:9f:85:30:29:4a:d8:93:bd:b4:15:6d:
a5:82:02:1f:6f:ce:10:73:e4:c2:2c:d0:83:65:40:a2:9f:09:
4e:4d:ee:c0:90:5c:02:1b:2f:23:f3:04:04:e6:25:96:dd:f0:
b4:8a:cc:40:d0:8f:c5:42:e4:e1:6f:cd:93:2e:52:2f:3f:0c:
c9:a3:a7:f2:03:2c:5a:aa:fc:4d:8e:c9:bd:88:de:14:fa:3e:
28:5b:34:66:31:09:32:4a:a4:92:14:7d:fa:88:cf:e2:16:d7:
2c:1d:f7:5f:48:ad:d5:6f:41:2d:9f:a1:ce:25:af:a8:c3:33:
9b:31:17:50:12:00:e6:9a:c2:ac:b0:c0:51:36:09:74:dc:5b:
38:a3:4f:ca:aa:72:74:30:d0:94:ac:cb:fb:e8:be:e2:4a:2f:
1e:80:0a:37:fa:05:28:de:6f:7e:d5:7e:d6:0a:f1:ba:45:29:
08:89:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:56 2026 by rpki-client