
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/Uhfj_ELn7p7jiJdhketQJ53K4dE.roa
File: Uhfj_ELn7p7jiJdhketQJ53K4dE.roa (raw, json)
Hash identifier: Dj4p/v3VgHtO1j3hrU2wYhI+eSHLSI7e1x6YcWUHL4g=
Subject key identifier: 52:17:E3:FC:42:E7:EE:9E:E3:88:97:61:91:EB:50:27:9D:CA:E1:D1
Certificate issuer: /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Certificate serial: 39
Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/Uhfj_ELn7p7jiJdhketQJ53K4dE.roa
Signing time: Tue 31 Mar 2026 08:34:26 +0000
ROA not before: Tue 31 Mar 2026 08:34:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23784
IP address blocks: 119.252.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Validity
Not Before: Mar 31 08:34:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5217E3FC42E7EE9EE388976191EB50279DCAE1D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:65:a8:e4:ef:3f:e1:3a:7c:65:8c:3c:36:
35:67:65:9b:1b:3f:bb:f4:53:d1:d8:a7:7a:e9:52:
88:1b:06:1e:48:7a:b3:95:0f:09:b1:ec:8c:9f:a7:
51:96:9b:c7:d9:55:98:b2:30:48:53:19:f1:3c:35:
61:f9:21:14:6f:28:f7:91:70:10:69:82:87:31:d0:
1f:a6:8b:21:46:01:3e:d9:a5:64:cd:23:49:3c:a3:
70:ce:ea:3c:bf:84:81:f5:3a:dd:77:38:96:4a:46:
74:de:ca:15:d3:d0:5a:ea:56:28:21:0f:fa:b8:1a:
dc:a5:ca:61:8d:5e:07:67:de:a5:d8:9f:f3:08:76:
ae:03:57:83:40:a7:5c:92:06:52:f0:bf:ca:ed:83:
3b:be:70:8b:c1:72:3f:80:15:90:d2:86:04:f0:d6:
ed:45:13:db:ba:f1:6e:6c:68:86:70:5b:fc:3d:a9:
21:ed:f0:91:cc:a8:7a:76:ac:0e:60:64:d6:05:3c:
1e:80:d3:99:4c:ca:f4:78:79:11:41:44:f0:a0:ce:
a3:63:f5:24:75:92:c6:6d:11:6d:60:cc:47:41:69:
87:08:6f:a6:01:a9:9b:83:24:ad:cf:2c:aa:ed:5d:
0c:2b:1d:99:f8:8e:4a:38:3f:de:b3:24:8d:7e:2a:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:17:E3:FC:42:E7:EE:9E:E3:88:97:61:91:EB:50:27:9D:CA:E1:D1
X509v3 Authority Key Identifier:
keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/Uhfj_ELn7p7jiJdhketQJ53K4dE.roa
sbgp-ipAddrBlock: critical
IPv4:
119.252.32.0/19
Signature Algorithm: sha256WithRSAEncryption
89:2b:14:7b:ff:1c:0e:97:a9:f0:7b:34:e5:c6:5e:ba:d7:0c:
0f:14:49:3b:51:9e:56:9f:05:2d:f4:67:74:af:c1:de:17:1f:
ea:eb:d2:62:28:41:d6:59:ff:3f:e1:34:c7:6a:6d:31:d5:ae:
d6:09:ea:00:3a:33:ca:df:f8:ed:9a:bb:d4:75:63:c6:ef:08:
36:ba:5a:28:cd:83:ea:3b:9f:01:25:4d:13:0b:2a:31:bd:72:
1d:03:74:71:42:2a:47:84:6b:47:60:47:ed:9e:37:5f:6b:5b:
07:36:0e:fd:81:2c:93:c4:f4:82:23:62:b1:c7:c7:f9:0d:8e:
ff:a3:41:75:5b:2e:db:af:22:f7:ce:38:a4:39:63:72:4b:b9:
76:c6:c5:a0:e6:17:b2:58:ee:35:2c:59:82:76:90:7d:aa:ef:
0e:54:10:ed:c0:84:31:08:f1:0a:02:b5:b2:d6:46:01:d4:10:
5c:46:ab:62:5d:fb:1e:36:0e:f0:10:00:de:68:1d:80:c8:72:
a6:90:46:bb:a9:f8:96:10:10:96:65:62:34:e0:9d:19:66:11:
3f:77:b8:70:18:36:b7:7f:8e:4a:f3:c9:8e:05:dd:c8:a3:d3:
6d:90:e9:c1:72:63:18:41:e7:df:ed:cd:70:78:db:40:f3:ee:
5a:34:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:45 2026 by rpki-client