
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa
File: Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa (raw, json)
Hash identifier: WZxWZhd2+jDe+1Nt4GiSrJnbQsJR9NzdBiHxJs04Egc=
Subject key identifier: 4A:B6:BC:97:D3:FD:4D:75:38:00:76:53:C6:46:E4:CA:B5:D8:42:2D
Certificate issuer: /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial: 91
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa
Signing time: Tue 31 Mar 2026 07:31:50 +0000
ROA not before: Tue 31 Mar 2026 07:31:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63804
IP address blocks: 101.78.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Validity
Not Before: Mar 31 07:31:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4AB6BC97D3FD4D7538007653C646E4CAB5D8422D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:23:41:23:27:3b:d1:6e:dd:bb:33:a6:db:
87:96:53:79:35:ac:86:d1:eb:7f:2b:d3:7a:aa:c8:
87:12:3d:75:33:e0:77:c7:8d:bf:06:34:0d:c5:8b:
37:6f:0b:e8:9e:45:5a:c4:6d:80:db:ba:f5:f1:20:
48:6f:0d:43:41:e5:88:46:f7:3c:ae:d5:ec:87:cb:
ca:7b:cc:99:7f:56:63:f4:b6:e9:5b:10:8b:cd:08:
27:8e:78:19:7f:7e:3a:da:1d:75:47:14:21:94:6c:
a4:d8:77:6a:d9:92:68:d2:02:34:c4:b3:f4:00:2b:
70:58:5b:ce:56:5b:33:6f:f5:eb:a0:8d:03:39:14:
64:f0:12:ef:4b:6d:af:49:08:25:93:cf:b5:19:74:
d9:38:74:c8:c0:72:ed:69:de:32:1f:54:4f:c0:07:
76:e9:ab:b8:cb:0b:f7:a9:49:f9:b1:a4:11:84:af:
dc:ad:62:12:59:84:77:b2:35:eb:68:63:54:9a:22:
20:47:97:33:d4:36:55:9f:85:c6:e2:0c:f8:05:7b:
f4:83:bd:e9:05:e7:e8:fe:7c:5b:50:cb:da:7a:cd:
99:e3:b5:97:5c:a6:aa:40:05:3b:df:d4:6b:c5:97:
f7:bf:4d:d4:a2:ee:be:c1:50:06:c4:1d:82:9f:61:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:BC:97:D3:FD:4D:75:38:00:76:53:C6:46:E4:CA:B5:D8:42:2D
X509v3 Authority Key Identifier:
keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa
sbgp-ipAddrBlock: critical
IPv4:
101.78.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4e:f0:fd:34:91:28:06:b1:e3:18:93:70:79:59:22:8c:cf:
d2:10:70:ce:9a:40:ba:81:84:57:23:26:ea:30:01:43:6e:d5:
a2:0f:96:ae:12:a7:8b:83:10:4f:0b:ac:86:15:ff:39:c6:e6:
63:d5:41:5d:d5:d5:d9:d9:65:e7:7e:b4:59:29:b5:e5:ec:be:
4e:18:70:cb:2c:23:24:93:2f:be:54:aa:81:a3:68:e8:ec:20:
24:89:12:12:d1:0d:77:11:73:3d:de:a7:92:85:f9:74:25:af:
79:03:9e:a1:80:20:67:cf:66:50:78:3b:fe:fd:26:58:c6:94:
e1:90:4f:05:7c:5b:96:9c:34:db:b1:39:5b:45:c9:72:75:c6:
8c:6d:a9:72:93:6f:f3:98:fa:17:31:ad:a0:68:40:c4:60:6d:
22:7e:6f:25:ea:bd:34:2d:f7:f8:6c:5a:c9:4d:cd:53:9c:31:
7a:fb:75:f7:63:da:58:2b:00:09:0a:76:6c:23:b0:4f:5a:8b:
cd:9b:6e:1d:10:56:c7:d8:4c:b9:c4:4b:84:db:66:62:dc:04:
26:8c:14:50:ed:3b:fb:e6:32:26:ce:3c:28:cd:eb:0a:d0:66:
2e:45:5b:74:a9:66:90:78:bb:9b:6a:bb:a6:7f:34:10:7a:bd:
79:ea:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:54 2026 by rpki-client