
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/Od74eziDaERuWpkOADQG0o5HzrQ.roa
File: Od74eziDaERuWpkOADQG0o5HzrQ.roa (raw, json)
Hash identifier: DT9oEiWTmP/08vfjuCuCVIFR3u3Dq1+OgfSFAtQh71c=
Subject key identifier: 39:DE:F8:7B:38:83:68:44:6E:5A:99:0E:00:34:06:D2:8E:47:CE:B4
Certificate issuer: /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial: 69
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/Od74eziDaERuWpkOADQG0o5HzrQ.roa
Signing time: Tue 31 Mar 2026 07:50:30 +0000
ROA not before: Tue 31 Mar 2026 07:50:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17707
IP address blocks: 61.121.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
Validity
Not Before: Mar 31 07:50:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=39DEF87B388368446E5A990E003406D28E47CEB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:7e:2f:f0:2f:02:23:04:71:13:ee:48:d8:
2e:a8:a0:fc:20:44:9f:79:68:ad:f8:41:f6:98:d8:
82:da:1f:2b:c7:70:60:e7:43:ab:61:64:dd:84:6f:
c9:32:6d:9c:3f:0a:c2:7e:51:20:86:2b:97:86:b7:
35:84:89:12:fc:6c:ab:bc:17:3e:52:6d:42:ce:36:
ec:1b:69:3f:44:a6:c9:b9:b5:c8:1f:e9:ba:81:c8:
bc:3d:d4:ec:ea:5d:7d:6a:3e:c9:f4:52:25:08:13:
2f:08:41:54:cd:55:b7:68:87:42:15:cf:58:c4:7c:
2a:95:80:b2:62:41:dd:02:a8:29:69:e0:92:6d:0b:
4e:a9:b5:0c:47:2d:b2:9c:29:d6:ec:bb:88:8d:7f:
45:70:4f:6f:94:80:75:be:27:15:70:d0:9d:a9:fb:
ef:20:40:33:c1:76:b0:e6:87:bf:41:fa:72:a9:d1:
0c:a3:60:54:41:7e:2d:29:0d:53:89:9f:5b:0f:58:
dd:3e:63:5b:92:38:2e:96:3c:f7:e1:92:a4:c1:29:
44:c9:08:6c:e4:48:bb:84:8f:64:57:3e:5e:34:ba:
2b:b4:fe:62:7a:a7:29:e1:5b:0b:79:ec:d7:92:da:
a2:45:f9:9e:84:92:d9:ab:59:5d:68:a4:46:3f:8b:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DE:F8:7B:38:83:68:44:6E:5A:99:0E:00:34:06:D2:8E:47:CE:B4
X509v3 Authority Key Identifier:
keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/Od74eziDaERuWpkOADQG0o5HzrQ.roa
sbgp-ipAddrBlock: critical
IPv4:
61.121.208.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:6a:d6:07:07:c6:9f:b9:71:00:56:f5:77:c2:68:71:12:3b:
95:fa:08:2d:7b:e3:b1:c3:14:c9:a7:23:55:07:c3:fc:34:0a:
a3:5e:87:f3:4a:57:d4:64:10:83:f6:dc:63:07:e3:28:0d:f8:
51:1a:88:af:ba:d2:db:aa:5c:a7:3f:19:af:30:17:a2:6b:b2:
59:10:37:16:90:1f:6b:c2:35:00:42:9a:5a:a8:18:eb:6a:61:
9c:c0:6a:ec:76:97:2e:13:8d:ce:1c:d3:0c:92:f8:16:53:fe:
34:52:69:ed:8a:a7:1d:cf:0b:d1:16:c0:07:98:c9:56:cc:ca:
0b:36:cd:98:3c:a4:4e:bb:3b:2b:a1:7f:2f:80:63:b1:08:c6:
2d:1e:d3:cf:25:54:6c:6a:f7:27:cd:80:18:98:b1:e4:e8:47:
7a:de:1d:2e:41:a6:b8:9d:d7:68:29:1e:cd:17:37:6a:b0:82:
47:04:fd:bd:33:10:13:82:13:f4:3d:dd:44:ce:f5:4d:e9:13:
8f:0c:3a:78:a8:f0:fe:99:a1:0d:0e:6e:73:16:46:34:55:4a:
82:e0:ce:0e:e2:53:79:ae:f2:19:5e:3f:01:39:d0:3e:60:1a:
e8:34:b7:3e:fe:3e:69:19:86:6e:06:4d:08:88:79:f5:bb:e9:
3b:cb:05:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:51:57 2026 by rpki-client