
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/86MS_cjmoGVORJTDQRTNRHOjl-k.roa
File: 86MS_cjmoGVORJTDQRTNRHOjl-k.roa (raw, json)
Hash identifier: /XEWM+e5YzcKU/ViFwSUGfUzSAwi2FdoTj4zJ6m5zuA=
Subject key identifier: F3:A3:12:FD:C8:E6:A0:65:4E:44:94:C3:41:14:CD:44:73:A3:97:E9
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 6A
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/86MS_cjmoGVORJTDQRTNRHOjl-k.roa
Signing time: Sun 01 Feb 2026 01:35:52 +0000
ROA not before: Sun 01 Feb 2026 01:35:52 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 17698
IP address blocks: 123.255.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 03:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Feb 1 01:35:52 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=F3A312FDC8E6A0654E4494C34114CD4473A397E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:75:c8:c7:9b:f5:a5:ae:6d:d9:d6:fc:7f:
13:d3:f7:64:95:49:a7:61:f9:c6:a0:49:c8:bb:a8:
c6:d7:57:86:31:47:ef:90:87:8a:80:8a:01:28:63:
a8:23:19:45:88:61:2f:bc:c1:85:7c:43:11:7a:9f:
66:9c:9e:47:5f:25:c9:8f:b0:59:29:0b:8b:06:61:
b3:61:56:83:b6:7c:54:28:22:ab:3d:39:df:6f:e8:
32:1e:c9:a5:38:c8:30:10:0f:08:2a:b5:9b:88:3a:
87:f9:00:f4:40:4f:4b:dd:eb:aa:74:67:ea:61:0f:
30:fe:19:aa:d1:98:24:5e:c9:83:5e:c9:89:5d:01:
36:15:85:ee:46:59:eb:53:72:eb:51:80:66:cd:9a:
ef:03:a2:c1:3e:ae:a3:80:d9:64:f7:5c:74:f7:4d:
d4:db:e3:de:dc:f1:94:c1:bb:bb:8a:0e:79:27:e4:
13:43:34:41:1e:7d:3b:22:1e:de:ee:2b:4a:33:94:
78:eb:f9:82:91:66:d7:f1:45:8f:55:8f:8d:2f:1b:
b0:22:52:72:65:00:b3:7d:a4:e8:59:11:3a:31:b1:
f3:87:b5:46:4b:c6:67:24:7c:df:c7:16:85:1f:63:
67:ad:96:9a:94:0d:87:a0:3d:b3:e0:6f:db:71:71:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A3:12:FD:C8:E6:A0:65:4E:44:94:C3:41:14:CD:44:73:A3:97:E9
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/86MS_cjmoGVORJTDQRTNRHOjl-k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.255.192.0/21
Signature Algorithm: sha256WithRSAEncryption
16:b2:33:28:a8:b3:60:4f:29:20:46:86:4d:9a:ff:1a:ec:10:
0b:44:e0:23:ba:1f:a6:bd:86:01:69:0f:98:c8:de:56:38:02:
19:26:a8:97:b8:7a:86:46:2a:90:da:b7:a1:2c:65:51:9d:26:
4e:ad:4f:2d:16:58:93:7e:f6:25:f5:e5:91:5c:53:7c:8a:1b:
aa:ed:06:c8:98:f4:98:cd:03:38:26:a8:50:99:46:2d:db:f5:
d4:84:db:f6:09:b8:c2:eb:83:9d:63:f3:c4:fa:cd:cc:d2:23:
01:71:0d:43:2a:07:30:b5:17:87:29:71:4b:7c:7c:f9:2f:21:
8f:15:00:9a:e5:7d:8a:e2:c1:33:b1:76:55:7e:f6:86:16:dc:
9e:fc:d6:df:1a:56:5b:62:05:d2:22:7f:3c:27:5e:f1:72:3c:
4b:ee:e7:2c:99:7e:67:f1:54:7e:aa:73:8f:0f:86:3d:fb:2c:
81:5d:c5:c9:40:7e:1f:fa:35:2f:cc:b9:0f:05:d2:15:d6:68:
d2:ca:6a:8a:5a:0e:14:0f:be:af:97:e6:f4:ec:6c:e4:14:eb:
b4:43:41:76:74:4e:9b:f7:fe:f0:5a:6d:d7:4e:51:95:89:d8:
ab:14:0d:c7:6a:02:4e:76:29:94:c4:fd:51:b0:8c:3a:15:f5:
65:ee:aa:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:45:39 2026 by rpki-client