
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/XW7-wHoB8BxJP3qDxWmCuFsDw-8.roa
File: XW7-wHoB8BxJP3qDxWmCuFsDw-8.roa (raw, json)
Hash identifier: BhNMauS+7CadSnEZWdcerF8GZKkTtT8Ue6bQPjv/his=
Subject key identifier: 5D:6E:FE:C0:7A:01:F0:1C:49:3F:7A:83:C5:69:82:B8:5B:03:C3:EF
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 77
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/XW7-wHoB8BxJP3qDxWmCuFsDw-8.roa
Signing time: Sun 01 Feb 2026 01:36:00 +0000
ROA not before: Sun 01 Feb 2026 01:36:00 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 17698
IP address blocks: 220.213.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Feb 1 01:36:00 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=5D6EFEC07A01F01C493F7A83C56982B85B03C3EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:b3:a7:5c:57:62:e6:38:13:ff:64:6a:ea:
3b:37:6a:db:34:b7:32:c9:65:ce:37:ea:dd:54:4f:
d1:89:d6:e3:29:55:45:c4:28:72:52:4d:ae:9f:c3:
1c:25:38:2c:04:de:df:94:7a:c4:4f:db:04:73:3c:
0d:56:10:29:f2:23:0d:d2:cd:2c:6c:16:27:85:64:
47:06:e9:a3:c4:8b:0a:12:06:47:37:b0:a1:2a:24:
f0:84:93:e9:e6:1c:42:c4:c6:4f:a6:3e:18:cb:80:
35:91:83:9d:15:42:24:1a:d4:fc:3b:57:e0:18:4a:
40:0c:f6:eb:71:04:6a:8d:12:35:4a:b2:07:00:66:
38:f4:f5:a3:d1:eb:40:ba:4e:ac:2c:96:2e:56:2a:
da:35:14:bf:c9:2c:b1:a0:11:f4:a0:55:60:22:a0:
dc:62:06:91:d8:05:14:fc:10:59:78:46:bf:a6:26:
2e:b3:56:e0:05:6d:0b:83:e3:20:e3:e7:18:a1:aa:
bb:78:53:bb:9d:ec:a9:d4:53:81:1e:63:60:ac:b0:
ac:7e:fb:c2:b3:af:f0:49:50:3a:02:aa:0c:c3:04:
78:2d:f1:c7:17:e4:01:63:bd:33:23:22:59:e2:f0:
b1:06:61:34:7b:a5:09:cc:4f:7c:cd:30:4a:66:b5:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6E:FE:C0:7A:01:F0:1C:49:3F:7A:83:C5:69:82:B8:5B:03:C3:EF
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/XW7-wHoB8BxJP3qDxWmCuFsDw-8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.213.192.0/19
Signature Algorithm: sha256WithRSAEncryption
07:eb:25:6b:1d:73:92:57:2f:aa:0d:9d:36:b6:cc:8c:2e:14:
53:54:0e:67:4b:58:f7:e3:db:a9:54:70:60:1b:53:88:8e:20:
27:8f:78:b4:0b:ae:c2:a1:c8:d4:9d:c2:3e:44:62:54:eb:1d:
24:1c:3a:0b:cd:cf:26:e2:67:44:86:c0:14:4a:e9:08:1a:ee:
94:f7:71:78:fc:1a:c8:d3:de:29:c2:e7:5d:f5:b3:52:92:26:
d3:74:48:66:8a:9c:be:73:3d:c0:2e:00:80:a9:51:74:4d:bd:
78:5b:da:66:67:6c:ce:f2:36:5e:f7:70:e6:7e:9f:cd:b2:73:
7a:b2:ef:d8:04:a3:d6:54:6b:e2:8d:11:45:04:1b:47:b9:25:
2f:65:7d:ab:8b:62:f3:6e:96:82:0a:eb:65:60:3d:77:10:07:
a1:78:14:72:61:87:7b:15:f8:23:41:3d:53:c7:b2:fd:22:b6:
9d:07:71:f8:44:bf:a6:fe:f1:24:59:13:41:f8:47:6b:ab:fa:
8a:4a:57:d1:71:8d:5e:68:87:2a:10:9c:75:97:c3:3e:05:e6:
4a:ac:a0:b2:2a:ac:3e:74:c6:b0:ef:8b:fe:54:ba:b5:ad:bb:
a2:8b:e3:12:53:be:2d:d5:e6:f4:1e:99:cf:16:58:3e:4f:63:
b2:8d:83:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:04:53 2026 by rpki-client