
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ubcm_vDBGIs2zP6yb6OFWrD54pw.roa
File: ubcm_vDBGIs2zP6yb6OFWrD54pw.roa (raw, json)
Hash identifier: gj3HUKbU7Oew2MVp7fZGrbQ0++DkZKVkQk3vzC3aq5Q=
Subject key identifier: B9:B7:26:FE:F0:C1:18:8B:36:CC:FE:B2:6F:A3:85:5A:B0:F9:E2:9C
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 69
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ubcm_vDBGIs2zP6yb6OFWrD54pw.roa
Signing time: Sun 01 Feb 2026 01:35:52 +0000
ROA not before: Sun 01 Feb 2026 01:35:52 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 17698
IP address blocks: 123.176.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Feb 1 01:35:52 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=B9B726FEF0C1188B36CCFEB26FA3855AB0F9E29C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fa:66:d9:23:f2:93:9e:8f:57:69:ed:a1:5a:
26:85:7c:7b:1d:d2:6f:d7:48:6f:66:07:30:c3:93:
42:6d:99:14:78:34:68:2d:98:1f:a0:38:e7:d2:db:
0e:26:bc:16:a4:3c:41:7d:92:24:ae:99:0a:b1:1c:
32:11:98:8f:ed:d1:b4:af:ba:b0:fe:cf:bc:11:78:
7e:94:3d:10:e4:1a:69:16:f1:66:07:52:0a:77:f8:
f7:36:66:ff:58:8c:e4:56:03:b5:11:38:1c:da:b4:
d0:1f:5a:01:a9:10:78:db:ed:cf:3d:01:5a:50:9b:
ae:b7:dc:1a:f5:b5:7f:39:16:e2:39:fb:2e:68:8d:
f3:58:95:5b:26:2c:d8:34:d6:ad:40:ed:e0:72:49:
58:82:13:0f:5e:f8:43:fd:75:aa:c8:59:72:19:b8:
36:7c:b2:60:dd:9b:ff:ea:1a:43:ef:8c:70:86:46:
17:4c:cc:0d:92:e9:f8:43:b8:6d:c8:25:66:94:90:
c1:b8:1e:31:76:8b:40:72:7c:0c:36:d5:6a:7e:5e:
7b:69:2b:85:53:3d:16:f6:62:0c:61:9b:5c:c7:bc:
44:b6:e9:27:c6:1f:1e:29:15:9c:c2:c2:93:7a:38:
94:95:53:e6:68:62:26:8a:ba:25:94:9f:26:a7:8d:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B7:26:FE:F0:C1:18:8B:36:CC:FE:B2:6F:A3:85:5A:B0:F9:E2:9C
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ubcm_vDBGIs2zP6yb6OFWrD54pw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.176.48.0/21
Signature Algorithm: sha256WithRSAEncryption
42:c4:56:f8:eb:6a:41:89:9f:cc:ce:1f:90:f8:d2:f7:89:6c:
87:0a:86:05:2c:7c:30:91:f4:1c:0c:fe:05:04:c5:3e:41:4e:
89:65:0b:3f:f8:57:72:3d:b1:fe:95:49:88:4d:e1:55:d7:15:
6c:5b:8f:8c:7e:12:d8:9f:f4:fa:67:7b:46:5b:e8:1d:27:08:
ce:36:d1:5b:8d:f7:1a:42:2c:f2:39:8f:c7:35:86:fb:e7:8c:
f2:6b:c1:85:08:7d:ca:e5:b0:1a:74:58:b3:2c:18:af:f6:86:
a3:14:de:73:9b:42:2b:67:95:91:fe:66:17:78:79:e8:bc:ca:
5d:74:09:36:34:4c:4c:14:99:95:e1:e8:5e:2e:47:7e:bc:ce:
23:db:af:32:12:cb:2b:18:11:6a:4d:01:43:bd:9e:0b:4a:60:
e1:ce:30:52:0b:98:15:83:75:a6:05:f2:a2:00:da:02:1f:16:
fb:ab:95:5e:d6:3f:9b:6f:75:b1:65:db:ba:04:ea:6d:1e:0e:
d1:e4:e0:92:8e:5d:56:01:80:fd:0d:7b:ba:0d:25:78:05:88:
aa:5a:a7:ec:17:d1:c5:40:64:24:c7:52:88:fa:c3:b1:64:82:
5e:3d:c9:f1:80:3f:81:08:fc:ef:f5:22:c4:75:2d:7c:82:c2:
f1:c4:15:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:30 2026 by rpki-client