
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zAnORyBBG79NNOQkvhkpJNjmNrE.roa
File: zAnORyBBG79NNOQkvhkpJNjmNrE.roa (raw, json)
Hash identifier: jT59cwfzqPZ0CgI6sOYI2huBMVd4JMuLwzqX0fmtzJ4=
Subject key identifier: CC:09:CE:47:20:41:1B:BF:4D:34:E4:24:BE:19:29:24:D8:E6:36:B1
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 72
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zAnORyBBG79NNOQkvhkpJNjmNrE.roa
Signing time: Sun 01 Feb 2026 01:35:57 +0000
ROA not before: Sun 01 Feb 2026 01:35:57 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 17698
IP address blocks: 218.216.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Feb 1 01:35:57 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=CC09CE4720411BBF4D34E424BE192924D8E636B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:87:04:5e:90:d4:83:a5:f5:57:0a:61:60:76:
9c:bf:d6:af:63:fe:4a:7b:98:6e:00:43:ad:fe:04:
02:25:15:d4:42:86:c9:1e:c6:d7:cd:ab:7d:46:0a:
bd:2a:dc:66:5b:2a:51:f5:a1:a3:55:17:e3:dc:44:
23:c5:e6:d8:ec:d2:eb:9d:02:ee:ee:fb:f5:ad:c5:
86:ce:21:2e:d9:d6:6a:79:0a:d0:19:1b:d3:ca:0c:
37:2e:34:d5:8d:f6:a6:15:1b:d9:f0:6c:36:16:24:
47:75:5d:54:9f:30:a2:67:19:92:6a:d7:4c:bc:d4:
0c:ad:56:e1:e4:d7:25:2d:1c:21:da:81:06:58:07:
70:dd:8a:e3:7e:c8:0a:1b:c4:73:d2:39:0a:65:67:
08:22:99:e9:c5:b2:ef:9a:08:e3:2e:95:c4:18:ab:
87:08:e2:04:1c:1a:36:eb:49:f9:02:80:ba:72:a2:
9b:c5:93:2e:db:c0:ab:ac:4e:38:fd:e5:2c:08:2a:
33:9e:0b:79:ae:77:0a:6e:c0:f3:29:f4:68:2f:6a:
d9:a8:cf:df:cb:ac:64:ab:a6:fc:37:a0:f2:7f:d2:
24:3a:0b:6d:a4:04:50:43:65:77:35:8f:49:d6:99:
55:77:68:0f:2a:63:1c:b5:93:e8:21:0c:26:23:77:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:09:CE:47:20:41:1B:BF:4D:34:E4:24:BE:19:29:24:D8:E6:36:B1
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/zAnORyBBG79NNOQkvhkpJNjmNrE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.216.192.0/18
Signature Algorithm: sha256WithRSAEncryption
65:0f:f8:bf:82:ea:32:c3:1e:e3:8a:31:99:11:6a:ed:72:46:
98:eb:4e:46:e9:c7:88:ef:eb:04:fc:38:6e:12:cc:91:6b:f1:
c4:4d:4d:3b:83:a4:1c:9d:a7:d2:17:1a:b9:de:f0:43:7e:fa:
ed:49:72:45:6f:b1:74:81:90:d7:79:42:d6:e8:96:ab:97:17:
79:5f:19:34:bf:92:02:3c:f3:aa:e2:26:9f:9b:11:49:05:04:
68:6e:bf:bd:23:d1:b9:cf:44:ad:3a:9b:84:f1:eb:98:af:61:
9c:2f:62:48:32:a6:e5:04:f4:90:89:e9:26:17:74:55:8e:7d:
19:37:c4:dd:da:80:86:04:fe:4b:60:8a:17:41:91:12:8e:9f:
3e:06:a3:af:0d:28:e1:6b:e5:83:7e:4c:f9:e3:51:4f:fb:f9:
5d:50:87:db:07:52:bb:8b:30:4d:7f:c3:4f:1d:cd:01:71:40:
8b:0d:4e:9d:7a:29:87:e2:31:29:0b:cc:50:a0:d9:6a:ef:71:
04:f4:cc:7c:b7:3c:2d:e0:49:42:1f:ac:ba:57:77:c6:cd:92:
2a:8d:a1:f0:e9:4c:bc:f7:45:de:a4:64:7d:3a:7c:ce:8b:bf:
96:b2:1e:3f:ba:83:82:d8:84:ea:47:e9:3e:3e:a7:7b:fb:1f:
83:65:f6:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:34 2026 by rpki-client