
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/xVzRD7YBjDORPb8TE_KXAHAmwcY.roa
File: xVzRD7YBjDORPb8TE_KXAHAmwcY.roa (raw, json)
Hash identifier: 5ddx+n9zSrqdoScRfy2k7JeMZW7EHSwY2CIXXMR9S8o=
Subject key identifier: C5:5C:D1:0F:B6:01:8C:33:91:3D:BF:13:13:F2:97:00:70:26:C1:C6
Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial: 81
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/xVzRD7YBjDORPb8TE_KXAHAmwcY.roa
Signing time: Tue 31 Mar 2026 07:32:35 +0000
ROA not before: Tue 31 Mar 2026 07:32:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 202.211.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
Validity
Not Before: Mar 31 07:32:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C55CD10FB6018C33913DBF1313F297007026C1C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:80:ef:97:ec:eb:e6:03:05:69:dc:69:b8:
cf:56:ec:08:86:35:ca:ad:0d:e0:28:92:c8:70:a6:
c6:20:f6:cf:9d:82:7f:3b:bd:c4:84:c2:66:69:4d:
9d:f9:9d:ba:c3:d3:2a:f6:63:ac:d0:c1:d2:99:0a:
93:42:4d:74:3e:8f:76:2e:4d:d5:f2:63:a8:35:fc:
31:6e:df:66:55:24:10:39:fc:56:63:bb:8a:89:93:
d3:71:cf:5f:10:0b:1d:94:76:a7:16:61:c1:46:cd:
23:88:16:0f:c2:24:7d:dc:b6:63:c1:21:19:d6:a6:
68:bd:88:12:13:6e:e2:9b:d0:75:97:62:34:e8:7a:
09:f7:3f:78:01:0e:c5:14:03:c5:69:2b:49:a1:6d:
f1:cc:36:65:c8:2c:7e:2b:db:65:e8:ae:c7:92:42:
79:0a:84:7e:84:e4:89:ff:ef:58:c7:5e:bf:13:c0:
25:77:7e:85:61:a1:5d:0b:77:c3:4f:d4:08:a0:5c:
65:60:61:c2:32:3a:38:f5:9e:0c:ef:ec:1f:56:eb:
39:bb:3c:1f:70:16:bb:e0:28:82:23:6f:73:18:3e:
19:a1:bf:ae:76:b5:ff:d7:2b:5b:d1:ad:d0:ec:a6:
53:bb:5e:b7:16:c5:56:43:0d:14:05:38:5d:34:ff:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:D1:0F:B6:01:8C:33:91:3D:BF:13:13:F2:97:00:70:26:C1:C6
X509v3 Authority Key Identifier:
keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/xVzRD7YBjDORPb8TE_KXAHAmwcY.roa
sbgp-ipAddrBlock: critical
IPv4:
202.211.0.0/19
Signature Algorithm: sha256WithRSAEncryption
09:9d:69:35:25:44:da:f5:85:90:2d:20:20:02:dd:04:38:af:
4f:eb:8b:9b:9e:74:d3:05:9c:d7:c1:ec:53:39:ea:12:49:67:
d5:f8:86:dd:71:fb:0b:69:93:4d:00:e3:b6:74:5a:7a:28:65:
a5:f9:a0:68:dc:d3:72:c8:02:9d:82:c6:c9:fa:ef:7a:29:45:
44:7c:87:1a:69:ec:8d:6a:1d:25:aa:25:e6:60:c9:5e:80:70:
7f:c7:c7:a5:4c:81:ef:97:3e:04:74:f5:83:25:58:73:b3:f7:
44:6a:2c:96:db:a1:49:10:6b:58:1a:28:35:fe:b4:dc:2f:01:
33:8d:55:4a:68:02:40:d3:64:ff:50:bb:8d:fb:ac:b5:23:25:
57:ee:df:93:55:0c:66:ee:a9:3e:01:b0:1a:bf:14:f6:22:e2:
cd:d2:c1:e1:21:e6:e8:4c:c7:98:71:9d:33:40:08:60:71:4a:
3c:20:33:cd:df:69:da:99:4e:64:b2:7a:4d:37:6f:f1:65:bd:
6f:e9:65:0b:23:8c:cc:42:54:18:d4:0b:e1:1c:53:fd:e7:60:
eb:f6:8e:ed:16:16:73:8d:28:db:14:f9:1b:72:e5:39:d8:f5:
35:d9:b6:ac:86:87:07:5c:9f:e5:6e:7d:e0:c5:01:fd:88:ea:
34:8d:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:26 2026 by rpki-client