
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/F3Z0X7xwJxq0AjpAp0BSmarOXOo.roa
File: F3Z0X7xwJxq0AjpAp0BSmarOXOo.roa (raw, json)
Hash identifier: B1wETUiyOV5KD7akdbJ17Wqhc5iZbsFggSnFBoeQCak=
Subject key identifier: 17:76:74:5F:BC:70:27:1A:B4:02:3A:40:A7:40:52:99:AA:CE:5C:EA
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: DD
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/F3Z0X7xwJxq0AjpAp0BSmarOXOo.roa
Signing time: Wed 14 Oct 2026 09:11:20 +0000
ROA not before: Wed 14 Oct 2026 09:11:20 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 14:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Oct 14 09:11:20 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=1776745FBC70271AB4023A40A7405299AACE5CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:d4:c2:05:99:6e:11:e4:d8:63:7b:0b:32:
59:4f:a1:85:00:9c:6c:64:8c:45:31:3f:52:52:81:
a4:f1:50:3f:e7:a6:26:77:7b:84:94:c8:c9:96:ed:
33:8a:a9:59:c2:55:75:ac:01:31:54:13:d6:e5:99:
41:e0:18:ce:6b:32:5d:71:e3:9b:20:27:35:2b:3d:
61:37:fb:3b:ed:f2:51:11:07:f1:4d:2b:da:fb:07:
83:da:f9:b3:d6:f2:7a:cc:43:03:1a:d2:fb:c1:bf:
ff:92:b8:e6:01:46:04:3d:09:2e:5b:da:b6:4c:ce:
e6:0b:ba:28:57:72:5f:d6:e6:69:64:f0:be:6f:73:
2d:7e:05:b0:9e:52:3f:b0:b9:4d:94:03:b4:15:b3:
60:56:c8:86:76:ce:fb:09:c8:0f:f5:d8:9f:f2:d5:
4b:c2:ff:12:9a:7c:03:9c:8e:fc:fe:06:5a:e8:fb:
78:7c:37:a3:29:d5:45:75:ad:fa:81:eb:0c:f3:f8:
54:15:5c:1e:a0:b6:17:f9:44:00:0c:03:d5:ed:6c:
8e:5e:dd:b5:25:75:29:2f:71:a5:ec:fd:78:4c:b6:
56:7c:a2:b0:63:ff:13:d2:61:56:d4:50:d4:69:6e:
4c:06:79:e2:c7:14:cf:98:87:d5:74:c8:61:33:76:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:76:74:5F:BC:70:27:1A:B4:02:3A:40:A7:40:52:99:AA:CE:5C:EA
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/F3Z0X7xwJxq0AjpAp0BSmarOXOo.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:38:f2:86:e3:9a:7f:f3:0e:b1:71:7e:41:9e:b7:66:db:6a:
50:e4:97:08:d9:19:49:1d:ff:d1:45:8c:0f:6b:dc:e1:88:93:
7c:ff:0b:37:21:00:2e:af:ce:69:f6:10:bb:f3:5c:16:40:e1:
a8:3b:12:75:97:0b:c7:41:1d:1d:a5:28:1d:90:02:5f:77:41:
dd:12:f2:b7:ed:65:2e:8c:d9:f1:f9:ef:ba:0a:b4:6d:0d:b8:
a8:68:d4:b1:21:12:8c:2b:42:74:61:ad:ed:d2:fc:d7:8d:af:
f4:b1:43:4a:75:37:87:36:0b:c0:52:cf:38:a9:72:66:f5:0c:
9c:09:de:e6:0d:01:52:2d:34:1b:2d:bf:95:05:15:d2:07:c4:
09:76:78:a7:42:01:5b:4f:1d:f8:a6:ca:4c:0c:be:d8:4e:e9:
c4:ce:e2:14:83:4d:d2:c8:a4:9c:50:47:66:48:6f:5a:67:0e:
1f:7f:02:43:9d:72:0e:71:21:4b:5f:5d:91:9d:9c:54:97:fd:
ca:c5:f9:d0:82:4e:fb:5e:28:9a:5d:97:d8:98:35:61:40:75:
af:79:6e:e5:a9:09:6f:d8:8f:31:d0:ea:a5:a9:64:05:72:be:
af:54:76:b3:49:26:60:03:5d:c7:c0:a5:37:02:94:56:37:c8:
97:ba:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:06 2026 by rpki-client