
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/xt9vXJqI3W3RDKjKXbiyyLFz17Q.roa
File: xt9vXJqI3W3RDKjKXbiyyLFz17Q.roa (raw, json)
Hash identifier: dMyeUZosZkbAkb2BBoFdwEgPiN68v8It/RYTeNCN51s=
Subject key identifier: C6:DF:6F:5C:9A:88:DD:6D:D1:0C:A8:CA:5D:B8:B2:C8:B1:73:D7:B4
Certificate issuer: /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial: 67
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/xt9vXJqI3W3RDKjKXbiyyLFz17Q.roa
Signing time: Tue 31 Mar 2026 07:51:50 +0000
ROA not before: Tue 31 Mar 2026 07:51:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 138384
IP address blocks: 133.106.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48CD162824C1F863871899267CC160280776531F
Validity
Not Before: Mar 31 07:51:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C6DF6F5C9A88DD6DD10CA8CA5DB8B2C8B173D7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:b7:de:ca:4f:3d:a2:97:e8:c5:c3:f1:56:
54:8a:fc:7f:f7:c5:dc:4e:5c:c5:f8:7b:34:06:49:
1f:8f:3e:cd:76:b4:53:da:3d:95:7f:80:24:4f:cb:
1d:0b:37:fb:92:83:c2:37:cf:0e:54:2f:54:2f:eb:
5c:b6:bf:88:cf:93:2a:85:60:65:2f:6e:13:7f:60:
1a:01:0f:ae:97:2b:bd:16:db:57:e2:4f:f6:80:f5:
b8:25:37:c0:eb:55:36:10:7c:ac:5d:ad:cc:df:50:
a6:ed:69:e0:c8:ad:42:b1:ad:fb:34:60:51:c8:c7:
bf:b4:50:e1:7d:bd:9b:50:aa:c9:6e:7e:27:5a:25:
e0:4b:e1:30:03:1d:09:fc:f2:0f:04:13:bb:b7:c9:
2e:ea:12:82:7f:e5:b3:38:29:88:ed:33:f7:f8:ec:
53:cb:24:79:f6:a5:ed:51:b3:0d:85:ce:65:70:d2:
2f:15:df:f3:44:00:ff:16:94:41:78:6e:eb:5e:ed:
e1:6a:66:4c:33:35:a3:7d:9a:98:3e:54:9b:24:86:
ab:d1:c8:47:0a:d0:cd:83:f9:f5:23:89:4f:93:cf:
33:99:24:8f:94:b2:2c:24:f3:86:de:cf:71:d1:99:
f3:0e:60:86:64:6e:0c:9f:e8:8a:4e:aa:49:80:ee:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DF:6F:5C:9A:88:DD:6D:D1:0C:A8:CA:5D:B8:B2:C8:B1:73:D7:B4
X509v3 Authority Key Identifier:
keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/xt9vXJqI3W3RDKjKXbiyyLFz17Q.roa
sbgp-ipAddrBlock: critical
IPv4:
133.106.16.0/20
Signature Algorithm: sha256WithRSAEncryption
91:97:8a:13:ea:ac:a1:20:56:20:de:7a:3d:58:f1:c5:28:a7:
63:7a:c7:59:ec:a5:92:8c:71:ed:67:cb:33:1d:7c:89:61:83:
fa:46:04:11:cf:f3:86:0e:e4:88:72:6b:bc:f9:c8:76:9f:b6:
28:37:60:da:25:dd:20:19:f1:fe:26:67:f4:b3:2f:01:69:4d:
ac:fa:fa:55:72:c3:c1:95:ad:f2:3a:96:af:2e:22:72:79:5a:
f0:61:31:a1:88:d9:56:17:e0:f4:e3:66:05:3c:fa:c6:5b:ff:
df:f8:62:ab:f5:c8:91:7b:40:ae:8c:7a:30:ca:51:90:5f:6f:
18:06:7c:fc:4f:42:b3:05:9e:28:b5:34:83:8f:20:58:b7:e8:
98:2e:cb:c2:6e:26:3e:17:a4:6f:9e:7b:47:7f:62:cd:46:6a:
74:ef:93:63:c8:6a:93:a6:56:12:a4:23:a4:5c:8e:cf:37:15:
06:83:1f:80:06:02:2e:f5:fa:5b:79:65:28:01:20:35:b5:60:
ab:45:02:25:97:47:f0:de:bf:b4:28:89:ab:48:b2:79:fe:5a:
50:4b:2b:7a:34:f5:3a:e2:d8:87:85:9a:ef:12:d5:86:9e:c6:
7a:f3:05:07:dd:31:1d:60:8f:b4:43:86:ec:58:2b:ab:79:2a:
94:29:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:58 2026 by rpki-client