
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/X5zyeEZNOROYrvX4Q1sgs09Ks30.roa
File: X5zyeEZNOROYrvX4Q1sgs09Ks30.roa (raw, json)
Hash identifier: ZERccVZnljHSSYBkOva1OlZL3zJQgQfnKQF54S4GCw8=
Subject key identifier: 5F:9C:F2:78:46:4D:39:13:98:AE:F5:F8:43:5B:20:B3:4F:4A:B3:7D
Certificate issuer: /CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66
Certificate serial: 30
Authority key identifier: 9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/X5zyeEZNOROYrvX4Q1sgs09Ks30.roa
Signing time: Tue 31 Mar 2026 08:34:05 +0000
ROA not before: Tue 31 Mar 2026 08:34:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9597
IP address blocks: 192.50.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66
Validity
Not Before: Mar 31 08:34:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5F9CF278464D391398AEF5F8435B20B34F4AB37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:76:6d:ee:bc:3c:48:80:e3:55:22:e1:f3:
02:85:8e:d0:a7:28:bc:72:52:da:35:32:b7:22:5f:
88:b9:cc:08:f4:87:6e:3c:46:23:c4:d7:22:0a:db:
df:f9:72:a6:a7:dd:ea:d7:c7:21:bf:27:3c:7a:e6:
6c:9f:e1:11:df:61:b7:f7:ce:b5:53:19:06:97:c0:
34:6e:9c:f6:27:d8:d2:8c:af:ac:7c:b4:8b:a8:fd:
95:3e:04:ee:99:69:26:84:59:8a:30:9e:a5:16:ab:
8a:e9:c1:6c:31:c5:ad:cd:f2:a8:81:96:c9:69:35:
b1:d4:a6:8a:88:bf:98:0d:01:d6:59:09:fa:e5:26:
c4:5c:6d:7b:01:75:82:60:c3:b9:ed:b7:b1:11:f2:
c3:c7:e9:75:4c:23:00:35:a1:75:4f:af:9c:57:0e:
b4:a8:19:61:c8:01:97:1f:7f:60:4a:06:8a:e7:63:
bf:db:e0:0e:45:ba:d7:42:b4:1c:aa:04:4e:0f:99:
d5:5f:08:85:35:80:d7:cf:52:6b:b3:35:fe:27:31:
69:9c:ed:5b:6c:60:c5:50:f6:96:c0:49:fc:2b:53:
78:9d:2b:26:d3:98:47:92:b5:ef:d9:10:a2:a5:7c:
2c:8b:c7:f5:4d:10:da:fb:ce:bf:c7:97:7f:94:62:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:F2:78:46:4D:39:13:98:AE:F5:F8:43:5B:20:B3:4F:4A:B3:7D
X509v3 Authority Key Identifier:
keyid:9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/X5zyeEZNOROYrvX4Q1sgs09Ks30.roa
sbgp-ipAddrBlock: critical
IPv4:
192.50.199.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2f:0f:2f:38:de:70:b2:61:72:64:aa:ac:34:e1:37:4c:74:
e3:cb:8b:ca:78:b3:d4:2b:2f:b9:3c:7e:bd:0a:15:92:17:82:
d3:39:18:bc:98:37:45:e2:a6:ef:b4:08:20:6e:a2:dc:9e:0e:
72:bf:29:ac:7c:a2:27:71:29:1c:0d:b5:dc:3f:27:ea:b0:7d:
43:04:af:dd:31:29:f5:0a:1e:f1:86:4e:f2:ce:0b:7b:1f:a7:
10:4a:fe:de:64:ac:df:83:63:60:42:f0:7f:35:8f:1f:a9:98:
2a:d7:05:15:df:48:6c:76:68:44:13:71:e9:4f:e5:67:08:32:
99:53:ca:36:4a:62:a9:3e:98:bd:3f:db:b7:41:c1:3a:a3:59:
41:26:55:9c:76:4e:ad:5e:50:9c:a5:7a:d7:d3:9d:d7:79:e3:
2b:5c:14:dc:7f:0f:1d:b2:87:c2:cc:52:5c:fe:a6:1e:27:0b:
04:e0:90:cb:ef:10:c5:af:9b:d6:b1:94:95:60:01:3f:f0:56:
dc:4d:03:a4:45:cb:6f:b7:60:da:c3:28:39:bf:d8:f3:11:b5:
aa:f8:e3:f8:4c:a1:3f:ab:b7:15:20:15:a0:62:13:a7:13:ec:
57:86:0e:63:ca:f4:e1:40:c2:36:c7:fa:bb:15:25:5e:d3:3d:
ab:94:d0:59
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Qzg2
NjlCRjE4QjMxMDEyNzEwRjQ4QzlBOERFMEJCNzFEN0MyRjY2MB4XDTI2MDMzMTA4
MzQwNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUY5Q0YyNzg0NjREMzkx
Mzk4QUVGNUY4NDM1QjIwQjM0RjRBQjM3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALa8dm3uvDxIgONVIuHzAoWO0KcovHJS2jUytyJfiLnMCPSHbjxG
I8TXIgrb3/lypqfd6tfHIb8nPHrmbJ/hEd9ht/fOtVMZBpfANG6c9ifY0oyvrHy0
i6j9lT4E7plpJoRZijCepRariunBbDHFrc3yqIGWyWk1sdSmioi/mA0B1lkJ+uUm
xFxtewF1gmDDue23sRHyw8fpdUwjADWhdU+vnFcOtKgZYcgBlx9/YEoGiudjv9vg
DkW610K0HKoETg+Z1V8IhTWA189Sa7M1/icxaZztW2xgxVD2lsBJ/CtTeJ0rJtOY
R5K179kQoqV8LIvH9U0Q2vvOv8eXf5RiEn8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRfnPJ4Rk05E5iu9fhDWyCzT0qzfTAfBgNVHSMEGDAWgBSchmm/GLMQEnEPSMmo
3gu3HXwvZjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL25JWnB2eGl6RUJKeEQwakpxTjRMdHgxOEwyWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25JWnB2eGl6RUJKeEQwakpxTjRMdHgx
OEwyWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yNDAvWDV6eWVFWk5PUk9ZcnZYNFExc2dzMDlLczMwLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMAyxzANBgkqhkiG9w0BAQsFAAOCAQEA
UC8PLzjecLJhcmSqrDThN0x048uLyniz1CsvuTx+vQoVkheC0zkYvJg3ReKm77QI
IG6i3J4Ocr8prHyiJ3EpHA213D8n6rB9QwSv3TEp9Qoe8YZO8s4Lex+nEEr+3mSs
34NjYELwfzWPH6mYKtcFFd9IbHZoRBNx6U/lZwgymVPKNkpiqT6YvT/bt0HBOqNZ
QSZVnHZOrV5QnKV619Od13njK1wU3H8PHbKHwsxSXP6mHicLBOCQy+8Qxa+b1rGU
lWABP/BW3E0DpEXLb7dg2sMoOb/Y8xG1qvjj+EyhP6u3FSAVoGITpxPsV4YOY8r0
4UDCNsf6uxUlXtM9q5TQWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:05 2026 by rpki-client