
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/XKCT4sQSekh_fVKF68r1UjHsnm8.roa
File: XKCT4sQSekh_fVKF68r1UjHsnm8.roa (raw, json)
Hash identifier: kN2pR13lSPv+8Ec/n7Wd5d5s+nGTjyJqF9MvytY+Eoo=
Subject key identifier: 5C:A0:93:E2:C4:12:7A:48:7F:7D:52:85:EB:CA:F5:52:31:EC:9E:6F
Certificate issuer: /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial: 42
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/XKCT4sQSekh_fVKF68r1UjHsnm8.roa
Signing time: Tue 31 Mar 2026 08:44:49 +0000
ROA not before: Tue 31 Mar 2026 08:44:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59108
IP address blocks: 219.99.224.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Validity
Not Before: Mar 31 08:44:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5CA093E2C4127A487F7D5285EBCAF55231EC9E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d2:88:37:e4:3d:24:3f:f7:60:09:30:69:0e:
1c:19:1f:60:25:8a:8e:0d:04:53:54:ac:a0:da:20:
d1:84:03:c3:1a:06:de:01:14:f7:ba:f0:aa:d4:21:
30:9d:cf:7b:0f:be:de:ba:e5:49:44:54:58:ea:99:
05:b7:2e:3b:80:49:c8:0e:3b:3e:79:a1:f2:70:c9:
94:f1:83:83:ec:d1:af:48:67:fc:7e:5a:d8:11:35:
b6:05:a4:8f:92:3a:cd:ae:95:3a:47:4b:5f:43:c2:
e3:de:dd:b7:95:0d:46:e1:50:71:ae:8c:de:86:78:
06:7c:f3:e5:09:13:df:11:26:c2:3f:e3:03:15:a6:
14:17:03:6a:48:96:e1:24:52:65:18:25:79:6d:c8:
11:c2:3f:07:40:8a:18:0c:5b:85:70:79:e6:70:a2:
2a:9e:20:06:f9:33:fa:f2:db:51:b4:c1:60:97:c4:
08:2c:23:fa:c9:2d:ac:9b:be:83:ee:1b:c3:bd:a7:
53:07:03:dc:ee:75:24:13:7c:a0:a0:f3:e4:6f:da:
b7:c3:59:fc:30:2e:b6:b5:9b:56:36:a0:98:bd:22:
84:aa:4e:78:fa:11:f2:90:14:88:f2:6b:ba:ca:59:
23:c1:c4:bd:25:0c:9d:26:5c:13:c3:af:0e:70:2e:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:93:E2:C4:12:7A:48:7F:7D:52:85:EB:CA:F5:52:31:EC:9E:6F
X509v3 Authority Key Identifier:
keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/XKCT4sQSekh_fVKF68r1UjHsnm8.roa
sbgp-ipAddrBlock: critical
IPv4:
219.99.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:b0:e0:fc:25:60:26:5f:df:e8:b7:02:6b:b7:c0:ab:bf:0d:
fc:cd:0c:38:b7:48:b1:6d:b9:2d:53:10:1b:04:8f:e4:f0:11:
46:ff:38:bc:b0:88:97:2b:05:02:47:d2:5d:c0:d9:ec:c0:7c:
e0:96:fd:27:e6:5b:d1:c6:83:e5:2a:41:79:18:91:10:1e:70:
b8:43:39:ae:a0:03:1c:13:84:cd:41:d6:cd:08:97:26:26:e1:
a0:79:6e:2f:09:ae:95:4e:41:da:1a:89:31:a0:49:23:be:7c:
51:90:74:c3:d6:7b:4f:70:e7:15:07:f4:7e:c5:1b:e0:24:18:
c4:cf:9e:d1:40:a5:e0:22:36:7b:15:a7:4b:24:35:81:c9:f1:
29:75:bc:c5:44:2a:9e:35:bb:3a:7a:48:27:70:79:44:ae:3b:
ed:8e:11:2b:d7:04:4e:48:26:af:50:a5:71:42:c3:c3:3f:15:
49:87:29:00:cc:1e:42:9e:65:4e:d8:bb:c2:8c:d6:97:10:ca:
e0:2c:e5:63:0d:1a:34:9a:13:f7:a4:8b:0c:17:2e:21:a1:55:
e5:fb:89:b9:79:98:7d:09:90:f8:af:b5:94:4f:5f:9a:52:fb:
b0:b7:5a:e9:36:77:a1:f5:e6:a3:6f:28:7e:68:92:27:80:03:
04:10:b0:46
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC
MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI2MDMzMTA4
NDQ0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNUNBMDkzRTJDNDEyN0E0
ODdGN0Q1Mjg1RUJDQUY1NTIzMUVDOUU2RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALbSiDfkPSQ/92AJMGkOHBkfYCWKjg0EU1SsoNog0YQDwxoG3gEU
97rwqtQhMJ3Pew++3rrlSURUWOqZBbcuO4BJyA47Pnmh8nDJlPGDg+zRr0hn/H5a
2BE1tgWkj5I6za6VOkdLX0PC497dt5UNRuFQca6M3oZ4Bnzz5QkT3xEmwj/jAxWm
FBcDakiW4SRSZRgleW3IEcI/B0CKGAxbhXB55nCiKp4gBvkz+vLbUbTBYJfECCwj
+sktrJu+g+4bw72nUwcD3O51JBN8oKDz5G/at8NZ/DAutrWbVjagmL0ihKpOePoR
8pAUiPJruspZI8HEvSUMnSZcE8OvDnAuuiECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRcoJPixBJ6SH99UoXryvVSMeyebzAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac
2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1
YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yNzEvWEtDVDRzUVNla2hfZlZLRjY4cjFVakhzbm04LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdtj4DANBgkqhkiG9w0BAQsFAAOCAQEA
L7Dg/CVgJl/f6LcCa7fAq78N/M0MOLdIsW25LVMQGwSP5PARRv84vLCIlysFAkfS
XcDZ7MB84Jb9J+Zb0caD5SpBeRiREB5wuEM5rqADHBOEzUHWzQiXJibhoHluLwmu
lU5B2hqJMaBJI758UZB0w9Z7T3DnFQf0fsUb4CQYxM+e0UCl4CI2exWnSyQ1gcnx
KXW8xUQqnjW7OnpIJ3B5RK477Y4RK9cETkgmr1ClcULDwz8VSYcpAMweQp5lTti7
wozWlxDK4CzlYw0aNJoT96SLDBcuIaFV5fuJuXmYfQmQ+K+1lE9fmlL7sLda6TZ3
ofXmo28ofmiSJ4ADBBCwRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:11 2026 by rpki-client