
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/XGgXbog27m21n6fXamqFJXeL-ak.roa
File: XGgXbog27m21n6fXamqFJXeL-ak.roa (raw, json)
Hash identifier: 1RYGF0mwMlT909lxaN6x55ZckJeuLTdvmuiKrwWP/5U=
Subject key identifier: 5C:68:17:6E:88:36:EE:6D:B5:9F:A7:D7:6A:6A:85:25:77:8B:F9:A9
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: B6
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XGgXbog27m21n6fXamqFJXeL-ak.roa
Signing time: Tue 31 Mar 2026 08:17:41 +0000
ROA not before: Tue 31 Mar 2026 08:17:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 202.239.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5C68176E8836EE6DB59FA7D76A6A8525778BF9A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9d:1c:2f:b1:ed:7a:17:43:a8:bc:8e:40:9b:
05:c4:a7:b1:18:76:83:40:e1:41:98:8c:6e:6b:78:
44:16:1c:2f:6b:1f:cb:4a:b0:03:e5:ab:70:d9:c7:
d9:4e:fe:33:aa:fb:e7:16:47:3a:af:45:19:2d:51:
70:ac:88:fd:14:99:d7:a4:53:72:4b:1b:90:9b:55:
2a:c3:86:28:83:1d:18:7f:65:52:d1:37:b0:04:65:
83:44:36:92:1c:57:31:85:3e:14:3d:c1:09:9a:1b:
36:37:d3:5e:e5:c1:3d:0e:49:5c:12:86:3f:11:ab:
90:ef:95:b9:cd:09:2d:7f:3c:f0:75:38:2c:64:c1:
f4:cb:df:fa:f9:d6:10:b9:bf:f8:a8:0d:09:25:92:
b2:b8:1a:03:2c:90:65:c5:ae:de:86:4c:6d:2f:1f:
7b:72:b2:66:0a:18:72:bf:a5:d7:90:ac:bf:dd:14:
5c:4c:bb:7d:76:e3:46:71:62:ed:db:40:77:54:a5:
3c:dd:26:92:15:de:e2:1d:ed:8a:da:3f:fe:9d:8d:
6a:74:01:e3:72:dd:6a:5c:1b:b0:5e:fa:dc:c8:71:
3d:6e:c9:6b:3d:47:a2:e2:8e:2b:dd:67:64:90:d1:
46:69:dd:8b:dd:9f:76:99:9b:df:8d:d0:cb:2c:88:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:17:6E:88:36:EE:6D:B5:9F:A7:D7:6A:6A:85:25:77:8B:F9:A9
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XGgXbog27m21n6fXamqFJXeL-ak.roa
sbgp-ipAddrBlock: critical
IPv4:
202.239.64.0/18
Signature Algorithm: sha256WithRSAEncryption
84:24:d2:30:49:29:7d:aa:6b:70:92:52:0b:87:6a:21:8c:be:
ab:f6:ae:6f:a9:cd:a5:f4:69:cc:65:f6:60:f8:77:51:6a:05:
69:fc:22:9c:2d:a8:d1:69:1f:72:ef:f9:4e:10:32:9f:e0:bc:
f5:53:89:10:1b:b6:8b:38:c0:a4:96:87:f9:b0:6a:16:38:98:
25:e1:d8:06:68:3e:66:aa:2c:ff:ba:c1:dc:61:23:c4:6a:14:
79:f6:0b:b0:82:f3:45:12:58:96:5c:f8:d5:3b:64:27:3e:de:
e5:64:7e:f6:af:ee:34:23:14:14:2d:6c:dd:ed:3c:14:53:ee:
05:2e:30:95:28:1b:8d:27:c0:84:84:32:c9:73:b0:f9:80:9b:
69:3c:1d:20:70:b1:e4:39:b8:b4:c4:2e:aa:6f:16:ab:4f:46:
25:1b:d0:21:6d:6d:ab:d7:9f:1e:91:40:3b:ae:30:ad:e7:2e:
65:2e:7a:ea:d9:2d:04:79:2b:f3:a3:4e:35:fa:84:e5:d8:c2:
93:5a:c6:10:16:2f:35:7a:d9:d6:a7:7b:63:b0:2f:45:d3:03:
8e:bb:ab:2b:6b:ac:a1:ab:28:1e:4c:64:59:e3:5f:e8:88:5e:
39:b3:67:1f:a7:ae:61:fa:9c:8e:3d:be:71:c2:5c:68:87:57:
99:85:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:16 2026 by rpki-client