
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/SIKW784Zj270oavVypyGvsYEkYE.roa
File: SIKW784Zj270oavVypyGvsYEkYE.roa (raw, json)
Hash identifier: W8zgjBdJSzh4ju1KEisyUS+0FMfvkHCMvU+PQyCH5jk=
Subject key identifier: 48:82:96:EF:CE:19:8F:6E:F4:A1:AB:D5:CA:9C:86:BE:C6:04:91:81
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: AB
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/SIKW784Zj270oavVypyGvsYEkYE.roa
Signing time: Tue 31 Mar 2026 07:46:45 +0000
ROA not before: Tue 31 Mar 2026 07:46:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9622
IP address blocks: 211.125.96.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Mar 31 07:46:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=488296EFCE198F6EF4A1ABD5CA9C86BEC6049181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:10:10:ef:de:15:91:77:3d:ca:a1:3c:09:
13:d3:65:76:ed:54:09:9c:f4:a3:fd:94:20:d2:5c:
be:b1:86:6b:a5:36:53:c7:ef:14:2c:a3:6e:b2:6a:
01:a3:d9:ad:b1:09:b2:c8:26:04:81:2a:31:6f:84:
82:c4:6a:c0:ec:07:8e:0c:b7:6c:38:3e:ec:0c:2d:
62:d2:5f:f9:b7:34:9c:bf:90:0d:a2:05:92:71:ce:
bc:fb:ca:ab:0d:0b:32:07:a0:5b:a3:f4:de:59:5f:
b9:8d:44:24:09:e3:32:4f:b1:68:89:38:0c:d9:fa:
21:f2:12:d1:7d:cd:c3:12:f3:27:ba:e8:49:25:8e:
34:d6:09:5d:90:38:b1:4a:de:a3:15:1e:c5:b7:04:
10:10:0d:61:be:04:0a:09:18:76:0b:3f:68:2e:2d:
99:e5:b3:e3:14:c2:4f:fe:6e:a8:06:2b:47:53:4f:
ba:08:1c:2e:ab:c2:a7:63:4c:b2:90:aa:bf:95:3e:
9d:5a:24:50:62:b8:77:3f:cd:0d:f7:c0:27:fd:3f:
08:96:ba:c3:9f:73:d8:1b:b9:e3:54:41:48:f0:2d:
e5:c0:bd:fe:d0:30:c1:8d:b4:28:fa:de:d7:11:a5:
5c:93:53:5f:7f:11:4a:0c:7b:d0:b5:8d:19:44:84:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:96:EF:CE:19:8F:6E:F4:A1:AB:D5:CA:9C:86:BE:C6:04:91:81
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/SIKW784Zj270oavVypyGvsYEkYE.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:b6:dd:be:07:0c:09:8f:4b:a1:4b:85:03:41:16:29:ea:f5:
3c:33:a1:b6:91:7e:07:ee:e4:ac:fa:10:5c:47:fa:8c:e0:0b:
09:31:b9:b7:06:5f:7e:10:83:ab:f4:a1:8f:f6:ca:16:b5:51:
92:b0:55:5c:d9:c7:45:d1:ce:77:a6:f0:63:32:33:47:70:29:
7c:5a:37:8b:ea:c6:b8:db:17:70:13:04:0c:10:37:a6:77:7c:
75:74:2d:91:47:c4:e5:c0:0c:af:27:00:e0:67:ac:47:92:a1:
ff:6c:2f:c9:2b:8c:63:dc:9f:7c:53:cc:1a:cb:ca:62:24:f8:
cf:4d:80:ae:9b:79:c8:e5:40:ee:11:50:7d:ae:0f:37:39:22:
f4:63:28:8c:7a:18:49:7a:94:0d:66:55:ae:e0:50:b5:f2:ad:
fd:26:27:d8:36:91:0e:62:db:ed:18:09:2b:46:ab:91:bb:b3:
66:cd:11:1b:9b:f3:ae:f6:f4:a2:0b:dc:2a:6b:9d:74:a7:26:
5d:95:6c:f3:52:ef:0f:4c:76:34:01:bc:39:98:f6:fc:f6:12:
76:3f:f7:34:53:3a:84:aa:c8:3c:72:ce:ed:d9:43:43:1a:cf:
b3:4a:00:47:74:cf:f0:df:d3:b7:93:84:0e:6d:a8:fe:24:54:
81:93:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:31 2026 by rpki-client