
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/X9C25ig3LkIqxN4QbrOehtuDUdA.roa
File: X9C25ig3LkIqxN4QbrOehtuDUdA.roa (raw, json)
Hash identifier: seYypCf64VXdS28dienhQZiVvB+rgvtBNFHpYR+MIo0=
Subject key identifier: 5F:D0:B6:E6:28:37:2E:42:2A:C4:DE:10:6E:B3:9E:86:DB:83:51:D0
Certificate issuer: /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial: 3D
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/X9C25ig3LkIqxN4QbrOehtuDUdA.roa
Signing time: Tue 31 Mar 2026 08:43:32 +0000
ROA not before: Tue 31 Mar 2026 08:43:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9354
IP address blocks: 222.229.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Validity
Not Before: Mar 31 08:43:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5FD0B6E628372E422AC4DE106EB39E86DB8351D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:05:f9:47:5b:42:39:77:fd:9f:96:24:b7:
3d:d9:c4:a5:90:65:af:0e:01:30:d2:26:92:cc:ce:
6e:71:c4:83:69:00:85:23:12:67:28:f7:06:48:47:
18:b8:f1:6f:6f:cd:77:a8:52:66:1b:02:7a:55:23:
ae:53:b2:60:e7:4b:3e:73:e3:c9:46:f2:ae:83:63:
bd:35:30:6f:8f:8a:ac:ba:a9:60:e1:30:2a:54:c7:
8f:80:6d:fc:1a:8f:80:f9:c8:3b:1e:01:65:e9:a1:
d8:01:25:3e:91:89:35:e1:03:fb:e1:e8:45:72:20:
f4:c9:1d:d2:cd:a9:78:42:06:25:16:25:7c:11:c2:
8d:47:9a:c3:21:50:b9:81:3d:95:b0:79:d6:e5:6a:
48:1e:29:82:d0:87:c4:17:b5:92:1e:f1:ca:79:62:
10:43:43:76:d5:c4:6c:c4:79:1a:0f:d9:dd:99:9f:
44:ea:a9:88:89:5d:47:1e:9f:57:82:96:5b:7d:81:
6c:14:92:05:50:0d:9b:cb:4b:ca:f9:23:ea:e4:28:
fe:af:57:e5:b2:99:0c:f2:0b:52:12:59:78:9f:7f:
2d:8f:db:b3:3a:5e:b6:86:5e:dc:0d:81:38:d3:75:
28:a2:5b:c5:a5:11:61:61:aa:ff:af:c2:34:b9:11:
9f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:B6:E6:28:37:2E:42:2A:C4:DE:10:6E:B3:9E:86:DB:83:51:D0
X509v3 Authority Key Identifier:
keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/X9C25ig3LkIqxN4QbrOehtuDUdA.roa
sbgp-ipAddrBlock: critical
IPv4:
222.229.96.0/19
Signature Algorithm: sha256WithRSAEncryption
49:f9:d0:92:12:40:b0:38:cf:f9:0d:7c:91:95:fb:d2:95:8a:
5c:04:dc:8b:8b:cf:ff:a4:0a:95:10:12:42:d1:17:de:8b:01:
a6:f2:a5:9e:e2:76:6a:1e:aa:46:3f:d6:be:4f:5b:55:66:46:
3f:f5:ec:8f:2c:fc:09:ce:47:ff:09:b4:d5:88:f4:51:48:fc:
37:ea:fa:66:8c:fc:8a:2b:35:94:15:f4:9d:98:52:ce:6b:be:
ea:16:4a:75:ea:be:aa:f8:ed:8e:c9:21:45:13:2a:d6:43:d7:
7a:a2:35:a6:1b:69:68:b6:ee:87:28:cb:0c:c3:7a:b0:70:2c:
2f:07:cc:4d:4f:de:10:d5:62:38:c5:44:c7:47:d4:af:44:15:
76:c6:75:0e:1d:81:58:09:8c:17:06:a2:96:da:ad:28:a5:5f:
81:ca:a0:a8:c6:a1:25:de:5d:4a:62:b8:ca:69:78:a5:43:da:
da:80:2c:b4:53:1c:db:77:ba:c5:d0:f8:30:a5:f5:bf:f0:ad:
1f:31:dd:7d:63:b4:dd:79:27:ed:95:a4:18:44:eb:e9:f5:bf:
70:e2:25:57:72:02:6e:3d:c3:69:ba:f4:12:9e:e9:dd:d1:74:
71:f6:c6:58:82:7b:d7:0f:38:74:ae:50:9e:d5:98:33:c0:b7:
e4:21:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:23 2026 by rpki-client