
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Cpxg6I9JfAbrc_FaRu9Bamgu0Xc.roa
File: Cpxg6I9JfAbrc_FaRu9Bamgu0Xc.roa (raw, json)
Hash identifier: Z9y+rtLdg3fNcDbIZTrlt58QDXY5VUNhu8/FEqw9ccI=
Subject key identifier: 0A:9C:60:E8:8F:49:7C:06:EB:73:F1:5A:46:EF:41:6A:68:2E:D1:77
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 80
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Cpxg6I9JfAbrc_FaRu9Bamgu0Xc.roa
Signing time: Tue 31 Mar 2026 08:37:35 +0000
ROA not before: Tue 31 Mar 2026 08:37:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17698
IP address blocks: 211.15.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 31 08:37:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0A9C60E88F497C06EB73F15A46EF416A682ED177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:d9:02:2c:95:d2:28:19:95:85:6a:9e:95:
de:a2:95:c7:0c:54:d2:d3:29:15:f6:38:de:17:e2:
03:8e:cb:5d:4b:9b:16:ce:bf:bf:0e:42:50:e8:05:
db:83:f8:0d:0c:e6:36:48:7b:b7:41:04:15:0b:c8:
5e:43:05:59:2c:06:69:be:31:4d:df:67:d1:e0:c0:
56:92:29:c3:eb:2f:d0:57:5f:1e:fd:29:28:b9:a4:
ab:ca:f6:28:9c:19:5a:6c:a4:b8:3b:1d:98:80:19:
1c:91:a1:b1:ea:35:52:5c:27:bf:94:7e:12:ea:f8:
3d:77:ef:37:ad:a6:70:45:c3:bb:c9:1b:20:47:ee:
a8:63:c7:fd:40:17:c7:11:20:d4:9a:49:b6:5e:cd:
b3:91:44:b1:85:8a:fb:a3:c7:b2:46:4e:0e:56:40:
3d:b4:75:4b:19:1a:56:c7:92:5a:c9:06:5a:9c:5a:
76:14:f1:cb:b0:8c:1a:9d:01:e0:26:b0:e0:8a:97:
76:18:80:39:8c:9c:fa:b6:07:43:ec:76:26:22:e1:
10:f9:36:0f:ff:75:d4:75:c8:23:57:ff:f5:d4:e6:
68:11:4a:32:af:70:02:11:da:5b:66:0c:4c:6f:93:
dd:a8:a3:4a:53:97:ec:26:d2:f1:9e:64:37:1f:ec:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:60:E8:8F:49:7C:06:EB:73:F1:5A:46:EF:41:6A:68:2E:D1:77
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/Cpxg6I9JfAbrc_FaRu9Bamgu0Xc.roa
sbgp-ipAddrBlock: critical
IPv4:
211.15.0.0/19
Signature Algorithm: sha256WithRSAEncryption
70:c0:f3:c1:21:1a:c2:8f:ed:fc:fc:28:a0:22:11:c5:38:d3:
14:29:06:3d:06:5d:d8:4f:95:cb:09:11:6d:e0:e7:74:c2:bc:
8a:55:68:2d:03:e8:b9:29:a7:f2:02:36:e0:75:08:6f:c1:b3:
96:36:f7:72:6e:5f:b5:9c:18:70:3c:c0:3f:85:93:bb:73:d6:
90:ba:c1:26:cf:72:90:e9:62:62:01:44:b3:b3:2d:40:e2:d3:
98:94:f6:e3:09:e4:a6:ad:53:4a:e6:ec:e9:32:da:47:71:42:
bb:4f:d2:51:5c:2c:29:0e:63:12:55:3a:dd:d7:0c:d8:7d:01:
6c:d1:27:61:12:4c:a1:03:57:43:63:d2:f9:00:e0:e4:50:da:
62:13:3c:a6:91:9f:21:17:80:75:7b:1b:dc:50:c3:48:6a:b9:
df:03:f4:3f:1f:08:50:d6:02:79:5f:9d:2a:76:0b:dd:35:a7:
a2:ae:d4:18:bc:19:27:a1:77:f4:47:30:59:b9:9f:10:9a:ea:
ea:87:04:3d:f0:b2:83:f6:6e:9a:c9:f8:88:5b:20:b0:ac:4c:
48:17:46:45:df:26:af:66:38:6f:75:fb:91:26:91:6a:3b:89:
f3:13:ae:85:31:68:5d:6d:3e:b6:48:d8:88:48:e9:2a:65:0f:
94:77:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:03 2026 by rpki-client