
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/kh9NNFI7VEeiUY6sGDNPzBbT0n8.roa
File: kh9NNFI7VEeiUY6sGDNPzBbT0n8.roa (raw, json)
Hash identifier: mvkTc8g+euvq97YP9t/YUNkaKx2GQ88V6tBIE4fOwR4=
Subject key identifier: 92:1F:4D:34:52:3B:54:47:A2:51:8E:AC:18:33:4F:CC:16:D3:D2:7F
Certificate issuer: /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial: 86
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/kh9NNFI7VEeiUY6sGDNPzBbT0n8.roa
Signing time: Tue 31 Mar 2026 08:37:37 +0000
ROA not before: Tue 31 Mar 2026 08:37:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17698
IP address blocks: 119.82.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Validity
Not Before: Mar 31 08:37:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=921F4D34523B5447A2518EAC18334FCC16D3D27F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:12:f7:76:7c:f2:8e:63:00:08:c1:9b:28:
ef:30:d5:14:3e:c6:e4:03:cb:04:0f:89:e0:1a:41:
db:e9:ff:79:5f:31:fd:a0:57:74:cc:1f:cb:2d:05:
93:26:54:73:40:9b:04:84:dc:df:3b:81:04:fb:99:
55:bb:f5:8f:3f:57:49:22:1c:19:22:be:fb:3e:38:
0e:a5:40:8c:89:40:7b:cd:3b:78:52:c1:7c:97:3b:
a0:1e:e9:0c:81:d8:c2:1d:97:15:41:0d:2e:09:a0:
ed:f7:8f:88:59:06:a6:df:69:b2:dd:2f:20:46:87:
c1:28:02:f2:aa:f9:bf:97:cc:25:15:17:18:fb:76:
fe:e0:49:9b:97:60:3d:17:aa:47:08:e1:34:7a:1f:
31:d2:0c:4d:67:2d:b0:6e:e8:ad:1c:ee:fa:0e:ad:
f6:76:39:cf:a7:d0:df:8e:68:cd:19:f9:bf:48:65:
69:f1:2a:5b:59:38:09:2f:c5:37:4d:2f:ef:73:45:
bb:58:55:24:54:fa:38:42:18:75:75:b7:19:28:be:
1f:b3:35:f7:41:13:ac:79:f2:b5:09:af:22:35:a5:
c0:60:4c:74:de:b1:cd:3b:79:27:57:c2:26:96:96:
f1:21:12:4b:a5:e0:be:d7:89:8c:25:25:29:ad:f0:
c1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1F:4D:34:52:3B:54:47:A2:51:8E:AC:18:33:4F:CC:16:D3:D2:7F
X509v3 Authority Key Identifier:
keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/kh9NNFI7VEeiUY6sGDNPzBbT0n8.roa
sbgp-ipAddrBlock: critical
IPv4:
119.82.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:e1:d3:64:ca:52:f4:2a:7b:4f:65:12:6d:59:42:f7:e1:53:
b4:05:40:44:b6:83:5d:2e:85:0a:60:eb:33:09:6a:12:c9:c8:
e0:6a:74:c5:54:d5:d7:fc:58:ae:df:65:be:ad:4d:12:bc:e5:
de:a1:57:ca:47:e6:02:1f:a4:9c:f1:3d:b2:62:12:10:5d:07:
98:53:b9:f1:ab:9d:c9:23:0b:d3:7e:ce:cc:4a:af:88:04:ba:
b3:62:29:4f:5a:92:3a:ca:8a:c6:7b:df:da:64:7b:16:49:43:
bf:cc:19:50:2e:a9:e1:34:ba:d2:f1:fd:1c:a2:cc:72:62:8d:
39:18:f9:f5:cb:32:6d:fb:c1:a6:02:2f:d3:23:03:47:56:ec:
8b:8c:c1:a2:db:19:1f:83:02:66:c6:54:47:a7:88:3b:d0:b0:
cf:8c:5f:d8:6d:c7:24:b7:b0:d6:2b:16:01:c7:51:4e:75:21:
58:cb:9d:d9:2b:92:e3:17:45:a5:8b:93:62:1d:57:25:2f:75:
32:71:bb:ba:b5:2d:f7:41:90:c6:79:74:22:e2:25:d3:34:01:
16:07:2c:5f:ae:6f:9b:71:82:71:74:76:e8:d6:01:0c:7d:82:
95:0c:c6:d1:5b:88:57:c6:8d:e4:c1:32:af:fa:c3:35:95:2b:
b9:84:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:53 2026 by rpki-client