
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/XyMJmqMpWMm1zcnu4xxj1MSC45c.roa
File: XyMJmqMpWMm1zcnu4xxj1MSC45c.roa (raw, json)
Hash identifier: mf+fQPtQXP4Tw1bSll6Gmux5JMOD2YJuSuXx6jtaFcI=
Subject key identifier: 5F:23:09:9A:A3:29:58:C9:B5:CD:C9:EE:E3:1C:63:D4:C4:82:E3:97
Certificate issuer: /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial: 37
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/XyMJmqMpWMm1zcnu4xxj1MSC45c.roa
Signing time: Tue 31 Mar 2026 08:41:45 +0000
ROA not before: Tue 31 Mar 2026 08:41:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18282
IP address blocks: 210.79.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
Validity
Not Before: Mar 31 08:41:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5F23099AA32958C9B5CDC9EEE31C63D4C482E397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:ec:b1:34:22:e4:a5:a6:b7:80:89:c7:24:
6a:32:44:6e:0b:e2:06:68:f6:f4:45:7e:51:f9:5d:
28:4e:a0:52:d4:ab:91:eb:02:66:09:bd:34:94:79:
17:dd:49:15:20:bf:35:d4:26:6b:cc:0c:b1:a9:a9:
e8:df:5e:a4:7e:8b:cc:19:01:63:62:f5:42:7f:71:
5e:22:1a:23:c6:48:0b:94:5c:93:e0:04:99:d5:e0:
1e:08:3e:44:38:11:cb:6f:7a:2a:25:4d:31:0d:6d:
71:5b:9b:05:a4:e1:a3:68:18:8a:f7:05:ba:a8:85:
c9:66:a5:b4:c8:34:da:7f:f1:44:56:ff:84:f7:44:
bd:b2:1e:84:98:f0:26:c8:d8:c2:fd:2c:06:26:7f:
2f:d1:b5:ba:ed:5b:ac:62:d1:a5:c7:10:2a:ba:cf:
15:36:cb:dd:39:ed:65:21:2e:80:5d:0a:17:b5:1b:
46:d4:9c:89:e8:fe:1f:d2:f5:26:7b:22:48:17:b0:
fc:c9:85:71:57:16:25:0b:0b:3e:a0:1c:b4:94:d1:
04:00:76:cf:02:d4:86:62:32:dc:16:96:2c:80:a2:
71:a3:d8:c2:4f:f6:30:e5:7e:e4:da:26:6f:bc:7e:
5f:2f:e8:d9:e7:79:b7:4d:77:49:97:05:c6:79:c6:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:23:09:9A:A3:29:58:C9:B5:CD:C9:EE:E3:1C:63:D4:C4:82:E3:97
X509v3 Authority Key Identifier:
keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/XyMJmqMpWMm1zcnu4xxj1MSC45c.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:39:c1:ff:ae:53:70:5b:ed:4f:96:43:15:34:3f:f2:cd:f4:
88:fb:57:00:17:4c:f4:bc:4e:f9:6c:a7:5e:b7:4d:3b:09:f0:
b6:f6:23:68:db:27:ff:b3:92:e7:ba:da:e3:aa:df:97:23:a3:
bc:f0:81:2c:b7:3e:85:e6:4a:10:a4:79:6c:1b:89:0e:61:8a:
c7:ab:37:b7:14:78:d8:f3:4c:12:ff:c8:d7:a2:fc:c3:d4:65:
90:b2:8a:69:70:71:0a:0f:a7:3e:10:35:fa:b6:5f:f4:6d:59:
af:ac:fa:ed:5e:b5:33:bb:1a:b4:61:57:db:cf:b0:00:6a:9e:
bd:88:0c:04:81:28:cd:ad:78:54:af:e4:4f:33:55:07:91:a3:
f0:b6:95:9d:8b:0f:54:32:5f:da:21:32:b8:af:0e:ba:ea:62:
2f:62:0d:64:ae:93:5d:de:4c:b0:58:ea:29:eb:90:3f:c9:2d:
67:cb:82:fe:3e:df:8a:d3:fc:95:d2:5a:ba:6b:bd:29:36:15:
fc:b4:aa:9b:ab:65:b0:5f:e3:ed:a3:85:a6:f4:82:ae:7e:ba:
fe:6e:90:70:d1:74:98:31:a8:ad:b6:c2:b0:6b:35:7d:89:ed:
ad:77:c0:f6:1c:59:34:d2:10:01:0c:48:71:09:59:d5:a6:58:
ed:6d:65:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:37 2026 by rpki-client