
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XMKmy_c3WC-VdLTSTiry4gsJ7HU.roa
File: XMKmy_c3WC-VdLTSTiry4gsJ7HU.roa (raw, json)
Hash identifier: T+v5I1mkeV1wqEhSwIrV2JxBf/Y8AoOxeLRF6EGggM0=
Subject key identifier: 5C:C2:A6:CB:F7:37:58:2F:95:74:B4:D2:4E:2A:F2:E2:0B:09:EC:75
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 1758
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XMKmy_c3WC-VdLTSTiry4gsJ7HU.roa
Signing time: Tue 31 Mar 2026 08:03:37 +0000
ROA not before: Tue 31 Mar 2026 08:03:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 211.14.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5976 (0x1758)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:03:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5CC2A6CBF737582F9574B4D24E2AF2E20B09EC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:1e:33:2e:2f:e3:4e:92:22:9a:a3:2c:6f:
2d:0f:eb:c4:24:10:56:72:d4:9d:86:0f:ea:69:b5:
a3:5a:1a:24:22:36:65:64:91:51:70:2f:b5:c7:7e:
0d:56:6a:af:d5:ff:6d:81:06:1e:b2:89:07:ba:33:
94:16:a5:ee:73:84:5d:1e:5c:17:30:90:e1:cf:40:
8e:06:14:54:86:c7:78:bf:3d:25:8d:5d:a4:80:df:
0e:9c:9c:75:69:5b:30:3c:3a:4d:9f:0f:49:11:66:
f9:16:0f:02:6b:5e:3d:1e:66:4d:c2:b6:32:d4:50:
0b:83:4d:92:84:77:68:9d:35:8f:2e:77:90:5b:ce:
6a:ea:ad:eb:1f:cf:60:4b:e8:7c:85:a4:3a:c3:65:
88:05:bd:25:c3:58:ef:96:ef:02:40:97:93:6b:8d:
bd:bb:ef:fa:c8:09:b9:35:57:2f:64:a8:20:30:0a:
29:72:66:2b:83:40:0a:17:bd:15:ce:88:cf:06:66:
d2:f4:1b:1e:a0:e7:78:0d:ec:b4:fd:83:d5:02:6b:
ca:69:fb:3d:70:9e:f8:38:31:9d:07:d5:e6:2d:92:
e7:d4:48:01:92:bc:ff:8e:d6:39:84:c0:53:c5:0a:
ca:32:c5:50:1d:d9:65:9d:09:7c:23:db:25:fb:5f:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:A6:CB:F7:37:58:2F:95:74:B4:D2:4E:2A:F2:E2:0B:09:EC:75
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XMKmy_c3WC-VdLTSTiry4gsJ7HU.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.94.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f4:b4:a5:e1:b8:d7:d1:33:8a:ea:f4:cc:cc:9c:75:db:7a:
76:9a:00:96:6a:03:83:49:05:3e:94:25:c9:83:ce:7e:ec:df:
ce:91:58:ab:38:3b:31:b2:de:b0:7e:8e:32:99:4e:d9:e9:7f:
d3:f3:bb:77:81:76:d1:57:b3:48:26:c1:ec:62:97:f3:d7:4b:
29:7a:ff:30:ac:cb:45:72:4e:09:7e:fa:a3:0c:e2:89:4a:24:
99:3e:ce:a8:80:69:09:7e:21:6b:0c:71:2c:06:e3:ef:6a:f3:
a6:03:43:d0:ae:e8:aa:82:fd:77:56:23:f0:3c:23:7e:40:50:
47:92:5d:c7:23:06:34:e4:60:ec:55:b5:3e:38:f0:ee:0d:b4:
25:5a:55:c3:2a:10:80:9b:e2:d2:65:33:43:40:87:d2:bc:0d:
4b:33:c1:64:c0:90:ed:53:95:67:59:87:4a:c3:6a:02:1b:20:
73:41:fb:39:55:ff:ae:6f:a7:fe:46:cc:ca:13:78:d4:c1:bf:
08:76:85:25:18:8b:4c:15:27:52:03:7e:72:12:78:a6:95:24:
53:04:4f:9d:92:80:15:d3:77:4c:90:b0:55:82:09:9a:f5:0a:
56:c9:8d:a8:54:e5:d9:5a:27:33:7c:3f:a6:f7:60:89:ed:4b:
78:6d:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:38 2026 by rpki-client