
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/X5vVf2XjUOXJo1Rrob1Gij_uT_g.roa
File: X5vVf2XjUOXJo1Rrob1Gij_uT_g.roa (raw, json)
Hash identifier: 9cgvBfy5OvqnVsq1vx+667AkJiVCrVKIlrkM4K0UxQc=
Subject key identifier: 5F:9B:D5:7F:65:E3:50:E5:C9:A3:54:6B:A1:BD:46:8A:3F:EE:4F:F8
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 38
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/X5vVf2XjUOXJo1Rrob1Gij_uT_g.roa
Signing time: Tue 31 Mar 2026 08:49:22 +0000
ROA not before: Tue 31 Mar 2026 08:49:22 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 112.68.0.0/14 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 31 08:49:22 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=5F9BD57F65E350E5C9A3546BA1BD468A3FEE4FF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:94:83:92:12:1e:93:87:51:13:be:e0:88:
e1:be:8d:5f:a7:c7:0b:f0:e1:a2:98:85:65:58:5e:
3e:88:f2:3b:2c:81:fb:0e:f2:a5:b1:90:58:35:9a:
b8:7a:90:fe:63:06:ab:c3:37:26:54:8e:e3:ee:8d:
ea:bb:95:b6:9e:c5:52:af:63:c1:67:9f:cc:4f:88:
0b:dd:d6:cd:06:d1:05:57:1c:95:aa:98:d4:9d:71:
3b:67:11:93:a7:da:46:4c:aa:a9:bc:08:92:8d:67:
66:5c:57:2d:04:68:1b:8a:7f:24:2a:10:0a:c1:01:
11:eb:3e:97:7e:39:20:dc:4a:8b:20:ca:bd:af:9c:
46:ff:83:2e:06:bb:be:88:7f:2e:cc:28:ca:64:e2:
19:60:12:3a:bb:b8:c9:0c:ad:a2:55:60:d3:5c:2b:
a4:55:f5:f4:a0:3e:11:96:4e:1b:b1:58:95:2d:15:
96:d5:9a:47:ae:f3:a4:c2:79:d6:fc:e3:76:c9:4a:
0c:b4:48:58:fe:5d:49:30:96:76:5e:2e:a4:fc:97:
a8:95:49:54:41:0a:70:90:3f:4c:8d:b2:53:29:21:
d9:51:ac:48:6d:4c:e5:1b:76:17:59:4b:b6:f4:9e:
f9:08:50:d1:5b:16:68:b7:9e:4a:3c:f1:3d:cf:97:
85:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:D5:7F:65:E3:50:E5:C9:A3:54:6B:A1:BD:46:8A:3F:EE:4F:F8
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/X5vVf2XjUOXJo1Rrob1Gij_uT_g.roa
sbgp-ipAddrBlock: critical
IPv4:
112.68.0.0/14
Signature Algorithm: sha256WithRSAEncryption
7e:91:63:14:eb:ff:e3:41:37:3d:3a:6d:18:78:0a:7f:ff:62:
4d:54:07:44:93:24:43:a5:7e:70:29:4f:1b:e3:83:c4:35:0c:
83:bd:f9:48:23:ea:68:88:53:e4:8f:87:50:f8:8c:b2:e8:a9:
5d:5d:11:0e:c1:62:26:17:3c:ae:20:76:3b:8e:5f:eb:84:c7:
d6:a4:8c:84:ba:eb:1c:8c:64:57:d5:c0:d7:b4:0b:bc:cb:69:
ab:8a:c1:ae:54:b1:07:09:74:24:32:23:20:9a:a1:89:60:44:
d4:bf:81:1b:4e:67:22:0e:48:bd:10:fc:ea:09:36:fd:5a:b9:
04:33:d9:ae:5a:af:bd:d9:9e:f7:77:be:f7:ee:07:e4:a1:af:
08:8d:88:b4:28:3e:3d:e3:d4:53:19:1c:94:16:24:88:8b:d6:
69:1c:d1:bc:b6:e7:0a:84:61:79:a0:eb:a9:dd:0e:49:e3:9b:
29:11:0b:b4:d2:2c:f4:d7:3d:8c:84:a6:83:c5:aa:e8:fa:9d:
0c:e0:9d:72:11:3b:2b:ef:1b:21:44:28:f8:6c:fd:ac:5d:ae:
85:13:c5:1f:18:ae:be:a1:79:d1:91:f3:8a:cc:a5:27:58:fd:
8f:37:67:af:32:73:bc:6e:f6:e9:ce:e0:57:72:5e:e8:e3:41:
37:de:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:34:01 2026 by rpki-client