
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/xYDvi0FbEs4o5Chaq3d8qJ9oEfE.roa
File: xYDvi0FbEs4o5Chaq3d8qJ9oEfE.roa (raw, json)
Hash identifier: G+LBvDtxuRas6jtRwfQU/Q7IGFfhNR349sL+i537vsY=
Subject key identifier: C5:80:EF:8B:41:5B:12:CE:28:E4:28:5A:AB:77:7C:A8:9F:68:11:F1
Certificate issuer: /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial: 3B
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/xYDvi0FbEs4o5Chaq3d8qJ9oEfE.roa
Signing time: Tue 31 Mar 2026 08:39:49 +0000
ROA not before: Tue 31 Mar 2026 08:39:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17931
IP address blocks: 218.45.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Validity
Not Before: Mar 31 08:39:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C580EF8B415B12CE28E4285AAB777CA89F6811F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:7e:ba:11:96:2f:de:c3:92:13:fc:64:69:
12:06:3a:02:6a:5a:9d:93:02:5e:ea:e4:bc:48:dc:
9b:97:7c:dd:31:0f:c9:31:81:cc:12:d3:eb:5f:4b:
b8:92:5d:38:23:41:a8:3e:3a:fe:c5:db:22:42:bf:
f7:42:a5:58:76:20:00:99:d2:33:a6:e8:a9:af:cd:
d8:79:e1:27:b8:c8:0f:b3:fd:4b:7a:4b:b8:ba:36:
79:66:c9:ed:e9:07:ac:7c:49:13:6e:5a:53:b6:93:
1a:2b:02:0c:7e:48:9a:4e:1f:82:eb:f0:7a:65:c6:
2b:74:3e:c1:1b:ed:59:f9:6c:ae:07:7d:60:37:0b:
ed:cd:fc:17:04:6f:b4:6f:9d:3e:3c:f9:7a:26:27:
90:41:f7:ef:a6:95:15:54:8d:db:9a:40:0f:b7:88:
53:91:d4:1e:11:18:5d:2d:45:a7:96:7b:e2:85:db:
6c:bd:93:69:dc:87:57:1c:81:02:dd:e8:b3:07:bc:
13:ad:f4:fe:9f:23:27:83:28:a6:41:7e:f4:74:71:
e3:69:ef:59:66:0f:9f:1d:8c:11:d4:3c:9b:f6:2e:
bc:3e:72:44:a3:c4:c6:a0:55:cf:dc:2b:e2:95:92:
c3:0a:89:4d:76:e5:31:84:62:e6:82:82:b0:79:9c:
b1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:EF:8B:41:5B:12:CE:28:E4:28:5A:AB:77:7C:A8:9F:68:11:F1
X509v3 Authority Key Identifier:
keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/xYDvi0FbEs4o5Chaq3d8qJ9oEfE.roa
sbgp-ipAddrBlock: critical
IPv4:
218.45.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:79:c0:20:bc:98:63:8d:06:c6:cb:66:18:b8:a9:79:ab:51:
58:68:dc:eb:e9:0c:e7:28:3b:08:1d:5c:18:37:20:91:81:39:
e1:95:7f:94:0d:ca:d8:9f:90:b6:8d:35:93:eb:ab:c1:13:40:
f7:41:9a:ae:ff:54:d8:55:6b:11:7d:a3:15:47:5b:39:54:84:
de:ca:b6:21:89:8d:96:a9:a3:d1:80:db:db:d2:c6:83:b0:cd:
05:a0:9e:61:42:ff:8b:09:93:d0:fe:ee:ba:23:ca:c9:9c:43:
27:f0:69:24:62:d9:1b:e6:25:d3:9f:d9:d6:28:c7:7a:f4:02:
fa:9a:7c:00:03:ab:b0:b7:c3:66:f1:94:05:e7:3f:23:2c:54:
4c:44:bb:61:2d:b1:57:19:d3:03:59:38:3c:92:94:be:f0:56:
a5:07:b6:5e:39:a5:3a:b8:3a:b4:ed:bb:3d:c3:03:9c:ee:0c:
de:10:29:a3:ce:d3:f1:15:c2:92:d1:be:81:c0:14:a1:58:f0:
04:6b:36:c8:fc:4a:a6:09:23:c1:d2:28:bf:ab:f4:6a:9e:9f:
75:44:ed:48:2c:ae:a5:75:3e:b0:69:aa:87:20:28:46:23:ef:
8f:0e:69:72:ad:7b:8d:be:b2:75:ee:1d:b5:91:df:57:28:60:
92:94:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:49 2026 by rpki-client