
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/C5cx-nRAjKJlvuyLeoOsP3Z7XOg.roa
File: C5cx-nRAjKJlvuyLeoOsP3Z7XOg.roa (raw, json)
Hash identifier: qewSLnkfioqxH8gqGsDzd4k2WEAT+HKX0w/tHO01NLA=
Subject key identifier: 0B:97:31:FA:74:40:8C:A2:65:BE:EC:8B:7A:83:AC:3F:76:7B:5C:E8
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 9F
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/C5cx-nRAjKJlvuyLeoOsP3Z7XOg.roa
Signing time: Tue 31 Mar 2026 08:25:10 +0000
ROA not before: Tue 31 Mar 2026 08:25:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9374
IP address blocks: 218.216.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Mar 31 08:25:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0B9731FA74408CA265BEEC8B7A83AC3F767B5CE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e2:22:d7:27:f5:fa:29:ef:0f:2b:d3:89:8d:
3c:57:81:68:82:d9:70:8b:ad:10:29:e7:15:03:b0:
49:f5:44:04:8b:be:4c:ed:37:39:56:03:48:35:e1:
d5:12:19:94:c0:c3:30:67:c4:0f:51:d4:7b:27:d8:
0c:49:05:b5:53:99:9d:c1:6d:2e:84:43:a3:fa:8a:
80:fc:61:9e:87:77:f7:37:9d:72:de:51:81:09:63:
5d:32:96:9c:80:7b:0f:7b:c7:d6:2f:b5:dc:e4:e7:
0b:aa:3d:70:0c:76:cb:a5:12:a4:df:1e:01:92:50:
3d:8e:0f:3a:5c:e5:89:39:b6:5c:58:9a:dc:17:6e:
f1:7c:68:e9:a9:a7:2a:3f:fb:f8:63:13:15:e3:28:
c8:d2:32:a0:fc:c2:da:ee:1b:13:fe:a0:23:4c:4b:
3e:ce:6d:3b:6e:b1:e2:c4:2d:13:00:1f:3c:ac:30:
5a:80:24:f0:53:f4:96:b1:6a:02:f2:f6:da:d2:0d:
ea:e0:52:4e:c9:bb:6a:8a:e8:97:f9:ca:22:e4:93:
e1:87:8a:f5:9a:47:54:1c:f7:73:bd:68:1d:f4:e9:
ac:96:37:3b:1b:eb:6b:dc:84:c3:41:75:16:32:58:
80:2f:a4:1a:9b:eb:0d:1f:32:5c:ca:69:5c:40:a4:
07:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:97:31:FA:74:40:8C:A2:65:BE:EC:8B:7A:83:AC:3F:76:7B:5C:E8
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/C5cx-nRAjKJlvuyLeoOsP3Z7XOg.roa
sbgp-ipAddrBlock: critical
IPv4:
218.216.144.0/20
Signature Algorithm: sha256WithRSAEncryption
44:de:30:33:1e:4e:a5:f6:96:68:d4:8b:d7:22:24:a2:a2:d1:
e8:bc:18:34:24:67:e5:ed:9d:32:18:d1:ad:fe:fd:ea:fe:7a:
67:2c:26:04:11:52:e9:d4:31:5d:b3:68:59:52:1d:79:0e:f0:
34:83:2f:fd:94:06:d1:ee:4e:57:ba:86:aa:73:fa:ea:f3:4b:
af:84:9f:1a:99:88:f9:cb:83:5d:95:f8:79:53:74:a7:ab:d9:
27:c6:f8:4b:12:b1:1c:97:11:4c:11:1b:49:dc:47:97:e7:e1:
a3:64:c5:3f:b0:45:09:79:12:66:d7:a7:62:d8:4d:ea:6b:84:
8b:1d:40:33:bd:92:69:40:4d:0b:02:05:65:bc:88:5a:a3:7a:
49:20:21:9b:c9:4a:a7:03:1b:75:3e:c6:db:cf:d9:0b:d6:d3:
22:4f:b0:d4:f3:a0:7a:d7:77:8e:08:f1:87:15:c5:f2:45:67:
fa:62:9e:1f:37:b2:7a:18:ff:e9:41:53:84:84:59:37:b9:12:
5f:65:6c:31:54:e8:b1:3f:90:7f:61:da:54:60:99:76:39:70:
73:9e:a5:50:79:c5:8a:e4:dd:f3:92:51:8c:d7:86:4a:eb:c7:
46:08:59:09:2f:05:56:f1:73:e5:29:ee:76:85:bf:0d:2f:8b:
85:cf:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:01 2026 by rpki-client