
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/XRX9e2FgCGr8oFJMja6hPB28f50.roa
File: XRX9e2FgCGr8oFJMja6hPB28f50.roa (raw, json)
Hash identifier: gAWgGuwLKolumgAM35v9wW0jZEAZjumr2cLW+InxIOM=
Subject key identifier: 5D:15:FD:7B:61:60:08:6A:FC:A0:52:4C:8D:AE:A1:3C:1D:BC:7F:9D
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 95
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/XRX9e2FgCGr8oFJMja6hPB28f50.roa
Signing time: Tue 31 Mar 2026 08:25:00 +0000
ROA not before: Tue 31 Mar 2026 08:25:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9374
IP address blocks: 180.188.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Mar 31 08:25:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5D15FD7B6160086AFCA0524C8DAEA13C1DBC7F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:6d:c4:ee:2e:15:b8:a1:58:04:aa:80:a0:
86:27:ad:74:5a:4f:79:69:f4:0f:49:a8:cc:9f:ff:
b9:d3:e4:73:3f:12:4f:64:88:cb:80:d1:ed:5c:33:
9e:65:67:a6:ef:2c:b2:8f:8e:4a:4d:f0:89:e3:d8:
53:fb:ab:ab:bd:f8:4a:92:a0:69:37:ae:b5:37:db:
ec:d4:3c:c3:88:3e:d1:79:23:b5:21:4b:85:dd:19:
6b:24:0c:3d:81:67:38:c1:ef:60:42:f3:03:f3:1f:
98:fe:b6:2b:0a:cf:05:50:d6:da:f8:c4:48:59:6f:
2b:ab:e4:07:34:14:f9:ca:64:7f:da:93:d6:ec:24:
d2:62:0b:ae:84:6e:e5:50:c3:e3:6d:7b:1d:ce:2f:
d9:c9:36:ae:fb:d2:bf:9d:40:1b:48:df:d3:ae:93:
8f:3d:e5:84:d4:3d:2b:4a:bd:5f:36:1d:62:0d:8f:
69:50:2e:b5:86:66:94:01:56:66:3c:4f:fc:ac:3c:
05:30:e3:8f:71:b8:c2:bd:d4:2d:9c:37:88:44:d3:
d5:b9:9b:f0:e9:c7:d6:e2:5e:54:30:35:0a:ac:2b:
0e:14:51:21:0a:85:7d:d6:f6:72:ea:4e:44:36:73:
6f:77:78:05:5b:ae:91:40:de:cd:93:af:27:75:87:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:15:FD:7B:61:60:08:6A:FC:A0:52:4C:8D:AE:A1:3C:1D:BC:7F:9D
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/XRX9e2FgCGr8oFJMja6hPB28f50.roa
sbgp-ipAddrBlock: critical
IPv4:
180.188.208.0/20
Signature Algorithm: sha256WithRSAEncryption
39:d8:f8:99:c7:e8:6e:7f:62:bc:ff:9c:47:e3:f4:73:06:7e:
28:e9:67:c1:10:df:de:19:f1:ba:2d:bb:e1:06:c4:e6:b1:5d:
9c:fe:47:1a:e1:ab:4d:61:4f:7d:45:44:92:3f:3c:68:8b:2e:
a4:db:1c:f6:88:89:4e:bd:6f:5f:c2:1b:76:ab:e2:d2:14:c7:
b5:6f:48:16:f9:b5:81:47:6c:ef:2e:d6:f5:f6:a8:2b:69:68:
a6:44:9b:ee:cd:87:ff:13:c3:c0:d7:f5:79:38:39:f8:77:31:
9b:e8:85:27:d6:31:3f:c9:38:9c:f7:23:c8:cc:d4:04:48:7e:
2f:8f:f4:89:74:d6:e1:8e:fa:11:8d:e7:bb:0d:da:1c:19:25:
44:c9:16:ea:f1:93:c4:a0:29:cc:b6:8b:93:7a:67:10:15:2d:
f5:38:14:7f:42:c8:f2:d7:51:38:5a:60:33:de:e1:0b:48:83:
1d:62:21:ec:c9:16:df:95:c0:66:64:6d:3b:5f:38:92:44:19:
df:8a:d7:7a:d8:24:73:22:ff:28:79:61:cf:1f:92:b5:e1:bb:
10:07:1c:d1:6c:4b:30:b3:15:af:8c:28:b4:f8:da:9b:e6:9b:
73:d9:e1:a9:25:20:26:8f:0d:96:bd:d9:fd:3f:65:58:b4:92:
5e:51:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:40 2026 by rpki-client