
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/xoZi08jw9ZPoaDTFDLTbGEF72nE.roa
File: xoZi08jw9ZPoaDTFDLTbGEF72nE.roa (raw, json)
Hash identifier: ALRc5ImHpG5QF0A6PbRkB2XwcklWTg8J0qa8BzGCBUQ=
Subject key identifier: C6:86:62:D3:C8:F0:F5:93:E8:68:34:C5:0C:B4:DB:18:41:7B:DA:71
Certificate issuer: /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial: 63
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/xoZi08jw9ZPoaDTFDLTbGEF72nE.roa
Signing time: Tue 31 Mar 2026 07:40:41 +0000
ROA not before: Tue 31 Mar 2026 07:40:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 14618
IP address blocks: 103.167.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Validity
Not Before: Mar 31 07:40:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C68662D3C8F0F593E86834C50CB4DB18417BDA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:d8:b9:b4:69:e5:c7:59:ec:ff:f4:ae:7f:
a0:f5:82:3f:04:1e:a1:d6:4b:7f:71:75:87:7b:cb:
ed:f9:92:05:dd:72:9b:cf:d3:51:b2:3c:50:37:3c:
0b:1a:e3:cc:f0:b8:f7:58:5a:f5:84:9a:e7:1a:44:
d5:c7:b6:b9:d6:11:24:bf:c3:12:b9:e4:fb:92:0e:
f7:c0:ea:6b:06:68:74:51:94:9b:d7:cb:3a:2f:1d:
da:9c:66:88:57:91:c0:d5:20:b6:d8:c7:38:fd:54:
11:7f:92:d0:66:77:d0:f0:a5:0e:1f:17:b0:98:c9:
34:0d:7c:f4:41:76:63:ae:51:33:c7:cc:39:a8:8f:
ed:e4:44:f6:15:9f:8c:17:ca:b8:86:75:c7:5f:61:
2e:e2:ca:6d:ed:52:5a:82:12:cd:e9:a7:9e:ab:5a:
64:60:ee:95:65:05:13:b5:02:5e:d5:11:c8:e1:b9:
35:eb:ed:d2:38:4e:c2:8b:f4:e0:1f:18:d9:96:f1:
6a:eb:a4:13:9c:93:b7:a0:3d:18:7b:b7:fb:11:b7:
c5:fa:20:16:44:36:28:26:38:88:f6:3a:d2:af:30:
4f:1b:8d:31:39:b4:a5:3a:9b:4d:a8:09:0e:cc:bf:
0b:1b:b7:19:f2:0c:d3:81:21:d3:72:c7:6d:f6:d6:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:86:62:D3:C8:F0:F5:93:E8:68:34:C5:0C:B4:DB:18:41:7B:DA:71
X509v3 Authority Key Identifier:
keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/xoZi08jw9ZPoaDTFDLTbGEF72nE.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.206.0/23
Signature Algorithm: sha256WithRSAEncryption
48:c1:60:66:ab:c0:e5:92:92:2f:5a:d3:39:79:32:97:a4:f9:
16:18:ce:4c:1e:af:29:a0:77:02:f6:c6:e5:92:b6:5c:90:63:
2c:b9:0f:48:cc:07:97:93:89:97:fa:ef:6a:3e:fc:8f:43:0b:
e6:0b:eb:e8:ea:2b:1e:24:45:82:fe:10:46:97:ab:42:a5:e4:
11:c4:58:9b:b9:61:3d:b6:be:7f:6d:fa:c0:0e:f0:4f:89:a0:
6b:97:0a:7a:cb:ca:14:19:dc:cf:e2:52:b6:7a:75:a1:d3:1e:
96:c5:29:df:bc:8e:bb:ea:a4:99:f9:9a:49:06:c6:70:a7:c3:
68:60:61:45:b3:e8:88:84:28:a8:f5:17:01:4d:05:81:44:f3:
95:2a:00:b0:98:dc:25:57:85:03:b8:d4:c5:93:ef:eb:a0:1f:
d8:02:9a:e4:ea:c3:4e:16:c5:52:64:49:38:09:2b:c3:1d:ea:
91:80:07:91:08:ac:75:59:9f:ae:dd:52:9e:d3:2c:17:80:18:
4e:3b:f8:78:be:ce:06:51:20:1e:a1:a2:53:88:2b:b9:5a:8d:
8a:7e:c8:af:fb:40:82:a6:fb:7d:65:84:d3:fa:09:30:43:b3:
86:6a:e9:84:7f:1b:7b:52:01:4d:f8:27:27:99:8a:58:9d:c5:
8b:5b:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:05 2026 by rpki-client