
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/aXbyUd2byqug5r-iDPgPZFNVNzc.roa
File: aXbyUd2byqug5r-iDPgPZFNVNzc.roa (raw, json)
Hash identifier: r1HD/PeHEWS7rdI1vTJG+HsYRqy9DlH/L+IT3xnJr4M=
Subject key identifier: 69:76:F2:51:DD:9B:CA:AB:A0:E6:BF:A2:0C:F8:0F:64:53:55:37:37
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0254
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/aXbyUd2byqug5r-iDPgPZFNVNzc.roa
Signing time: Sun 01 Feb 2026 01:31:39 +0000
ROA not before: Sun 01 Feb 2026 01:31:39 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 4713
IP address blocks: 60.32.0.0/12 maxlen: 12
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 596 (0x254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Feb 1 01:31:39 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=6976F251DD9BCAABA0E6BFA20CF80F6453553737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:34:e3:1c:52:48:36:95:7e:c3:e1:f2:d9:
c1:54:05:38:50:2f:75:24:fd:b0:a9:09:8f:a1:85:
8a:17:10:94:dc:09:49:7a:b8:c1:04:41:81:de:e8:
3e:97:fb:85:55:ee:ab:1e:2b:61:72:b6:83:86:8b:
da:d7:cf:2b:09:d8:21:9b:63:3c:7a:2a:08:4d:cf:
ed:b4:b9:7f:c2:dc:c2:50:e8:54:c1:fc:74:b4:ab:
fc:fa:b7:68:df:89:8e:46:20:3a:48:6f:3b:fb:b2:
3f:64:dd:0f:45:a0:61:e2:6d:76:85:97:2c:5f:7f:
b0:d2:82:77:bc:a9:a1:70:10:ad:5f:7f:87:58:1f:
32:0d:23:04:c1:1c:9b:29:b4:b9:23:6c:d3:5a:58:
10:95:f8:2f:d6:3e:09:17:07:12:49:1e:d4:2c:cf:
3f:69:54:be:39:31:ba:c2:f9:8d:52:30:35:7a:d0:
41:5c:5c:dd:8f:da:f0:d4:a4:6a:2b:08:b9:09:23:
60:1b:c0:85:5e:6b:3a:66:d6:c2:02:27:3d:a7:e0:
02:2d:ce:77:f9:a0:9a:11:e9:26:e7:51:32:9c:8d:
ed:e0:27:12:78:e0:1c:41:75:bd:65:4f:1a:e4:1d:
30:17:ba:da:c9:25:fc:e9:11:b0:61:61:83:fe:bd:
0e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:76:F2:51:DD:9B:CA:AB:A0:E6:BF:A2:0C:F8:0F:64:53:55:37:37
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/aXbyUd2byqug5r-iDPgPZFNVNzc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
60.32.0.0/12
Signature Algorithm: sha256WithRSAEncryption
54:99:ff:37:0b:37:d0:f8:50:df:97:12:84:b6:1e:14:90:aa:
b0:09:ca:8e:d7:ea:66:48:9a:aa:40:96:34:09:71:38:65:32:
18:69:85:08:ee:9f:f0:6b:e8:d8:7a:9e:fe:cd:fa:3a:e7:c1:
b1:40:10:3f:3a:c3:55:a8:36:29:ce:1b:5d:f3:5b:48:ab:9c:
32:b4:4e:35:e5:5f:ce:21:30:d9:02:5c:3f:d1:78:90:cf:46:
03:f9:2c:e1:16:25:d9:24:08:a9:5e:78:0c:a3:9d:08:08:f4:
47:d9:c1:33:18:57:4c:13:a0:c5:fc:6d:83:92:5e:2f:56:9d:
3b:79:70:8a:9f:63:a6:c7:70:4b:6b:5d:e3:d3:ff:12:a8:81:
35:2f:59:83:dc:03:e6:eb:b4:7d:db:12:af:aa:7f:57:98:b5:
60:25:b4:01:b6:d9:d4:09:90:6f:0a:ac:df:91:ff:fb:3a:c9:
53:42:0b:47:1c:68:b1:17:f7:9d:23:22:0b:c8:79:65:54:ad:
79:16:43:68:79:b1:ea:8f:d0:0d:83:b8:a7:56:d8:00:40:78:
a0:fd:a4:fd:83:08:03:ff:06:c6:fc:af:a3:d1:27:52:1c:9d:
01:07:29:67:dd:68:a1:9f:cd:48:d9:3b:d3:01:15:a4:37:91:
bf:c6:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:53 2026 by rpki-client