
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/xN0Nbtk5hy8VqzYflX9_8DMzjDk.roa
File: xN0Nbtk5hy8VqzYflX9_8DMzjDk.roa (raw, json)
Hash identifier: c4qIVRj7g9SV1+8rP29HhdHDBxkhpzyfZJYR1EEjNss=
Subject key identifier: C4:DD:0D:6E:D9:39:87:2F:15:AB:36:1F:95:7F:7F:F0:33:33:8C:39
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0258
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xN0Nbtk5hy8VqzYflX9_8DMzjDk.roa
Signing time: Sun 01 Feb 2026 01:31:41 +0000
ROA not before: Sun 01 Feb 2026 01:31:41 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 4713
IP address blocks: 61.199.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 600 (0x258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Feb 1 01:31:41 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=C4DD0D6ED939872F15AB361F957F7FF033338C39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:a4:5b:7d:cb:b7:43:65:9f:9f:0e:f2:8a:
f5:19:5b:35:c0:d5:b2:44:f6:38:d8:4d:66:0e:80:
77:d5:de:71:a3:61:7a:54:37:46:8b:93:be:dd:89:
1f:e2:da:f2:a7:42:2f:cd:f8:13:3a:90:0d:1f:34:
3f:ff:38:1c:db:fe:07:2f:ee:bc:71:01:b0:9c:5a:
ab:d6:12:a8:e2:cf:7e:1d:db:3f:78:14:4c:a8:5e:
81:26:b9:9d:00:9d:08:a1:91:4e:a0:74:dd:d1:8d:
9a:b5:38:70:31:63:35:70:00:f2:29:b9:91:54:a4:
36:0a:01:ee:8e:99:f0:78:ee:3f:f1:b5:ce:70:01:
7e:7c:5f:fc:bb:70:9e:d7:18:2e:cd:53:63:49:d2:
19:77:a0:05:44:d3:24:ad:ca:a8:5b:d2:11:c3:f4:
a7:d8:ea:22:d8:cf:9c:b3:cb:1a:17:8c:d6:1c:87:
44:02:64:26:34:8a:50:87:63:18:bd:6f:7f:fe:2f:
0f:39:3f:02:db:b6:b3:02:b4:95:92:a9:77:dc:25:
35:dd:a6:f0:3f:5f:8e:0d:2f:77:c7:ff:8a:fb:a8:
b1:c6:8c:97:7d:ab:0c:a7:92:53:bf:43:17:0a:1a:
fa:51:a4:56:7e:ce:ce:bd:43:de:5f:5b:7d:cf:e6:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:0D:6E:D9:39:87:2F:15:AB:36:1F:95:7F:7F:F0:33:33:8C:39
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xN0Nbtk5hy8VqzYflX9_8DMzjDk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2d:82:9c:b0:6d:3d:c9:5a:55:48:f4:98:88:0a:bd:b4:06:f6:
c2:71:1e:93:03:c4:4b:8c:fe:14:35:74:5c:96:57:d6:69:cf:
27:9a:af:5c:cd:df:73:28:f1:e6:38:b0:70:79:cb:54:c7:34:
c3:d8:5a:cb:44:5a:e3:94:40:1d:15:90:e6:17:b2:1b:18:aa:
26:33:39:db:0f:ea:f7:6c:50:67:26:99:b7:38:66:9f:8a:e3:
33:86:2a:a8:a5:a3:9e:72:86:6a:d0:27:0f:48:60:be:8c:ec:
2e:10:0b:ac:d3:db:20:84:d5:77:1b:d0:fc:d5:a0:a7:fe:7d:
7c:ce:67:dc:3e:c3:46:51:65:0e:7a:d6:62:94:b5:aa:5a:57:
ed:ae:cd:31:9e:a7:32:d5:8f:13:83:2a:35:c9:72:f7:4c:50:
52:61:c0:3e:49:2d:8b:64:7e:eb:ea:9e:5f:22:25:fc:7d:15:
9d:0d:18:06:49:27:31:cf:8b:a0:9a:1d:13:12:53:e1:bb:cb:
f6:5f:d5:1d:ea:90:74:e0:24:18:ed:a7:a3:47:93:1b:e2:76:
84:5b:ce:4c:ee:1e:1b:0f:59:28:b4:55:52:01:6b:48:a7:f7:
dd:da:fa:93:cb:9e:4b:34:65:19:b9:02:ab:67:39:3b:56:f4:
69:0e:0f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:09 2026 by rpki-client