
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WfY9Fl3HiTbx5zf42IJlSY8enAY.roa
File: WfY9Fl3HiTbx5zf42IJlSY8enAY.roa (raw, json)
Hash identifier: fQNeikL2MXhKWpuhJAq36Rye158HbSLafDk9y61wbMI=
Subject key identifier: 59:F6:3D:16:5D:C7:89:36:F1:E7:37:F8:D8:82:65:49:8F:1E:9C:06
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 70
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WfY9Fl3HiTbx5zf42IJlSY8enAY.roa
Signing time: Thu 25 Jun 2026 12:56:25 +0000
ROA not before: Thu 25 Jun 2026 12:56:25 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 18071
IP address blocks: 133.184.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Jun 25 12:56:25 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=59F63D165DC78936F1E737F8D88265498F1E9C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:87:c2:66:cb:74:f7:85:11:8d:f1:dd:5d:
5c:c6:72:13:00:51:84:fc:31:b1:cf:99:48:18:50:
7f:a5:e5:62:09:55:bb:56:b9:5c:cb:93:13:a2:5b:
17:a6:2f:0a:9b:ef:87:88:6d:d3:8c:97:d7:81:e2:
05:11:57:05:fe:10:9b:3c:ef:83:ba:27:41:98:97:
d1:8b:a2:7f:01:34:28:70:5f:20:ce:eb:52:b6:79:
43:c8:8c:a0:2b:8b:ba:17:5e:50:b0:9b:42:71:e8:
36:78:47:4e:06:b4:00:72:82:25:3d:43:f6:50:d3:
16:36:6e:86:c4:02:a9:0c:0f:21:3b:09:d2:d2:51:
79:de:72:b2:ac:59:26:ea:88:5b:26:d4:85:87:64:
80:bc:a5:55:1d:50:dc:3d:27:19:6e:08:e3:7a:2e:
e5:16:d2:71:f5:cd:2d:ea:ae:99:b8:a1:13:88:6a:
35:ae:49:94:ee:3e:a2:e2:15:46:d4:4e:c3:fd:c0:
4c:af:7a:ed:af:e9:8d:4a:7a:d7:2e:59:b4:00:15:
4c:13:05:f9:f0:a7:ed:87:b8:e9:38:02:b2:f4:e7:
d9:a4:5b:47:c5:1a:74:ea:19:44:8a:a4:01:45:09:
4f:1a:5a:00:e6:cb:1a:5c:7a:47:36:82:91:27:8f:
fd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:3D:16:5D:C7:89:36:F1:E7:37:F8:D8:82:65:49:8F:1E:9C:06
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/WfY9Fl3HiTbx5zf42IJlSY8enAY.roa
sbgp-ipAddrBlock: critical
IPv4:
133.184.168.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:39:c1:3a:02:76:97:19:39:49:ce:36:96:ed:f5:2b:e0:7a:
dc:43:59:1c:36:49:f9:a2:06:d1:ef:40:34:5e:a8:e9:d5:46:
cd:90:52:75:a4:59:a4:67:7c:3e:5c:dc:df:2a:9f:1b:4c:86:
0c:f7:ba:c5:4a:2a:97:bb:b5:4f:11:e8:0e:3d:04:20:5e:5a:
1d:fd:ee:81:79:f5:b2:53:af:1e:af:9c:bd:c7:aa:d4:b6:52:
20:10:e5:a4:55:9e:c7:e5:de:56:27:22:54:23:ea:6c:64:2a:
c4:8e:61:a4:98:a0:63:cd:03:23:ee:cd:51:06:7e:96:d5:9f:
cf:78:ba:82:24:da:b3:2e:3c:1b:2d:22:5a:c0:dd:d6:e6:88:
de:a1:d6:5b:f4:de:0f:bd:0e:e1:72:f9:cf:92:85:8b:48:7b:
63:84:fc:fc:03:57:d5:90:62:0c:00:60:e2:5d:5b:3b:b6:af:
8e:27:1e:d1:95:53:4c:d5:9c:36:20:e3:a6:48:5f:11:9d:79:
4c:34:58:0c:90:d9:c2:73:7e:12:00:3b:5c:bf:95:d8:8f:39:
d7:92:95:43:06:b3:dc:fa:76:d0:3f:d3:01:2f:18:1e:f9:7c:
3d:3c:46:51:b6:c4:0f:3a:af:64:91:ea:4e:f7:84:67:eb:df:
60:d4:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client