
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/agxFzR3Q5m2QJDFVKek1EG0YxQs.roa
File: agxFzR3Q5m2QJDFVKek1EG0YxQs.roa (raw, json)
Hash identifier: auwbkmqA5whQpE0J9OQcwCQ/QgsuGOeM6kSrAYhkST4=
Subject key identifier: 6A:0C:45:CD:1D:D0:E6:6D:90:24:31:55:29:E9:35:10:6D:18:C5:0B
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 8C
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/agxFzR3Q5m2QJDFVKek1EG0YxQs.roa
Signing time: Thu 25 Jun 2026 13:02:47 +0000
ROA not before: Thu 25 Jun 2026 13:02:47 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 18071
IP address blocks: 133.185.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Jun 25 13:02:47 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=6A0C45CD1DD0E66D9024315529E935106D18C50B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:da:39:9d:79:ee:da:5c:d4:72:54:80:39:
22:73:69:63:6c:20:96:e6:88:33:ac:52:51:88:6f:
dc:a5:60:a3:24:41:3d:c1:41:54:6d:37:ae:12:43:
e7:f4:00:df:73:52:ef:1c:10:b0:c3:76:ab:d5:b7:
48:67:e6:b2:e5:ed:f0:5d:71:30:7c:34:41:10:7c:
1b:92:b6:c1:46:5a:45:23:22:73:cc:70:c3:8c:05:
37:36:21:1b:a5:b3:65:3e:80:23:e4:be:66:1d:e1:
60:e5:83:a3:cb:e5:5e:a5:bc:d6:ac:c3:88:c8:f2:
b7:e4:c9:1b:07:d5:16:ea:28:ff:95:40:44:01:dc:
fe:9c:0c:a0:40:2e:fe:72:9d:1c:1e:e1:18:34:27:
55:a7:98:11:9f:5d:26:41:38:a1:1f:88:49:08:62:
1d:8c:bf:f5:34:cc:ac:32:fa:94:1b:45:3f:c3:9a:
5e:e2:8d:aa:ef:ec:76:95:61:46:a1:59:b7:71:a7:
ef:1c:94:28:39:39:c2:dd:26:14:aa:d6:16:8c:3f:
98:60:11:e9:05:e4:19:9f:9b:45:fa:f8:bd:42:31:
c2:44:63:ea:6b:56:03:37:9d:b0:37:73:fd:a3:14:
c7:50:76:6e:e2:5b:e5:49:e7:4f:f4:33:84:30:eb:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:45:CD:1D:D0:E6:6D:90:24:31:55:29:E9:35:10:6D:18:C5:0B
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/agxFzR3Q5m2QJDFVKek1EG0YxQs.roa
sbgp-ipAddrBlock: critical
IPv4:
133.185.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:c4:aa:69:dd:82:e7:41:df:95:df:c8:d7:25:d3:d7:fd:3e:
98:5d:d7:b5:a6:74:3d:e5:e8:f9:d3:e2:9d:58:d9:87:c3:eb:
f3:69:56:d3:a1:f8:5f:84:08:6c:66:fb:14:c5:89:76:b6:f6:
8c:19:ce:38:46:0f:9d:3f:68:af:67:77:1d:05:6a:72:0a:a9:
b8:19:14:c9:e4:17:47:d5:a2:97:11:c8:47:55:7a:17:c3:8b:
87:a0:e4:6f:9f:bf:65:49:c5:05:96:05:9a:88:ce:db:bd:c4:
7e:d3:51:a9:b2:7c:4d:e0:66:61:37:7e:38:a3:5e:26:93:e8:
46:ae:58:77:6f:a9:63:46:0a:c5:66:e0:26:c9:2d:95:6f:95:
43:7e:7d:b6:e3:4f:d6:e5:f4:f8:56:cf:41:db:95:ea:65:a6:
fb:ea:58:60:f5:05:08:b7:e3:4b:f7:0c:32:24:d6:a2:24:d9:
ef:e7:57:d6:42:c0:64:20:53:e7:29:34:fb:eb:66:ab:55:18:
c8:65:32:3b:a2:b3:49:db:73:51:cb:e9:d2:7c:d5:37:5f:68:
42:f0:7e:45:fb:7d:0f:51:51:ae:00:55:64:7b:eb:c7:c4:f0:
e7:51:df:ae:ce:ac:50:20:a8:92:42:41:89:39:bc:8a:bd:28:
48:90:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:56 2026 by rpki-client