
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/flXaDjCo64DbF5klqyfE3hJ3N4s.roa
File: flXaDjCo64DbF5klqyfE3hJ3N4s.roa (raw, json)
Hash identifier: kL1kolAHrFQ0Or3BnCNAvV7fCFiN8g33hHLScUANoL8=
Subject key identifier: 7E:55:DA:0E:30:A8:EB:80:DB:17:99:25:AB:27:C4:DE:12:77:37:8B
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 6F
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/flXaDjCo64DbF5klqyfE3hJ3N4s.roa
Signing time: Thu 25 Jun 2026 12:56:25 +0000
ROA not before: Thu 25 Jun 2026 12:56:25 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 18071
IP address blocks: 133.184.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Jun 25 12:56:25 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=7E55DA0E30A8EB80DB179925AB27C4DE1277378B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:b4:44:30:69:a0:ce:61:79:c1:84:34:32:
21:c2:c9:33:84:ee:19:41:e7:9a:ba:d2:b8:90:5a:
1f:c0:c8:5d:33:8e:15:00:75:5b:fb:d3:0d:93:c4:
b2:68:76:7e:94:05:41:26:78:c1:00:22:f2:38:b9:
80:51:7a:2d:b4:26:62:26:25:a8:36:89:d3:b4:49:
48:10:82:4e:b4:b5:ee:34:22:58:80:06:f7:49:8b:
8d:6a:00:41:0a:48:0f:41:1a:68:67:65:b7:e3:47:
98:f9:63:42:b1:27:c9:49:9e:76:5f:56:38:7b:b6:
59:fa:5d:d1:68:f3:39:bd:9f:16:f4:cf:31:e1:6e:
da:07:4e:f7:ee:3c:3d:9a:64:78:b1:bd:39:17:0d:
28:83:1c:ae:5d:da:9c:ee:36:b8:bb:bb:f7:93:41:
7e:da:e3:1e:2c:e6:96:b6:6c:b5:6f:aa:f2:61:8d:
92:7b:ee:e7:8c:4d:c4:45:31:eb:99:c2:b1:63:98:
c1:b5:43:c7:03:7c:02:77:57:fc:22:93:61:92:a0:
6c:d9:7c:03:75:bc:b5:15:f8:e1:6a:98:1e:64:45:
1a:d3:8f:a0:0d:37:52:31:60:c2:94:fd:6c:f5:75:
31:b1:ee:df:ad:63:9f:51:65:b6:4a:c4:7e:15:c1:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:55:DA:0E:30:A8:EB:80:DB:17:99:25:AB:27:C4:DE:12:77:37:8B
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/flXaDjCo64DbF5klqyfE3hJ3N4s.roa
sbgp-ipAddrBlock: critical
IPv4:
133.184.156.0/22
Signature Algorithm: sha256WithRSAEncryption
18:de:59:38:aa:25:2a:3a:94:ed:c5:bd:97:93:23:a4:c2:fd:
8a:de:ae:7a:3e:4f:49:d5:67:e5:4c:d3:17:03:03:8c:fd:fb:
83:ac:ff:01:8b:e4:48:42:1e:d0:34:79:b2:78:cc:09:0c:70:
86:4b:c8:fb:18:f1:cb:c7:22:52:cb:36:ca:5f:f5:1f:b8:9f:
5e:bc:83:d3:71:c4:27:36:f7:bb:b0:ba:c0:b1:79:16:1c:da:
9a:67:94:55:35:cd:25:26:8f:41:e5:e0:07:1a:d9:e0:7f:86:
43:0c:db:56:9a:d3:da:df:24:32:5a:5b:9c:77:98:05:82:d7:
93:8f:d6:b9:33:2b:da:7b:cb:4b:86:e0:85:ca:65:f8:fe:cc:
3e:5a:f8:81:25:e2:ea:e2:fd:98:31:38:d4:40:d6:d3:42:bb:
76:f8:3a:5a:40:3c:3e:2f:66:40:5a:c5:b7:14:2f:82:e7:ec:
4d:c3:31:d6:98:fd:0e:92:4c:2a:2d:bb:b4:6d:e9:41:3c:f6:
d2:fa:e5:2b:42:84:47:8b:fa:06:bc:7d:e7:a4:8f:bc:98:f7:
c9:2c:65:34:3c:7f:0b:a2:16:d6:71:49:c6:be:95:0f:c5:c8:
61:65:a2:40:d3:69:6e:6e:de:96:ef:dd:26:81:e1:63:7d:f4:
e6:be:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:56 2026 by rpki-client