
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/jtDDq2YosiXnzHaaS5s3vKPxaks.roa
File: jtDDq2YosiXnzHaaS5s3vKPxaks.roa (raw, json)
Hash identifier: uTtNCbxWFRv42Fj8NxqaHpLK1BEeXobbYfi4WhUa7CM=
Subject key identifier: 8E:D0:C3:AB:66:28:B2:25:E7:CC:76:9A:4B:9B:37:BC:A3:F1:6A:4B
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 8B
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/jtDDq2YosiXnzHaaS5s3vKPxaks.roa
Signing time: Thu 25 Jun 2026 13:02:47 +0000
ROA not before: Thu 25 Jun 2026 13:02:47 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 18071
IP address blocks: 133.185.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Jun 25 13:02:47 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=8ED0C3AB6628B225E7CC769A4B9B37BCA3F16A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:77:f9:9d:b5:6a:7b:e7:50:70:30:48:2d:
ba:5a:03:c1:1b:d4:ca:fe:45:35:04:8e:34:b2:75:
6f:8c:58:f1:0c:f2:c2:58:be:d3:d6:91:87:28:f9:
4c:46:74:f0:22:1a:98:02:dc:70:90:05:e8:a3:91:
f9:b4:43:50:11:c0:17:14:f4:7d:23:cc:39:34:c2:
8b:f8:e5:b1:37:9c:ea:77:30:29:3e:c7:d6:04:eb:
8e:a3:f7:b0:a7:74:1a:7e:06:55:dd:b2:55:45:a1:
10:7d:23:cb:48:0f:0d:dd:24:ae:c6:4d:74:43:7d:
70:d0:58:c2:48:5d:f8:3a:dd:af:10:99:08:d4:f7:
36:67:41:44:7b:3c:51:fa:c4:43:9f:6e:f7:cb:2b:
d7:95:67:5d:cb:c7:c3:91:2e:94:43:b3:7a:d9:d4:
51:eb:05:92:14:30:b2:8f:d4:b0:00:2f:66:5a:87:
61:d8:14:08:5c:28:8a:79:1c:b6:38:94:41:55:18:
c4:ca:b5:29:bb:74:f7:fb:df:36:c8:24:83:3e:0b:
45:90:e6:2b:46:1c:c3:1b:da:f7:57:ac:a7:71:6a:
a5:71:5c:de:53:68:62:89:fd:41:5b:c1:65:96:b7:
af:e4:be:fe:c6:7b:9f:5e:26:46:08:28:9f:dc:e9:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:C3:AB:66:28:B2:25:E7:CC:76:9A:4B:9B:37:BC:A3:F1:6A:4B
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/jtDDq2YosiXnzHaaS5s3vKPxaks.roa
sbgp-ipAddrBlock: critical
IPv4:
133.185.240.0/21
Signature Algorithm: sha256WithRSAEncryption
cc:0b:41:23:f1:46:fd:1e:95:80:c1:b9:c6:9d:dc:3b:37:47:
63:3c:f2:98:19:33:b8:9a:87:da:ab:6b:87:43:6e:cf:48:e6:
2c:0d:85:ac:5f:f3:50:94:5f:0a:15:08:8d:ac:13:dc:78:1e:
b0:87:ac:04:20:10:0c:51:97:3c:3a:0e:77:d2:77:45:0d:f6:
83:53:75:fa:70:a4:04:7c:16:79:5f:a3:20:47:ba:21:ea:f8:
08:e8:35:78:88:42:ab:82:9c:9b:ea:c0:dc:87:e8:a5:2c:da:
08:5a:a1:36:6e:8d:67:93:a1:5b:73:39:f4:21:ae:cf:8e:fe:
77:02:9a:1d:58:e4:14:05:23:dc:15:06:7d:b0:50:f7:b4:56:
f8:1d:10:76:09:ea:c7:28:cb:ca:53:b9:7e:61:ca:97:d1:f9:
b7:2a:5f:bf:d0:26:dc:5f:ba:ce:c6:32:0b:28:8d:8b:ce:57:
e0:7e:a2:0b:0b:6a:32:f5:ab:9c:0a:04:f0:26:47:25:39:cc:
a1:46:35:ef:05:cf:01:6b:62:39:e0:d0:aa:90:5f:c0:0a:6e:
52:e1:6d:84:3c:34:82:5f:a4:f2:79:50:35:c1:31:b9:00:e3:
46:75:75:a2:59:27:87:b2:29:20:64:16:cb:df:b7:0e:7f:55:
f5:eb:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:56 2026 by rpki-client