
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/kRSWtynoja4CWmi5zXbd4fBfe4U.roa
File: kRSWtynoja4CWmi5zXbd4fBfe4U.roa (raw, json)
Hash identifier: pSTvZHE5CcwXaKgc6eDj/iSN9o8tTI/KJranwNHtj8I=
Subject key identifier: 91:14:96:B7:29:E8:8D:AE:02:5A:68:B9:CD:76:DD:E1:F0:5F:7B:85
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 7C
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/kRSWtynoja4CWmi5zXbd4fBfe4U.roa
Signing time: Thu 25 Jun 2026 13:02:38 +0000
ROA not before: Thu 25 Jun 2026 13:02:38 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 18071
IP address blocks: 133.185.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Jun 25 13:02:38 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=911496B729E88DAE025A68B9CD76DDE1F05F7B85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:5b:1a:1f:d7:d4:74:44:0d:74:36:67:47:
cf:82:4c:c7:c9:3b:4d:e6:28:67:e6:7a:d3:9e:93:
58:f4:b4:ed:5b:02:05:5b:82:5b:e2:33:fa:81:c3:
0d:f7:ad:24:f7:68:81:ae:71:77:11:cf:34:9e:87:
98:be:e8:79:6e:c0:f5:1f:3b:d2:0d:60:b3:f7:d0:
47:aa:8a:f9:ef:1d:54:66:57:5b:58:1a:d3:13:fd:
bb:dc:85:d9:99:e1:e1:4d:5d:ea:1a:9a:27:75:6f:
cc:37:d8:d6:3a:00:1f:1c:d7:78:40:19:c8:8e:07:
c1:f8:be:0e:cd:61:8b:24:d7:c8:fc:ad:76:02:5c:
c3:bc:34:92:81:04:18:24:1c:f0:a6:c4:12:e2:51:
e2:d6:c8:67:64:69:6e:72:66:08:6b:bf:d9:86:a1:
96:92:66:9f:07:22:56:d5:e8:e9:d5:de:07:26:b4:
ca:2d:8a:fb:3d:e6:80:d7:87:9b:ad:fc:2f:2c:c8:
70:dc:0d:74:20:55:0c:6a:7a:a1:44:83:d0:7d:bd:
5e:c5:94:c1:07:97:df:e4:b8:59:8f:19:f0:9e:4a:
02:70:2b:6a:62:cc:09:28:04:11:99:32:ad:89:5e:
3b:58:3f:d7:c5:30:a2:cb:7c:4b:f0:cb:7e:19:ba:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:96:B7:29:E8:8D:AE:02:5A:68:B9:CD:76:DD:E1:F0:5F:7B:85
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/kRSWtynoja4CWmi5zXbd4fBfe4U.roa
sbgp-ipAddrBlock: critical
IPv4:
133.185.144.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:e8:0a:b9:cd:e8:d9:c6:a1:bf:ee:64:4f:10:a0:88:b5:a7:
32:21:f5:4e:bc:32:24:98:24:28:15:58:25:17:c6:4b:89:90:
c2:e4:3e:43:72:9f:6f:3c:9d:b3:fd:71:a9:e2:2d:e7:72:c7:
50:de:2b:ce:1f:bb:84:88:af:bb:bd:5e:30:05:f6:53:fa:41:
02:b2:36:d5:a4:3b:9a:8b:5d:3c:92:e0:9c:81:98:05:96:37:
46:99:80:20:99:f7:41:45:df:17:2e:12:ab:bd:58:4e:ba:a4:
4e:5b:2d:f0:ff:f0:4a:dd:91:d2:2b:da:cd:9c:d2:fc:55:f8:
7e:05:5c:bd:f8:89:bc:27:bc:4c:e6:81:bf:72:f8:6e:97:20:
0b:aa:27:47:5f:12:5d:b1:6a:81:01:b0:29:7c:c3:7e:05:9d:
32:68:44:47:73:bf:36:09:d1:81:f7:7d:28:db:ff:d8:b8:16:
f4:d0:c3:9e:08:4d:ac:9d:fb:3d:bc:2b:e2:e0:bd:a0:30:b2:
93:1d:53:66:66:67:b8:58:49:fb:71:68:fa:f7:db:81:d5:21:
e3:72:6d:27:00:08:37:dc:0f:32:17:f1:c9:71:69:4e:e1:9f:
16:24:9a:a6:90:82:26:48:8a:b4:a8:8d:47:06:91:2c:e1:b4:
90:f6:63:63
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNjAw
NzZGQzI4RjA0REVCOTgxN0EzNDgyMjI2OTQyQ0JFRjFGODBEMB4XDTI2MDYyNTEz
MDIzOFoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoOTExNDk2QjcyOUU4OERB
RTAyNUE2OEI5Q0Q3NkRERTFGMDVGN0I4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALRTWxof19R0RA10NmdHz4JMx8k7TeYoZ+Z6056TWPS07VsCBVuC
W+Iz+oHDDfetJPdoga5xdxHPNJ6HmL7oeW7A9R870g1gs/fQR6qK+e8dVGZXW1ga
0xP9u9yF2Znh4U1d6hqaJ3VvzDfY1joAHxzXeEAZyI4Hwfi+Ds1hiyTXyPytdgJc
w7w0koEEGCQc8KbEEuJR4tbIZ2RpbnJmCGu/2YahlpJmnwciVtXo6dXeBya0yi2K
+z3mgNeHm638LyzIcNwNdCBVDGp6oUSD0H29XsWUwQeX3+S4WY8Z8J5KAnAramLM
CSgEEZkyrYleO1g/18Uwost8S/DLfhm6ZWsCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSRFJa3KeiNrgJaaLnNdt3h8F97hTAfBgNVHSMEGDAWgBTGAHb8KPBN65gXo0gi
JpQsvvH4DTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkzNy94Z0IyX0Nqd1RldVlGNk5JSWlhVUxMN3gtQTAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC94Z0IyX0Nqd1RldVlGNk5JSWlhVUxM
N3gtQTAuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTkzNy9rUlNXdHlub2phNENXbWk1elhiZDRmQmZlNFUucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhbmQMA0GCSqGSIb3DQEBCwUAA4IB
AQCu6Aq5zejZxqG/7mRPEKCItacyIfVOvDIkmCQoFVglF8ZLiZDC5D5Dcp9vPJ2z
/XGp4i3ncsdQ3ivOH7uEiK+7vV4wBfZT+kECsjbVpDuai108kuCcgZgFljdGmYAg
mfdBRd8XLhKrvVhOuqROWy3w//BK3ZHSK9rNnNL8Vfh+BVy9+Im8J7xM5oG/cvhu
lyALqidHXxJdsWqBAbApfMN+BZ0yaERHc782CdGB930o2//YuBb00MOeCE2snfs9
vCvi4L2gMLKTHVNmZme4WEn7cWj699uB1SHjcm0nAAg33A8yF/HJcWlO4Z8WJJqm
kIImSIq0qI1HBpEs4bSQ9mNj
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client