
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XuyGYYPLAbSp58ioPB1pIEvweIc.roa
File: XuyGYYPLAbSp58ioPB1pIEvweIc.roa (raw, json)
Hash identifier: aa2B9c8IZ1ySR5yasTiQRRHQw8nR8Pxkpwtst9QK8vM=
Subject key identifier: 5E:EC:86:61:83:CB:01:B4:A9:E7:C8:A8:3C:1D:69:20:4B:F0:78:87
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 017A
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XuyGYYPLAbSp58ioPB1pIEvweIc.roa
Signing time: Tue 31 Mar 2026 07:48:19 +0000
ROA not before: Tue 31 Mar 2026 07:48:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2914
IP address blocks: 120.88.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 12:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Mar 31 07:48:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5EEC866183CB01B4A9E7C8A83C1D69204BF07887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:87:d8:ac:fc:58:bf:9d:cf:1d:66:ce:9f:
49:a2:8d:c5:d1:ca:58:02:a3:98:be:e4:4f:6d:db:
0c:87:c9:f6:d8:e1:87:b8:3d:3a:65:c0:0a:76:d6:
31:db:80:4c:86:46:09:30:cf:81:16:dd:73:c9:3b:
5f:04:e3:fe:82:4a:40:d6:41:f0:26:41:2f:0d:8d:
d9:3d:cd:39:02:2b:2f:82:65:a3:d3:fa:d8:0e:1f:
49:52:2a:be:3b:65:61:62:a3:69:0d:17:75:9b:f4:
5e:fd:76:19:ae:44:2a:d4:5a:d5:7f:12:c3:37:9d:
15:40:03:15:b1:42:90:16:f3:d1:b6:f7:29:93:9e:
58:e9:15:69:84:eb:8b:61:8a:ba:de:29:52:27:21:
62:b7:bb:34:69:ec:52:82:3a:9a:bb:49:15:d2:fa:
92:dd:32:f0:be:86:16:bc:56:03:16:b4:ab:94:0b:
de:0b:80:8f:f8:17:0f:6d:90:bc:68:c9:9b:51:ad:
50:dd:66:29:98:eb:43:4c:18:33:27:06:eb:80:84:
63:42:0b:98:60:46:47:a4:44:f7:a3:11:e9:1f:7e:
ea:9d:9b:68:93:a5:e9:da:46:f4:62:a1:41:29:9e:
76:36:ad:e4:74:ff:01:8d:5d:fd:1c:d9:c8:76:4a:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EC:86:61:83:CB:01:B4:A9:E7:C8:A8:3C:1D:69:20:4B:F0:78:87
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XuyGYYPLAbSp58ioPB1pIEvweIc.roa
sbgp-ipAddrBlock: critical
IPv4:
120.88.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:e8:15:f6:43:ef:0c:13:0d:c6:7a:6c:30:2e:81:73:c4:ef:
2a:8c:b2:0c:a5:a0:3b:19:69:da:2e:3a:69:aa:15:b7:70:da:
ea:f5:59:ef:98:a0:1d:c0:ee:5c:ce:03:c2:02:0e:af:30:e8:
55:7e:58:91:ac:3e:9f:eb:00:0f:08:86:c3:bb:bd:96:81:21:
30:18:a8:69:51:07:b6:29:89:f6:e9:b9:60:36:17:64:5b:f1:
24:6b:92:9d:a4:63:e1:0f:28:e6:63:26:c5:9f:4d:92:8d:45:
86:3c:2a:36:e4:b9:e7:ff:25:85:12:25:b2:5d:d9:a0:2b:91:
43:4d:03:78:14:7f:de:d6:81:ec:b8:50:f8:51:98:83:3b:77:
b3:50:a0:2d:35:c0:f3:3b:6f:f9:a7:cf:55:93:22:95:17:0b:
e9:66:80:49:1e:22:8d:2c:53:df:f0:33:01:96:04:66:e4:08:
46:6d:31:05:3a:f5:8d:82:e1:32:60:79:e0:ee:94:e7:c5:18:
d5:ae:41:82:26:34:5f:e7:97:3b:3b:e7:3d:a5:64:25:55:7c:
a0:72:0a:b1:f0:12:d2:37:a2:0b:fc:6d:b2:3e:67:9f:53:a4:
45:ed:7d:9b:1c:ba:fc:20:5e:2b:29:00:7e:09:1f:9c:d6:0d:
e5:a1:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client