
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/X24ilQMNz5kUUoadsBIrP2N61Nw.roa
File: X24ilQMNz5kUUoadsBIrP2N61Nw.roa (raw, json)
Hash identifier: PSiJ2FjjcPmwteefrbhBouLbB5KIWJeN1xM4ZVz/xZQ=
Subject key identifier: 5F:6E:22:95:03:0D:CF:99:14:52:86:9D:B0:12:2B:3F:63:7A:D4:DC
Certificate issuer: /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial: 0F
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/X24ilQMNz5kUUoadsBIrP2N61Nw.roa
Signing time: Mon 03 Aug 2026 06:34:43 +0000
ROA not before: Mon 03 Aug 2026 06:34:43 +0000
ROA not after: Tue 03 Aug 2027 00:26:42 +0000
asID: 131965
IP address blocks: 175.28.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Validity
Not Before: Aug 3 06:34:43 2026 GMT
Not After : Aug 3 00:26:42 2027 GMT
Subject: CN=5F6E2295030DCF991452869DB0122B3F637AD4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:d1:cb:48:45:48:48:29:28:99:5c:dc:f8:
10:4e:34:83:08:f3:6c:fc:38:6a:17:f3:c1:12:09:
ca:19:48:73:90:4d:ff:df:0d:e4:f7:45:14:ee:a8:
98:00:ae:42:4e:ec:e0:11:28:27:a0:12:9b:56:d0:
74:e1:8d:2a:69:74:2b:4d:b2:76:84:1f:71:a7:37:
e4:19:68:af:e0:47:00:73:34:f6:fb:41:97:ff:3c:
11:a1:d1:4b:ba:14:42:19:f3:6a:01:58:83:61:42:
a5:94:15:93:7e:2c:fa:d4:95:59:26:c8:b1:a0:7c:
50:b6:b0:e0:12:42:b3:d8:bb:a8:76:46:45:ec:04:
be:7f:14:fa:38:98:c0:b8:cc:9b:89:09:81:ac:74:
44:1a:3d:a5:e7:f5:f8:89:d4:ab:d7:c7:26:2d:86:
1f:cf:07:07:60:af:31:23:f0:09:54:53:6a:43:52:
62:2e:bf:30:5b:4e:18:3b:cc:47:df:87:52:c7:19:
92:55:31:7f:0a:8f:a4:2e:24:e9:f0:69:74:6a:aa:
dd:4f:ca:6e:47:d4:bc:cf:54:ff:67:36:03:ec:17:
b6:5f:f3:fb:b3:9c:78:01:bd:bc:f5:46:61:27:21:
88:a0:f4:29:08:6a:85:4c:f9:41:e4:fc:31:6d:fb:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:22:95:03:0D:CF:99:14:52:86:9D:B0:12:2B:3F:63:7A:D4:DC
X509v3 Authority Key Identifier:
keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/X24ilQMNz5kUUoadsBIrP2N61Nw.roa
sbgp-ipAddrBlock: critical
IPv4:
175.28.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:37:fb:cb:8d:ab:a0:98:0a:1c:d6:89:96:7c:0e:d0:7b:76:
3b:f1:9d:67:07:ad:4b:49:42:a8:78:f7:61:ac:14:da:46:37:
3a:0a:08:81:a4:b3:ab:ed:61:9d:df:05:85:7a:d1:63:86:45:
12:50:9c:1a:26:68:a5:20:fb:73:b2:f4:23:4e:0a:69:ae:13:
69:86:8d:5b:80:2c:27:36:48:61:d7:1c:04:cb:a0:e3:e9:57:
22:b1:14:4d:f2:16:6f:2d:b3:c0:2b:d7:c0:25:93:c0:7d:eb:
63:76:fb:85:44:48:05:38:4f:e2:66:8e:74:68:b2:e2:36:c4:
f2:f1:61:d3:a2:09:b7:54:75:8b:b9:2c:37:94:1d:73:42:3d:
c8:c7:35:e7:f4:27:0e:43:32:e3:35:86:49:65:4d:98:b9:30:
96:84:4d:2d:19:b7:12:02:87:ab:84:7c:12:be:55:dc:aa:34:
bb:19:9e:c6:59:b2:a5:84:30:72:43:a9:72:d5:27:a0:d7:c7:
71:d8:a3:26:c7:f8:eb:c3:6b:5f:99:07:e0:1e:32:72:c2:e9:
96:61:0f:77:2a:1f:e0:c3:f0:9c:18:31:6e:46:eb:47:1d:a9:
98:d9:0b:fb:4c:41:8f:29:70:52:e0:fc:ca:cd:db:9c:3c:e4:
05:f6:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:23:34 2026 by rpki-client