
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/0CpLcM9hKrFzgls81of_4CKDz4o.roa
File: 0CpLcM9hKrFzgls81of_4CKDz4o.roa (raw, json)
Hash identifier: d+CXawiaEeZfDc5G1vKy1kGjrVHoy7VVHdZxfRTT/HM=
Subject key identifier: D0:2A:4B:70:CF:61:2A:B1:73:82:5B:3C:D6:87:FF:E0:22:83:CF:8A
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 6D
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/0CpLcM9hKrFzgls81of_4CKDz4o.roa
Signing time: Sun 01 Feb 2026 01:32:27 +0000
ROA not before: Sun 01 Feb 2026 01:32:27 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 63789
IP address blocks: 202.9.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Feb 1 01:32:27 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=D02A4B70CF612AB173825B3CD687FFE02283CF8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:e9:bc:bb:c8:1e:9f:4c:fe:df:57:3c:98:
1d:22:55:54:76:34:17:b4:73:62:1c:27:ad:2e:cd:
b9:2d:f1:43:ce:dd:c7:1c:6a:48:c6:84:73:30:27:
0d:66:dc:b9:c2:fd:ee:b1:1d:f0:20:53:52:2d:e4:
f1:88:8b:9a:9c:11:f6:b1:6c:80:7a:5c:9d:ba:60:
95:bc:28:10:0d:bb:a4:ea:ff:61:78:91:e0:3d:8d:
cc:2e:51:9e:b7:81:99:31:94:ce:3b:9d:00:d0:ce:
a6:93:f5:cc:c4:0d:7e:30:62:0e:b5:d3:76:0b:97:
39:aa:22:f1:f9:fe:ec:45:b6:82:aa:fd:96:e3:fd:
0c:da:cd:79:3d:78:0a:8a:b9:e8:28:87:29:34:1e:
86:8b:19:fe:73:bf:13:76:59:e5:d9:18:89:a0:b8:
45:bd:10:78:86:fa:1c:70:01:62:d7:04:3b:6c:25:
5a:c4:af:85:4e:4c:60:1e:43:af:3f:61:15:3c:d2:
5a:23:dd:37:03:3b:8c:30:9f:59:41:70:ee:09:b3:
a5:89:c4:47:a8:e5:ff:cc:d5:9b:b8:72:1a:1c:14:
64:7a:0c:5b:ec:f1:00:8e:8e:92:e1:93:30:1c:0d:
52:60:59:53:93:ce:f3:5f:7e:d8:8d:28:ca:6b:e5:
79:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2A:4B:70:CF:61:2A:B1:73:82:5B:3C:D6:87:FF:E0:22:83:CF:8A
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/0CpLcM9hKrFzgls81of_4CKDz4o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.9.210.0/24
Signature Algorithm: sha256WithRSAEncryption
71:48:09:08:e4:c9:8c:0c:38:50:57:59:64:90:80:4f:10:af:
64:7a:0d:e9:30:fc:fa:29:2c:b3:5a:56:ff:ae:44:1e:dc:31:
eb:c5:ef:31:f2:72:e6:28:7f:9c:0a:1d:ef:ee:41:09:55:59:
97:ee:2f:c1:b6:18:cb:1f:31:82:c6:4f:29:46:dc:b0:93:ad:
d5:c6:8e:cf:78:61:78:13:6d:35:3d:24:97:55:66:f0:36:7c:
09:ca:0e:1b:b1:54:92:b5:52:1a:c4:9b:80:06:4a:ab:0d:1c:
40:a5:c9:52:ef:6d:37:75:45:ee:ee:62:91:4d:cc:8d:91:ed:
37:5c:3d:04:ef:69:9f:f1:9e:e1:d4:f0:0b:95:02:d2:87:01:
31:50:e9:7a:05:17:4e:b4:41:2e:88:40:30:9d:cc:84:0c:3c:
c9:e6:d0:ba:a8:56:b7:f0:34:08:fa:79:fe:59:16:58:00:99:
76:e4:07:8c:aa:b4:ce:ee:0a:82:54:70:a4:94:9b:d7:f0:a8:
14:e8:fd:5c:4a:c2:17:a0:db:ef:33:c5:38:5a:9c:09:d5:9f:
b7:d4:9d:f8:a3:c5:61:ce:eb:f6:05:f4:70:ba:42:9e:9e:49:
c5:c8:23:59:70:95:de:7b:e1:46:c2:19:ee:80:59:b9:57:32:
51:5f:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:16 2026 by rpki-client