
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/nfZSjPrWZY141zFSaoO8POHSXv4.roa
File: nfZSjPrWZY141zFSaoO8POHSXv4.roa (raw, json)
Hash identifier: VAL1+BMFWBpR4t54a1qphzSUB84y+2asIyNmN5Nw938=
Subject key identifier: 9D:F6:52:8C:FA:D6:65:8D:78:D7:31:52:6A:83:BC:3C:E1:D2:5E:FE
Certificate issuer: /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial: 6F
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/nfZSjPrWZY141zFSaoO8POHSXv4.roa
Signing time: Sun 01 Feb 2026 01:32:29 +0000
ROA not before: Sun 01 Feb 2026 01:32:29 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 63789
IP address blocks: 202.9.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Feb 2026 12:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Validity
Not Before: Feb 1 01:32:29 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=9DF6528CFAD6658D78D731526A83BC3CE1D25EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:b4:82:17:21:e5:09:5b:c3:22:7a:d2:ce:
f7:9a:17:b5:e7:d0:d8:53:eb:4e:4c:10:29:ad:46:
9e:7f:dc:dd:a1:5a:7a:e1:db:24:86:f4:39:0e:47:
75:b0:75:f7:b4:a5:21:57:ce:4e:64:d2:1c:b2:42:
65:3c:18:04:89:0a:d4:c1:20:b4:87:c0:12:17:84:
88:3b:8b:b0:f7:7f:49:39:13:7c:7b:24:d6:87:c9:
40:b5:b5:da:2d:17:2a:af:c7:e5:7c:c5:70:8b:60:
09:6b:e3:45:4e:ea:23:1b:d4:ce:19:5e:ec:16:bd:
60:a1:e1:3e:6c:44:2f:bd:e2:72:1e:12:a9:cd:84:
57:2f:38:f3:1c:ff:80:48:a2:7f:c3:3a:0f:69:41:
00:b7:b3:85:88:cf:ae:ce:c6:00:54:d8:f0:0d:4b:
31:fe:ec:4b:28:ae:e8:86:b3:11:5b:6a:07:bc:8e:
02:45:c6:cb:4e:ce:f7:81:3b:27:b2:e3:38:32:bc:
fe:ab:11:22:a0:e2:99:8b:8a:74:cc:9f:8e:fd:22:
0b:f8:47:00:c9:3a:65:aa:8b:fb:8c:b6:ae:b0:dc:
00:6d:ee:2f:81:4d:c8:bf:0c:ca:9e:0d:9b:11:a9:
45:00:ab:07:e0:e0:f8:91:28:58:7c:87:ab:ab:3c:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F6:52:8C:FA:D6:65:8D:78:D7:31:52:6A:83:BC:3C:E1:D2:5E:FE
X509v3 Authority Key Identifier:
keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/nfZSjPrWZY141zFSaoO8POHSXv4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.9.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:7d:43:98:ce:f4:f3:2c:91:4a:ec:f0:d2:b7:5d:cd:b0:5e:
fd:9c:85:17:6b:63:0f:f7:59:d8:ae:de:f2:f2:b3:7c:b3:9e:
3c:31:ff:dd:a2:1a:20:1d:25:2f:db:2d:7d:2a:1c:79:83:06:
39:e3:19:49:fe:40:4f:11:e2:8c:f0:a3:c8:5f:ce:d4:c9:ba:
5b:83:97:dd:51:4c:99:84:b2:8e:26:a1:37:89:6f:7a:a9:d7:
89:9e:45:72:ae:ca:39:f2:9e:09:34:aa:fd:7b:a6:24:5a:e2:
32:a2:a7:b1:49:d5:50:93:67:52:0d:25:79:e4:d7:4f:b5:d7:
22:e7:76:40:12:71:89:09:76:39:9e:9b:31:9d:c4:f7:78:b8:
a1:4a:bc:16:32:09:ea:46:cb:fc:76:76:89:56:00:26:ec:11:
df:7f:cb:62:76:28:e4:39:2a:d6:23:4c:be:6a:6d:5d:c4:84:
27:6f:8d:02:d0:50:fa:b9:dc:18:b9:39:d9:62:0c:75:ad:1b:
0a:29:52:57:9f:48:80:ce:ef:69:eb:eb:52:79:08:02:05:af:
a5:ee:88:49:bb:4b:64:f5:0c:b4:f1:71:e8:ff:84:17:24:00:
a2:0c:4d:2d:12:4e:03:e2:ef:36:ca:b7:de:5f:af:20:7c:43:
13:91:ff:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:01 2026 by rpki-client