
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/FhWNMTmtJL5ymDEakqHa5KaGggk.roa
File: FhWNMTmtJL5ymDEakqHa5KaGggk.roa (raw, json)
Hash identifier: Wra14gF6lOq3ON4K/vAsF41qrkxNjN0OlcY1NFFZ+C4=
Subject key identifier: 16:15:8D:31:39:AD:24:BE:72:98:31:1A:92:A1:DA:E4:A6:86:82:09
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: DB
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/FhWNMTmtJL5ymDEakqHa5KaGggk.roa
Signing time: Wed 14 Oct 2026 00:10:31 +0000
ROA not before: Wed 14 Oct 2026 00:10:31 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 9622
IP address blocks: 211.125.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Oct 14 00:10:31 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=16158D3139AD24BE7298311A92A1DAE4A6868209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:9a:4c:e2:1d:34:9f:e9:7b:60:4a:cc:81:
1f:29:26:f3:f2:e3:8d:ca:4e:e5:2b:13:9a:50:3b:
23:29:bd:81:ac:81:66:e2:c0:9e:20:7e:e1:a6:e7:
49:e0:c4:cf:e4:76:6a:30:e9:b9:c5:89:56:ac:70:
78:97:b2:96:ce:5a:d6:b0:07:07:35:58:8d:09:cb:
8f:36:19:87:2a:5e:22:57:bb:d2:82:ff:1b:5b:5d:
a6:27:d2:3c:3c:57:50:f9:5f:85:7c:f3:b0:c4:1e:
00:5d:df:03:ce:54:5c:ba:2e:9d:47:a5:33:16:8e:
18:81:2a:51:27:c3:41:32:36:a9:f5:c0:24:58:0b:
7a:62:27:57:1f:d7:d7:e9:d5:ec:4b:c3:6e:fd:ae:
6f:ee:28:2d:f6:bd:28:5d:7b:56:16:42:b1:48:43:
18:a5:c2:c0:ea:29:e0:93:a2:27:c5:ca:eb:2d:c6:
8b:ae:b5:59:5c:72:c6:f2:85:78:54:e4:e3:44:d3:
53:a3:cb:6e:4e:7a:24:94:f4:e9:46:51:30:c8:cf:
5b:1f:cc:ec:c0:5e:b4:4e:76:f6:7e:7b:2f:f7:2f:
3b:33:4d:f4:31:61:89:0f:a1:06:68:79:96:3b:97:
7c:6a:68:dd:16:95:f6:0a:83:e1:f2:f9:6c:75:62:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:15:8D:31:39:AD:24:BE:72:98:31:1A:92:A1:DA:E4:A6:86:82:09
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/FhWNMTmtJL5ymDEakqHa5KaGggk.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.121.0/24
Signature Algorithm: sha256WithRSAEncryption
33:91:ca:96:d6:a4:6f:65:23:f4:f5:4a:77:72:44:6f:b7:4b:
3a:fc:65:b9:61:41:2b:a8:04:02:d7:67:3e:9c:2f:28:62:8e:
40:4a:fb:a6:2c:7a:ed:a9:6a:fa:c4:3b:67:c3:70:6a:d9:de:
ba:ad:27:ac:ec:2b:d2:d6:36:92:35:8e:70:63:40:20:2d:70:
79:d2:3d:3e:86:4c:00:de:d9:cf:52:f3:82:d8:18:96:1e:9f:
a0:72:4f:ca:89:39:0a:b9:31:dc:40:6d:45:f3:9c:8f:14:1c:
49:ae:7d:73:0c:61:e3:8b:58:c0:d2:7b:8e:46:99:d5:d2:58:
4f:c3:61:d6:84:ad:13:fe:94:77:16:bc:4d:22:50:03:4b:32:
65:76:72:7b:84:25:55:b6:10:27:0b:9e:18:02:ea:8c:ec:4a:
9f:00:cf:af:e1:b8:45:3c:9e:9c:df:81:0c:eb:00:6a:18:a2:
1f:a7:28:bb:c8:a7:ec:be:be:a1:dc:2f:f4:59:f7:7c:95:74:
3a:35:b5:90:b0:93:8a:3f:1d:7c:5d:2a:72:bc:c8:d7:89:d9:
9d:ae:f3:0b:32:82:f6:0f:da:26:9d:3a:7a:c9:48:43:e1:78:
df:f3:0e:4b:4f:23:db:d4:5f:b7:6d:2b:29:72:95:55:62:df:
4e:7d:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:53 2026 by rpki-client