
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/UNn8S_85DxjLfx7QD-xHCYIh3mg.roa
File: UNn8S_85DxjLfx7QD-xHCYIh3mg.roa (raw, json)
Hash identifier: gKiat21HThYlDj2Q+gLOCtc0Qj4gxJTEnbD7ZusbNsw=
Subject key identifier: 50:D9:FC:4B:FF:39:0F:18:CB:7F:1E:D0:0F:EC:47:09:82:21:DE:68
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: D1
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/UNn8S_85DxjLfx7QD-xHCYIh3mg.roa
Signing time: Wed 14 Oct 2026 00:06:13 +0000
ROA not before: Wed 14 Oct 2026 00:06:13 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 9622
IP address blocks: 211.125.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Oct 14 00:06:13 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=50D9FC4BFF390F18CB7F1ED00FEC47098221DE68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:7e:98:cb:dd:67:cb:5f:ca:f1:28:a0:d5:
80:7d:a9:c6:20:15:cb:70:8d:45:07:33:f9:df:f2:
b1:d2:19:dd:48:d3:7b:3d:a2:14:83:95:f2:a6:45:
1b:e1:2b:d8:26:5b:2a:5e:26:93:ef:a1:a5:9d:4c:
b1:01:da:c6:e0:ec:96:b7:92:72:12:c5:e8:b6:17:
c0:ca:7e:fe:05:6e:cc:37:cf:d2:d8:70:fb:2b:25:
b4:6d:30:65:29:21:bb:bc:64:a7:bb:5d:8f:b7:5a:
81:5c:f3:8b:2d:8d:6d:2e:d9:fb:ea:72:f6:5a:80:
0a:22:25:8f:69:31:c5:ca:51:22:ea:7f:5f:34:e2:
ec:c2:51:fc:32:36:ba:0e:b3:ff:9d:18:1c:4c:42:
82:c2:74:fd:e0:70:79:99:c0:0b:4a:71:6f:81:e3:
e9:1d:32:28:de:ce:87:f8:dd:bf:b1:10:c5:c4:af:
d9:fc:75:43:32:1f:cd:9e:e6:c4:fa:8a:9d:08:bb:
74:5e:db:f8:1d:04:e5:1c:98:89:e9:d6:85:95:15:
22:aa:1e:c6:52:60:49:0f:a3:ee:b4:2d:00:08:fa:
5e:52:b8:90:03:59:0e:47:6a:24:cc:99:af:f5:f2:
48:bc:18:a9:7f:da:a2:86:2a:d1:66:a0:5e:03:ed:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:FC:4B:FF:39:0F:18:CB:7F:1E:D0:0F:EC:47:09:82:21:DE:68
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/UNn8S_85DxjLfx7QD-xHCYIh3mg.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.109.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4b:61:9a:1c:86:14:b0:99:c8:56:a5:3e:73:ab:27:2c:aa:
44:9f:13:f9:4f:e9:d1:d0:42:f3:46:50:30:60:c0:56:a1:c9:
d5:e5:d5:62:62:f4:a0:13:ba:e1:ba:c2:20:a0:8e:4f:33:a8:
1a:ac:a4:d4:76:1a:c9:b5:52:46:cb:c2:58:0f:0e:c0:8e:5b:
b0:2e:08:9c:2a:bd:3b:f4:8b:ea:50:f6:8e:3a:71:cf:f9:02:
f5:38:ad:d5:e7:50:e4:7b:92:ce:1e:52:6d:e8:6b:c6:0e:d1:
fd:2b:57:c9:ac:01:45:2d:12:5a:c4:42:e3:1e:18:54:b1:92:
9d:63:8c:a8:7c:19:08:52:98:ee:7b:a7:e5:09:69:19:d8:47:
a6:ba:59:d1:ca:ea:11:94:ad:da:22:58:74:75:cb:3e:00:a5:
e6:1b:23:97:36:d2:23:f0:5e:54:d4:a3:e1:80:70:fd:d6:5b:
59:30:21:b3:f9:4f:9d:7b:0b:4c:bd:d8:29:fd:e7:7f:00:4d:
ad:ff:37:57:f3:87:e1:de:ba:b6:fd:96:f7:d4:6b:f8:c9:62:
ae:16:6a:8d:9a:98:35:af:24:0c:15:58:9e:9c:55:75:40:07:
f0:d8:6f:e1:ff:f9:94:85:d1:f8:61:0e:b6:16:0c:fa:9b:80:
5b:48:aa:64
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw
MDA2MTNaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUwRDlGQzRCRkYzOTBG
MThDQjdGMUVEMDBGRUM0NzA5ODIyMURFNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7j36Yy91ny1/K8Sig1YB9qcYgFctwjUUHM/nf8rHSGd1I03s9
ohSDlfKmRRvhK9gmWypeJpPvoaWdTLEB2sbg7Ja3knISxei2F8DKfv4Fbsw3z9LY
cPsrJbRtMGUpIbu8ZKe7XY+3WoFc84stjW0u2fvqcvZagAoiJY9pMcXKUSLqf180
4uzCUfwyNroOs/+dGBxMQoLCdP3gcHmZwAtKcW+B4+kdMijezof43b+xEMXEr9n8
dUMyH82e5sT6ip0Iu3Re2/gdBOUcmInp1oWVFSKqHsZSYEkPo+60LQAI+l5SuJAD
WQ5HaiTMma/18ki8GKl/2qKGKtFmoF4D7d0zAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUUNn8S/85DxjLfx7QD+xHCYIh3mgwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL1VObjhTXzg1RHhqTGZ4N1FELXhIQ1lJaDNtZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfW0wDQYJKoZIhvcNAQELBQADggEB
AHJLYZochhSwmchWpT5zqycsqkSfE/lP6dHQQvNGUDBgwFahydXl1WJi9KATuuG6
wiCgjk8zqBqspNR2Gsm1UkbLwlgPDsCOW7AuCJwqvTv0i+pQ9o46cc/5AvU4rdXn
UOR7ks4eUm3oa8YO0f0rV8msAUUtElrEQuMeGFSxkp1jjKh8GQhSmO57p+UJaRnY
R6a6WdHK6hGUrdoiWHR1yz4ApeYbI5c20iPwXlTUo+GAcP3WW1kwIbP5T517C0y9
2Cn9538ATa3/N1fzh+Heurb9lvfUa/jJYq4Wao2amDWvJAwVWJ6cVXVAB/DYb+H/
+ZSF0fhhDrYWDPqbgFtIqmQ=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:50 2026 by rpki-client