
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/XCXgO_Pgfvzr0Z2wnO1_iWpbmns.roa
File: XCXgO_Pgfvzr0Z2wnO1_iWpbmns.roa (raw, json)
Hash identifier: 7PuppYffdQLCtAgY00bufnptNdwnLHTyPTUMB19yEcI=
Subject key identifier: 5C:25:E0:3B:F3:E0:7E:FC:EB:D1:9D:B0:9C:ED:7F:89:6A:5B:9A:7B
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: D0
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XCXgO_Pgfvzr0Z2wnO1_iWpbmns.roa
Signing time: Tue 13 Oct 2026 23:58:25 +0000
ROA not before: Tue 13 Oct 2026 23:58:25 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 9622
IP address blocks: 211.125.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 13:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Oct 13 23:58:25 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=5C25E03BF3E07EFCEBD19DB09CED7F896A5B9A7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:1d:ae:ed:39:09:0f:95:29:83:db:fd:04:
29:37:2c:b6:01:e7:e4:21:a0:03:79:b4:eb:0d:40:
92:85:67:be:ec:7d:87:8b:68:31:10:22:eb:84:f5:
96:81:c9:e8:14:3e:d3:a4:8b:31:44:bb:6f:74:f3:
49:a3:f7:db:0d:8f:5c:f2:18:73:79:c1:c0:ac:b2:
92:c8:ff:66:61:c3:00:94:92:5d:37:f4:80:12:70:
12:57:b4:61:b0:d3:fc:27:bd:81:a0:ed:54:a3:f7:
c0:65:ef:98:e2:b1:15:36:63:57:21:11:18:cc:b8:
89:9a:bf:ed:62:a6:0a:2b:9f:bc:64:19:ec:e7:46:
0a:97:73:57:b0:bd:6f:c5:5a:19:62:b3:93:7e:ac:
4f:a9:43:31:e9:d0:48:99:1c:6f:23:af:56:cf:da:
2e:6a:bc:77:a5:39:c8:a6:d7:9f:f1:c3:da:74:f1:
6f:4a:3b:72:dc:6e:a6:0e:95:d8:b4:61:aa:1b:d8:
ac:20:19:c0:43:65:33:5c:0e:e7:51:66:50:89:29:
53:14:53:a0:2f:17:74:8b:df:66:cb:a2:fd:08:1f:
6b:b9:1f:2b:11:c7:8d:85:a1:70:fb:20:f4:2a:95:
78:b3:8a:5f:76:8b:e2:78:c0:ab:64:9f:04:9e:82:
81:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:25:E0:3B:F3:E0:7E:FC:EB:D1:9D:B0:9C:ED:7F:89:6A:5B:9A:7B
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XCXgO_Pgfvzr0Z2wnO1_iWpbmns.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.108.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a5:35:d1:38:ff:2f:0c:c1:05:d2:e1:d5:c8:be:65:4d:0f:
48:b6:46:e6:e2:b3:ab:5e:5a:e8:96:9c:5f:f9:dd:fc:0b:ee:
8f:63:8a:8e:87:4c:2b:96:c7:f6:df:17:7a:de:aa:63:84:20:
1b:60:16:d7:a8:f9:45:c1:ac:7b:76:69:34:09:c3:c1:13:ab:
83:4a:b8:b0:2e:de:fd:cb:b4:32:d1:63:ac:03:ac:93:12:ac:
14:68:df:6f:1f:46:ff:73:89:93:36:a8:61:17:54:22:85:ce:
da:aa:e1:20:73:5c:5c:fc:cf:9f:2d:fc:32:8e:0c:00:b1:d7:
ef:1d:a2:95:38:1e:b8:e6:f6:aa:02:28:a6:03:56:9c:b7:1b:
00:9c:72:e7:ee:c9:a3:29:5b:f4:31:42:51:2e:bc:9a:0b:83:
5f:6f:83:11:54:36:1b:d4:5d:05:b8:b5:36:55:17:d4:88:ec:
7d:72:b4:da:55:ab:f5:08:8e:5a:58:fe:c8:62:3c:91:3f:ee:
35:b5:b0:bf:7f:7b:a3:fa:6f:c6:d8:32:d2:42:14:86:d5:2d:
3a:b5:0b:af:ca:0c:97:7b:2a:20:2b:e0:ad:63:dd:2a:e0:26:
5b:f5:67:13:31:1a:ee:5e:cf:2e:46:e2:aa:67:ef:8e:7d:c3:
92:51:b2:22
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTMy
MzU4MjVaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDMjVFMDNCRjNFMDdF
RkNFQkQxOURCMDlDRUQ3Rjg5NkE1QjlBN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2dx2u7TkJD5Upg9v9BCk3LLYB5+QhoAN5tOsNQJKFZ77sfYeL
aDEQIuuE9ZaByegUPtOkizFEu29080mj99sNj1zyGHN5wcCsspLI/2ZhwwCUkl03
9IAScBJXtGGw0/wnvYGg7VSj98Bl75jisRU2Y1chERjMuImav+1ipgorn7xkGezn
RgqXc1ewvW/FWhlis5N+rE+pQzHp0EiZHG8jr1bP2i5qvHelOcim15/xw9p08W9K
O3LcbqYOldi0Yaob2KwgGcBDZTNcDudRZlCJKVMUU6AvF3SL32bLov0IH2u5HysR
x42FoXD7IPQqlXizil92i+J4wKtknwSegoGFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUXCXgO/Pgfvzr0Z2wnO1/iWpbmnswHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL1hDWGdPX1BnZnZ6cjBaMnduTzFfaVdwYm1ucy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfWwwDQYJKoZIhvcNAQELBQADggEB
ACOlNdE4/y8MwQXS4dXIvmVND0i2Rubis6teWuiWnF/53fwL7o9jio6HTCuWx/bf
F3reqmOEIBtgFteo+UXBrHt2aTQJw8ETq4NKuLAu3v3LtDLRY6wDrJMSrBRo328f
Rv9ziZM2qGEXVCKFztqq4SBzXFz8z58t/DKODACx1+8dopU4Hrjm9qoCKKYDVpy3
GwCccufuyaMpW/QxQlEuvJoLg19vgxFUNhvUXQW4tTZVF9SI7H1ytNpVq/UIjlpY
/shiPJE/7jW1sL9/e6P6b8bYMtJCFIbVLTq1C6/KDJd7KiAr4K1j3SrgJlv1ZxMx
Gu5ezy5G4qpn7459w5JRsiI=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:47 2026 by rpki-client