
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/l7iVe-vsiUpqBz-7gQnYfEMwM-g.roa
File: l7iVe-vsiUpqBz-7gQnYfEMwM-g.roa (raw, json)
Hash identifier: OMd/oMm+FXlHpxymSY6kpIzEvkUeheL7CSPz8XDQcCE=
Subject key identifier: 97:B8:95:7B:EB:EC:89:4A:6A:07:3F:BB:81:09:D8:7C:43:30:33:E8
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: D8
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/l7iVe-vsiUpqBz-7gQnYfEMwM-g.roa
Signing time: Wed 14 Oct 2026 00:10:29 +0000
ROA not before: Wed 14 Oct 2026 00:10:29 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 9622
IP address blocks: 211.125.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 15:06:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Oct 14 00:10:29 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=97B8957BEBEC894A6A073FBB8109D87C433033E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:e9:4b:0c:ec:c3:eb:ec:f2:eb:93:c2:2f:
58:46:98:e8:4d:fd:9c:91:ce:3a:e6:61:21:8b:5d:
be:c9:d4:1c:51:a0:f9:0c:60:ce:83:72:b5:3f:ed:
a2:6e:48:7c:67:fc:26:ce:26:f2:af:ee:fc:57:36:
7d:6b:ff:9b:ee:8c:6b:30:1a:63:93:42:dd:11:a1:
1c:32:d8:ab:25:f2:f4:74:a8:2a:ac:d9:ad:49:6b:
eb:87:aa:2e:3d:33:9f:46:3c:09:14:09:6e:2b:00:
d7:c6:4c:e2:3a:80:8d:23:1d:20:69:65:3d:cc:d3:
2f:c3:7a:1d:e6:9d:17:69:e5:2a:d7:cf:51:70:0b:
42:29:a0:04:63:8a:02:c4:ac:9e:a5:e6:94:5b:20:
9b:05:18:8d:c4:1e:36:c9:c3:d6:94:4d:a8:4d:c9:
b6:6f:8d:9b:0d:7f:6c:56:04:5e:89:55:10:4f:8c:
6c:4b:7a:16:9a:cf:31:ae:2b:07:82:7a:a6:cb:34:
e5:4f:5c:22:45:c7:26:54:ca:0a:f8:29:ae:bd:de:
b9:a2:46:e7:47:bb:10:7d:2e:4f:17:20:da:92:da:
77:23:56:ea:89:93:2a:91:8b:d8:dd:7f:d7:2b:45:
01:cd:12:1a:2d:97:d5:c1:64:29:5c:b0:3a:15:21:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:95:7B:EB:EC:89:4A:6A:07:3F:BB:81:09:D8:7C:43:30:33:E8
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/l7iVe-vsiUpqBz-7gQnYfEMwM-g.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.118.0/24
Signature Algorithm: sha256WithRSAEncryption
54:64:76:2c:d3:8c:2c:c8:73:2e:a3:e8:88:1b:10:27:e8:88:
da:cf:a0:7b:ca:74:2a:6e:d6:b2:de:3f:ef:05:29:e4:15:cd:
f2:0a:50:90:a5:28:39:b5:ab:eb:8e:57:d9:83:8c:2f:4a:47:
01:16:a9:92:2d:f8:4b:f5:a6:10:94:91:21:f0:54:2c:3f:f8:
23:b7:ef:ab:8a:58:30:19:eb:78:3a:6e:53:f9:84:c0:58:9d:
d7:8b:48:02:b6:1f:11:76:b0:f1:33:52:42:2b:7e:0a:31:d8:
1f:d8:0b:7a:f4:7a:e7:fb:14:ee:4c:be:bf:5e:ff:ec:59:22:
c4:0d:6b:4c:c4:4b:3e:c6:61:f5:d2:8d:b3:52:ed:fb:ab:b8:
28:16:bf:82:20:99:6f:22:ab:1d:ac:aa:05:31:da:a0:21:4b:
19:57:75:d5:fb:c2:a8:3f:19:0a:85:bb:ab:fd:71:c9:cf:2f:
c9:a3:1d:00:fe:4f:bf:26:0e:9a:bc:0c:0c:34:ba:f1:e6:58:
ea:55:b2:86:29:e1:b1:6c:08:af:bd:ef:86:47:a4:46:5e:d1:
ec:53:5b:33:ee:1c:67:d8:bb:b7:7d:a5:40:19:d4:7c:ab:69:
4f:6a:b6:37:05:e3:ec:8f:a0:9f:fd:41:a3:93:50:f1:07:33:
34:c5:a7:58
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw
MDEwMjlaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk3Qjg5NTdCRUJFQzg5
NEE2QTA3M0ZCQjgxMDlEODdDNDMzMDMzRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGCulLDOzD6+zy65PCL1hGmOhN/ZyRzjrmYSGLXb7J1BxRoPkM
YM6DcrU/7aJuSHxn/CbOJvKv7vxXNn1r/5vujGswGmOTQt0RoRwy2Ksl8vR0qCqs
2a1Ja+uHqi49M59GPAkUCW4rANfGTOI6gI0jHSBpZT3M0y/Deh3mnRdp5SrXz1Fw
C0IpoARjigLErJ6l5pRbIJsFGI3EHjbJw9aUTahNybZvjZsNf2xWBF6JVRBPjGxL
ehaazzGuKweCeqbLNOVPXCJFxyZUygr4Ka693rmiRudHuxB9Lk8XINqS2ncjVuqJ
kyqRi9jdf9crRQHNEhotl9XBZClcsDoVIW5fAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUl7iVe+vsiUpqBz+7gQnYfEMwM+gwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL2w3aVZlLXZzaVVwcUJ6LTdnUW5ZZkVNd00tZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfXYwDQYJKoZIhvcNAQELBQADggEB
AFRkdizTjCzIcy6j6IgbECfoiNrPoHvKdCpu1rLeP+8FKeQVzfIKUJClKDm1q+uO
V9mDjC9KRwEWqZIt+Ev1phCUkSHwVCw/+CO376uKWDAZ63g6blP5hMBYndeLSAK2
HxF2sPEzUkIrfgox2B/YC3r0euf7FO5Mvr9e/+xZIsQNa0zESz7GYfXSjbNS7fur
uCgWv4IgmW8iqx2sqgUx2qAhSxlXddX7wqg/GQqFu6v9ccnPL8mjHQD+T78mDpq8
DAw0uvHmWOpVsoYp4bFsCK+974ZHpEZe0exTWzPuHGfYu7d9pUAZ1HyraU9qtjcF
4+yPoJ/9QaOTUPEHMzTFp1g=
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:17 2026 by rpki-client