
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/oRtssDS0yREve-u9rnxH7QicrQg.roa
File: oRtssDS0yREve-u9rnxH7QicrQg.roa (raw, json)
Hash identifier: uEnpAk78zyOd4Cgj3Ab/qudobveKpc1fncmwShjXgtI=
Subject key identifier: A1:1B:6C:B0:34:B4:C9:11:2F:7B:EB:BD:AE:7C:47:ED:08:9C:AD:08
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: D7
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/oRtssDS0yREve-u9rnxH7QicrQg.roa
Signing time: Wed 14 Oct 2026 00:10:29 +0000
ROA not before: Wed 14 Oct 2026 00:10:29 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 9622
IP address blocks: 211.125.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 13:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215 (0xd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Oct 14 00:10:29 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=A11B6CB034B4C9112F7BEBBDAE7C47ED089CAD08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:50:1e:e2:9f:55:ac:2b:1c:54:ae:b4:29:
ea:f8:23:5c:22:03:31:b1:e6:c0:88:3c:a6:f5:ef:
ae:eb:67:e2:05:d5:4c:80:ec:32:00:b7:7b:c2:cc:
43:3f:bd:97:b1:1c:82:1c:25:2e:f3:07:96:a7:73:
33:a0:56:32:86:95:b2:23:b1:71:8d:d6:7e:ef:39:
a9:fe:df:5e:e0:4c:db:d6:c2:60:3a:3a:46:77:34:
35:44:83:a0:6f:91:2e:e7:9c:a4:11:c8:c1:9b:d5:
ba:51:19:ef:e1:f9:98:f9:83:1a:23:93:f0:ad:68:
dc:8e:e0:64:90:0c:46:dc:ca:5a:d2:27:40:ba:44:
e3:4a:a2:70:4d:7f:8c:64:d3:f9:fa:34:42:ec:22:
c3:c9:e1:d1:e2:9f:dd:4d:ea:9b:24:ed:84:a2:78:
7f:17:31:60:0d:18:8a:4d:c3:de:3a:86:2e:af:7a:
40:d1:bf:29:41:a6:f2:b7:90:64:a3:51:59:76:7f:
22:0c:37:a7:42:ec:76:ef:f4:a7:69:50:8c:42:0e:
39:a2:b1:5b:06:44:7c:6e:3c:ef:a7:78:86:4c:4a:
7a:36:bb:49:cd:11:6a:e5:07:79:80:3f:51:2b:47:
d2:4e:b8:bb:8b:2d:96:f7:d8:0b:57:6b:e3:24:02:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1B:6C:B0:34:B4:C9:11:2F:7B:EB:BD:AE:7C:47:ED:08:9C:AD:08
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/oRtssDS0yREve-u9rnxH7QicrQg.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.117.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e8:8f:cf:ea:e0:ab:fe:ae:8c:64:02:7f:f1:d3:1e:42:0d:
82:78:23:80:84:8d:3d:69:fa:0f:30:9a:ce:66:90:22:f7:3d:
47:15:3b:dc:e8:f9:e6:06:69:96:24:b1:92:53:b4:03:43:d4:
c7:51:74:a1:71:30:89:3d:13:ee:bb:02:b4:1d:e0:2e:20:94:
c5:ec:2f:25:83:a1:26:2f:12:2d:07:ed:f5:17:1a:8b:a7:02:
ac:4a:54:1d:86:73:b5:aa:19:d5:1b:0b:57:b2:aa:ff:78:1f:
10:a3:b5:b1:b0:24:d0:3f:7e:7b:5a:0b:b1:1d:27:ec:95:19:
88:4d:f1:cd:45:e5:ee:a9:c6:6c:22:43:63:68:8d:d5:db:9e:
fd:9d:4d:41:bf:e0:91:c2:1f:58:ce:fe:44:30:c6:61:30:c2:
4f:18:85:39:a0:b0:f5:69:e7:45:48:b8:b9:5a:25:4a:27:bf:
be:ad:b9:ab:5a:f2:8d:ad:d0:61:ed:8c:63:37:18:99:d2:bf:
38:8b:e5:ce:c5:aa:6d:3e:77:b5:de:66:11:03:57:6b:7d:af:
f1:c0:52:55:c4:5e:3d:7e:0a:35:01:22:81:cf:84:b0:56:04:
8b:f6:c1:a9:15:bf:ed:8d:1d:8b:e6:34:a2:f2:a3:78:7d:31:
8d:c7:49:c6
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjEwMTQw
MDEwMjlaFw0yNzA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEExMUI2Q0IwMzRCNEM5
MTEyRjdCRUJCREFFN0M0N0VEMDg5Q0FEMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO1lAe4p9VrCscVK60Ker4I1wiAzGx5sCIPKb1767rZ+IF1UyA
7DIAt3vCzEM/vZexHIIcJS7zB5anczOgVjKGlbIjsXGN1n7vOan+317gTNvWwmA6
OkZ3NDVEg6BvkS7nnKQRyMGb1bpRGe/h+Zj5gxojk/CtaNyO4GSQDEbcylrSJ0C6
RONKonBNf4xk0/n6NELsIsPJ4dHin91N6psk7YSieH8XMWANGIpNw946hi6vekDR
vylBpvK3kGSjUVl2fyIMN6dC7Hbv9KdpUIxCDjmisVsGRHxuPO+neIZMSno2u0nN
EWrlB3mAP1ErR9JOuLuLLZb32AtXa+MkAtGvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUoRtssDS0yREve+u9rnxH7QicrQgwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL29SdHNzRFMweVJFdmUtdTlybnhIN1FpY3JRZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTfXUwDQYJKoZIhvcNAQELBQADggEB
AGToj8/q4Kv+roxkAn/x0x5CDYJ4I4CEjT1p+g8wms5mkCL3PUcVO9zo+eYGaZYk
sZJTtAND1MdRdKFxMIk9E+67ArQd4C4glMXsLyWDoSYvEi0H7fUXGounAqxKVB2G
c7WqGdUbC1eyqv94HxCjtbGwJNA/fntaC7EdJ+yVGYhN8c1F5e6pxmwiQ2NojdXb
nv2dTUG/4JHCH1jO/kQwxmEwwk8YhTmgsPVp50VIuLlaJUonv76tuata8o2t0GHt
jGM3GJnSvziL5c7Fqm0+d7XeZhEDV2t9r/HAUlXEXj1+CjUBIoHPhLBWBIv2wakV
v+2NHYvmNKLyo3h9MY3HScY=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:57 2026 by rpki-client