
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/wfYksi7fAdZeV8fta_xCv8qzZY8.roa
File: wfYksi7fAdZeV8fta_xCv8qzZY8.roa (raw, json)
Hash identifier: 7ftL/6O9GFn4m63pVIKfbKuWtsYtdGaZgYa4oHNGAEU=
Subject key identifier: C1:F6:24:B2:2E:DF:01:D6:5E:57:C7:ED:6B:FC:42:BF:CA:B3:65:8F
Certificate issuer: /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial: D4
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/wfYksi7fAdZeV8fta_xCv8qzZY8.roa
Signing time: Wed 14 Oct 2026 00:06:16 +0000
ROA not before: Wed 14 Oct 2026 00:06:16 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 9622
IP address blocks: 211.125.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 08:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Validity
Not Before: Oct 14 00:06:16 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=C1F624B22EDF01D65E57C7ED6BFC42BFCAB3658F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:c0:51:a7:46:34:16:ff:77:ce:c6:6b:72:
28:36:cc:33:e9:22:f7:7c:d1:bf:b2:a2:47:3d:a5:
93:42:10:7d:c7:dc:42:29:04:82:e7:81:ad:2f:49:
e5:c7:ea:11:99:69:8e:ea:f2:6d:b4:79:ac:69:ef:
33:0d:70:04:52:22:af:d0:56:94:14:58:86:bc:bc:
20:3f:ea:2e:19:41:0c:5b:4a:b7:d6:57:02:0f:47:
f2:20:1f:0f:8b:c3:79:02:d8:9c:4b:23:6e:65:5c:
86:48:55:3a:d1:29:88:c3:88:d7:f8:02:11:66:a7:
99:13:53:f3:71:89:45:b7:4a:0b:d0:a8:b8:7f:8f:
f9:e0:16:e8:54:a5:85:62:74:98:00:46:c3:94:50:
3e:b0:87:2a:a7:85:b5:ec:37:73:bf:5d:48:8a:89:
14:56:b6:a2:ca:5b:a3:bb:4d:3d:05:d7:61:9d:ec:
dd:a1:74:50:3b:ba:79:f6:33:69:35:6d:f2:da:ef:
8d:3b:5f:97:10:0a:93:f5:9a:33:9d:4f:39:0d:11:
bb:be:b7:d2:32:3a:98:ab:cf:3d:72:6a:6a:31:98:
10:db:94:75:a1:64:1c:e5:58:c0:77:18:2d:78:4b:
74:dd:ed:c6:23:f4:a0:1b:1e:5f:f4:ff:da:e4:5a:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F6:24:B2:2E:DF:01:D6:5E:57:C7:ED:6B:FC:42:BF:CA:B3:65:8F
X509v3 Authority Key Identifier:
keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/wfYksi7fAdZeV8fta_xCv8qzZY8.roa
sbgp-ipAddrBlock: critical
IPv4:
211.125.114.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c5:65:df:06:dc:ef:9c:20:a6:3b:2b:7e:7a:39:05:88:6b:
e1:ee:55:67:94:ef:d8:16:ec:67:4b:e2:6c:47:a4:71:7b:46:
2a:6a:70:dd:18:d2:74:e5:01:2a:27:e7:ad:55:f6:c3:d4:96:
3e:7a:9f:b0:36:72:96:af:cd:1f:69:08:88:84:fb:bd:9e:aa:
49:be:9a:6c:2d:58:a2:1f:aa:79:b1:3c:5b:48:87:61:28:05:
bf:e2:b8:bd:b2:26:0c:bc:01:c0:e5:75:51:5a:2b:bc:54:0f:
4a:59:0f:2a:8b:75:8c:38:e0:33:03:fe:10:24:96:17:f5:7c:
82:46:84:66:01:85:05:39:de:ee:a5:a7:c3:e7:e4:36:f7:0e:
2f:21:48:36:1b:3b:be:8e:10:9e:7a:19:4b:ee:7d:c8:5e:9d:
c2:8f:2b:81:da:2b:60:2e:4e:d5:c4:1e:66:73:50:18:34:f6:
9a:1c:a0:14:fa:7d:37:84:05:5e:5c:6a:3b:89:6d:6a:60:78:
87:82:0f:c2:6d:6f:35:90:dc:77:1a:f0:87:a1:9c:51:76:b9:
04:ec:68:d7:b9:d1:bd:b1:c7:c6:a4:85:f3:23:9a:06:01:75:
83:b6:7b:9e:81:2d:99:99:c5:1f:bd:7b:46:72:46:7c:fa:36:
b4:ef:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:53 2026 by rpki-client