
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/XPORWGl9Z-WRcXDTt4mzwGeFBXw.roa
File: XPORWGl9Z-WRcXDTt4mzwGeFBXw.roa (raw, json)
Hash identifier: xHayC2gLIB3mPQBdFa77ixXNjj7YsOxQIHX1XiIX5kY=
Subject key identifier: 5C:F3:91:58:69:7D:67:E5:91:71:70:D3:B7:89:B3:C0:67:85:05:7C
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0454
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XPORWGl9Z-WRcXDTt4mzwGeFBXw.roa
Signing time: Tue 31 Mar 2026 08:12:19 +0000
ROA not before: Tue 31 Mar 2026 08:12:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9617
IP address blocks: 61.115.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5CF39158697D67E5917170D3B789B3C06785057C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:8f:17:78:c9:b5:a2:f7:7f:d6:6d:46:82:
01:00:c5:e0:87:f2:22:b5:2f:89:9a:b3:1d:a5:36:
bd:45:7f:f4:e7:0e:3e:dc:c8:96:d5:bf:7b:85:1a:
f7:12:90:49:8d:67:44:d8:90:92:06:3d:79:1d:c8:
ed:9e:e2:8b:94:ea:0c:e1:ca:75:8c:8c:21:32:d8:
3a:9d:f0:0e:54:24:78:ae:00:71:4c:9f:a5:09:d9:
dd:ef:6c:ea:c0:00:f7:d4:ca:ef:78:35:24:53:fb:
9e:4d:cc:23:e9:2f:24:9e:2b:67:26:63:4d:14:5d:
8c:c3:56:79:d7:56:4b:78:bd:d9:81:b7:b7:78:fd:
91:f0:b4:c4:01:12:ef:a4:c4:de:d4:41:9e:3f:e4:
cf:87:25:63:c9:7b:0d:dd:f4:83:43:1f:8e:1f:b4:
c1:8c:86:97:bb:24:0b:01:ad:09:08:d6:93:4f:30:
5f:b6:f4:4b:06:bf:46:bb:7d:4b:a9:04:bb:f3:25:
67:06:9a:f9:1d:da:a2:2a:13:74:21:07:01:2c:7f:
fc:09:1f:f3:bc:22:75:6d:bc:70:a6:19:7f:ba:c2:
b0:b1:4f:b2:fc:a8:6f:b2:5c:e7:5a:2c:78:d8:32:
2f:1e:9a:93:a3:54:04:a7:e4:f8:5f:b7:d0:d3:7b:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F3:91:58:69:7D:67:E5:91:71:70:D3:B7:89:B3:C0:67:85:05:7C
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/XPORWGl9Z-WRcXDTt4mzwGeFBXw.roa
sbgp-ipAddrBlock: critical
IPv4:
61.115.128.0/18
Signature Algorithm: sha256WithRSAEncryption
54:e5:38:57:b1:64:cd:8a:11:84:d9:63:70:73:24:df:e5:0b:
24:34:80:89:95:71:a2:8e:01:bd:5b:2f:8c:23:1c:93:05:cb:
bf:7d:cb:e2:43:be:ee:ff:d4:21:0f:fc:2b:c8:9b:db:b5:2f:
40:85:44:b4:6c:35:80:41:ec:f0:a7:34:8e:81:04:b5:de:a6:
d6:65:e1:9d:77:18:77:37:e5:d8:02:56:3e:45:69:57:49:94:
f9:35:e7:02:9c:a2:90:03:21:21:28:48:fc:b7:c0:77:d3:4b:
22:b5:99:0d:d8:e0:ea:ca:15:0b:29:0d:ef:8c:c6:eb:94:32:
69:43:a7:ae:07:07:57:b1:93:b8:5c:d8:ae:a6:7d:cf:af:28:
7c:b0:6c:42:01:00:e2:1c:fe:3a:11:77:c3:47:e8:67:6e:5b:
86:0b:5e:e4:a3:e7:89:1c:a7:42:77:18:7e:5c:88:68:ed:f9:
8b:0b:d5:a1:52:52:12:a5:19:4b:95:c0:5c:80:71:97:02:16:
9e:3b:d8:a5:70:cd:7a:8a:03:42:f7:b9:fa:15:ad:36:64:a1:
01:b8:3a:70:6c:0b:1b:f5:61:be:47:d6:d2:8f:e8:7b:80:46:
91:b8:11:70:3e:b6:b8:7f:b5:01:d0:cc:7c:59:e6:69:2f:12:
1a:36:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:14 2026 by rpki-client