
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/XKCQgrvacHKmYqYGZphKGxaY4ho.roa
File: XKCQgrvacHKmYqYGZphKGxaY4ho.roa (raw, json)
Hash identifier: UzhUuhRkCUdibMNgHetN4GAumLnIheojKbqWW8gL1iE=
Subject key identifier: 5C:A0:90:82:BB:DA:70:72:A6:62:A6:06:66:98:4A:1B:16:98:E2:1A
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: BE
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/XKCQgrvacHKmYqYGZphKGxaY4ho.roa
Signing time: Thu 24 Sep 2026 00:41:54 +0000
ROA not before: Thu 24 Sep 2026 00:41:54 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 58325
IP address blocks: 133.157.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Sep 24 00:41:54 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=5CA09082BBDA7072A662A60666984A1B1698E21A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:57:e3:65:93:4b:ea:49:7b:65:84:6a:08:0f:
cb:3e:b8:d8:56:6e:98:95:85:7d:14:d7:95:25:87:
0d:98:76:02:3f:8b:00:7e:c2:a6:88:d8:94:3f:cd:
b2:b1:d4:02:c8:d3:da:92:05:39:0e:66:eb:1d:51:
1e:f0:f1:41:95:17:c1:ab:9d:5e:3b:08:bf:d0:1c:
d1:c4:7b:22:1d:20:28:d4:65:04:6f:78:c3:15:48:
3f:a4:36:7a:81:26:bf:f3:97:8a:85:61:b1:b1:f1:
93:07:cb:0c:0a:a2:b7:96:a8:7c:ed:bd:6c:3c:01:
d9:97:14:7d:7b:97:e4:7c:dd:20:f9:40:de:e1:fa:
7f:a5:4f:95:dc:77:e5:95:72:1d:c9:49:c7:cb:91:
c3:db:9f:66:67:f9:e4:26:09:9c:e1:68:5b:3a:fe:
4e:cf:19:4f:13:87:f5:e2:68:ff:14:0f:2b:8e:b3:
8f:00:35:bd:c0:24:c6:22:1f:b1:2b:b9:ea:25:05:
70:15:0d:53:5b:2c:c1:8d:be:68:7b:d1:c8:3e:27:
9e:65:45:ed:30:1a:63:d6:a4:dc:4d:2e:69:34:f7:
01:63:ae:d6:9b:33:27:d8:48:6d:b4:99:dc:ae:78:
d5:84:32:7b:70:2a:62:1a:44:f3:11:64:0c:1e:4c:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:90:82:BB:DA:70:72:A6:62:A6:06:66:98:4A:1B:16:98:E2:1A
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/XKCQgrvacHKmYqYGZphKGxaY4ho.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.8.0/22
Signature Algorithm: sha256WithRSAEncryption
10:9c:c1:ea:30:e2:d9:b6:1a:b5:97:97:0a:02:02:87:13:f6:
63:bb:d0:54:27:06:c3:3f:19:f0:b3:27:20:81:ad:b7:ff:fb:
65:70:59:58:b6:87:ec:77:d5:d2:4d:b8:43:60:44:70:9d:8c:
c5:37:be:a1:31:d0:e6:f9:6d:31:23:5d:9c:2d:40:fa:78:36:
a2:41:b7:cb:a5:bb:cf:22:63:2c:1e:7e:00:46:25:c7:b0:86:
fc:ff:e2:fe:65:ba:29:5e:76:d8:02:41:87:da:0b:b5:de:3a:
8d:d5:f8:a7:b2:77:86:39:06:db:b1:e0:ec:27:25:1f:b6:ab:
c9:b6:6f:2c:6f:04:45:7c:55:8f:33:3c:4a:a2:28:a9:37:f7:
72:fc:a9:95:90:bd:2c:a3:c0:6e:b2:a4:53:61:ca:d1:ed:57:
ac:3d:7d:bf:77:db:10:62:2c:ef:98:b3:75:ef:33:09:38:f6:
bd:3d:8a:c9:00:19:83:2b:ab:a5:7b:7a:9f:85:81:25:78:af:
eb:6d:0b:97:a3:0c:b2:2e:a9:70:5d:05:32:0a:ba:84:21:05:
53:3c:ad:07:37:32:3d:85:8b:28:cd:db:f3:bb:27:30:b7:1c:
59:e0:50:c6:8b:ff:98:78:b0:62:10:a5:4c:03:72:ef:16:06:
bb:33:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:43:12 2026 by rpki-client