
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XnFSg_YJJctXHQZOg8884luK7M4.roa
File: XnFSg_YJJctXHQZOg8884luK7M4.roa (raw, json)
Hash identifier: OID3ljebJ3tE1nbHNAjsEouvkPXpHgwvnOmFwWfT7jU=
Subject key identifier: 5E:71:52:83:F6:09:25:CB:57:1D:06:4E:83:CF:3C:E2:5B:8A:EC:CE
Certificate issuer: /CN=FD640F920FB630F59CE577B5640918AD72D8E933
Certificate serial: 02
Authority key identifier: FD:64:0F:92:0F:B6:30:F5:9C:E5:77:B5:64:09:18:AD:72:D8:E9:33
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XnFSg_YJJctXHQZOg8884luK7M4.roa
Signing time: Wed 04 Nov 2026 03:20:59 +0000
ROA not before: Wed 04 Nov 2026 03:20:59 +0000
ROA not after: Thu 04 Nov 2027 03:08:29 +0000
asID: 58791
IP address blocks: 157.7.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 04:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD640F920FB630F59CE577B5640918AD72D8E933
Validity
Not Before: Nov 4 03:20:59 2026 GMT
Not After : Nov 4 03:08:29 2027 GMT
Subject: CN=5E715283F60925CB571D064E83CF3CE25B8AECCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8f:50:f9:b4:5e:17:10:1b:8a:e4:40:3a:5b:
67:f9:2f:1e:e3:06:23:bb:66:4e:ce:71:b2:4b:4e:
81:f0:21:5c:54:1e:7d:2f:9a:56:65:80:d4:18:6a:
da:7b:67:2c:b3:9f:4b:e2:7d:ae:72:be:0f:48:65:
a5:33:2a:19:f1:63:6d:69:6f:7f:9c:00:c4:bf:58:
85:01:ca:77:9a:a7:b4:65:9a:c0:52:44:2f:ee:19:
59:61:ae:79:00:54:88:2f:02:fc:a3:84:f3:b7:02:
66:88:54:26:12:cf:e2:20:91:6b:39:1b:22:59:3f:
0c:8e:bd:2e:d1:c9:43:6e:f1:9e:2f:c0:33:6f:ab:
b6:93:e6:0b:f6:61:f7:c5:eb:c1:47:ed:34:87:d3:
57:86:45:6e:6e:6d:75:30:c1:a2:ea:f8:69:92:d4:
40:5e:29:a5:c8:aa:8c:43:90:70:28:fd:90:2d:7c:
7d:a8:a8:99:d0:c7:0a:60:9f:84:46:30:d5:28:a2:
c8:3d:3c:0e:3c:13:33:f9:1d:ca:8a:16:a2:6b:55:
e7:21:61:a9:b5:e9:c4:a5:3f:ef:55:54:d3:0b:ee:
b6:39:07:82:cf:33:cd:5a:04:ee:74:f7:43:c4:49:
83:e1:a1:a3:62:72:b4:6c:01:d0:25:c5:99:73:06:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:71:52:83:F6:09:25:CB:57:1D:06:4E:83:CF:3C:E2:5B:8A:EC:CE
X509v3 Authority Key Identifier:
keyid:FD:64:0F:92:0F:B6:30:F5:9C:E5:77:B5:64:09:18:AD:72:D8:E9:33
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XnFSg_YJJctXHQZOg8884luK7M4.roa
sbgp-ipAddrBlock: critical
IPv4:
157.7.120.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:e4:37:63:9f:67:80:2d:f1:97:ba:40:70:57:71:9f:08:7e:
f6:b0:bc:38:1f:29:ec:d4:c1:4a:07:f4:04:88:29:6f:02:0e:
9e:1f:c9:b5:fe:13:4d:3a:36:14:9e:ba:74:cc:5a:b7:5a:87:
8c:cd:d7:59:8e:55:cd:09:9c:2b:de:63:55:a2:c8:0a:3a:73:
6a:a6:9b:7b:09:e4:d8:df:4d:01:ef:ce:7b:0b:a8:ad:68:d6:
1d:dc:c6:6e:30:b3:75:1f:63:96:25:d7:c1:2a:bb:4a:e4:9a:
82:d9:cd:3b:7e:40:56:83:7b:12:13:f5:e9:a4:50:00:54:d1:
e2:51:bb:e2:37:ec:a1:a1:32:9f:06:ab:b5:30:79:af:e0:ef:
87:e6:88:1c:8d:19:3e:10:a4:c6:19:24:83:c4:c2:65:f7:ab:
f4:69:2e:8f:b0:25:fe:9b:2f:83:fa:0c:db:e7:63:ba:78:66:
06:cf:c6:e2:af:aa:1a:f6:ad:0f:7e:1a:9a:95:38:28:0a:ee:
9c:91:03:42:83:f5:25:9a:b5:39:25:78:dc:fe:5d:30:50:3c:
39:5d:82:af:30:4e:47:34:ea:48:aa:bf:16:60:34:a5:ce:d0:
5a:41:26:f9:66:e5:d2:67:4e:05:47:93:68:5f:49:16:a5:4e:
f7:6b:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:48:04 2026 by rpki-client