
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/XMj0l86Feybh3HV2B7b0o429vlE.roa
File: XMj0l86Feybh3HV2B7b0o429vlE.roa (raw, json)
Hash identifier: M54mQMy9bkpTlLz6oQz10p3ZsXQsiQGP/llVmA/ENzs=
Subject key identifier: 5C:C8:F4:97:CE:85:7B:26:E1:DC:75:76:07:B6:F4:A3:8D:BD:BE:51
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 0D
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/XMj0l86Feybh3HV2B7b0o429vlE.roa
Signing time: Wed 25 Mar 2026 05:41:35 +0000
ROA not before: Wed 25 Mar 2026 05:41:35 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 61.205.96.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 25 05:41:35 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=5CC8F497CE857B26E1DC757607B6F4A38DBDBE51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:45:22:3c:e5:97:28:5e:73:fd:d1:c5:0c:75:
75:ef:9e:af:86:d4:0a:5a:23:98:46:c4:3e:12:e3:
c8:5e:af:2f:9b:a5:7e:8a:e3:16:a7:e9:86:6f:84:
5f:72:2f:ba:9f:8a:1d:37:1c:91:13:ec:cb:7b:7a:
97:fd:6d:95:78:0a:cc:bd:45:b2:9e:23:cc:63:14:
e7:d3:25:19:a4:fa:cc:56:53:48:63:be:ed:37:9d:
1b:93:d9:57:c2:81:17:be:66:1e:c3:1a:41:e5:a9:
8f:0d:95:61:85:8c:4e:07:87:a3:04:bd:21:ab:74:
f7:95:2e:21:f3:b3:58:ff:97:8b:15:28:c6:62:bf:
b5:3b:d4:a5:2b:4c:e7:49:cf:27:40:b9:3e:98:11:
cd:e9:ff:fc:80:91:10:b5:c2:61:98:46:34:1d:32:
f5:82:d1:d4:64:b7:6b:00:cd:94:a3:43:b8:26:2b:
27:af:52:78:a1:09:17:fc:af:17:73:06:c5:5a:a1:
a3:9d:47:83:9a:7c:d4:58:cb:29:c4:df:ec:e3:c3:
83:56:83:94:4c:c2:a8:c6:b0:d0:17:ed:c5:6c:79:
cc:3a:bc:63:7c:c0:32:ef:03:ea:57:94:62:a0:c2:
42:5f:14:e6:e9:e8:c6:e2:dc:9e:c8:a1:b9:20:ba:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:F4:97:CE:85:7B:26:E1:DC:75:76:07:B6:F4:A3:8D:BD:BE:51
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/XMj0l86Feybh3HV2B7b0o429vlE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.205.96.0/20
Signature Algorithm: sha256WithRSAEncryption
76:bb:08:ab:b7:13:55:00:6b:08:4b:ad:2e:39:8b:da:61:67:
a2:12:24:26:6c:d5:98:dc:ec:ab:52:43:57:7c:67:b5:09:76:
87:90:51:cb:3f:d2:d5:8d:e6:d9:7b:3a:0c:33:3a:39:1e:35:
c9:95:8c:79:80:18:e4:92:4f:a7:c1:c6:43:62:cf:7e:4d:e9:
7d:2b:56:b6:fa:ae:62:5f:de:6c:5a:41:a5:89:8c:62:3f:87:
6d:b3:c6:6e:70:3d:64:8d:d3:0f:8f:19:d2:87:4c:8c:f2:24:
29:dd:41:78:5a:3c:90:ae:8a:d6:50:6e:cd:e2:91:06:cb:9b:
b6:79:bb:b7:d8:c1:d0:f9:8e:54:e5:10:d4:b2:22:ff:72:54:
44:0d:9c:68:26:33:2a:da:54:2e:17:c5:ff:4b:a4:8d:66:84:
9a:76:e4:df:41:ff:a4:34:64:a0:1e:77:92:1c:ab:2c:dd:9b:
9a:73:4b:4f:87:a4:e2:3f:01:56:10:b1:17:6b:b2:8f:cc:db:
28:63:bf:2d:08:c3:85:1a:12:d7:15:cd:84:9c:df:05:61:35:
ff:0b:01:05:e2:de:01:84:1e:4c:67:44:f5:0b:cb:14:83:38:
01:50:7b:77:f9:44:4a:76:b9:f4:ce:77:37:ca:a4:5f:2f:65:
ff:2a:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:34 2026 by rpki-client