
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/nxMI-SwNc1UMckHQJmHCkHdXpK8.roa
File: nxMI-SwNc1UMckHQJmHCkHdXpK8.roa (raw, json)
Hash identifier: eEpJNPea5PJznzekdUigwO5GgX7BdirMME97NNZh4ps=
Subject key identifier: 9F:13:08:F9:2C:0D:73:55:0C:72:41:D0:26:61:C2:90:77:57:A4:AF
Certificate issuer: /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial: B7
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/nxMI-SwNc1UMckHQJmHCkHdXpK8.roa
Signing time: Tue 16 Jun 2026 04:35:49 +0000
ROA not before: Tue 16 Jun 2026 04:35:49 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 9621
IP address blocks: 175.179.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 08:51:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Validity
Not Before: Jun 16 04:35:49 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=9F1308F92C0D73550C7241D02661C2907757A4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:f2:04:87:98:50:96:04:44:d0:7b:38:b5:
b1:1c:b5:2a:20:ba:2e:6c:73:c1:fd:04:4f:b2:ae:
11:7d:d0:c7:e1:d9:25:00:d0:03:10:a9:b3:bf:86:
96:6a:dd:73:51:0e:51:7d:88:8c:69:0e:fb:bb:a2:
52:50:7a:90:fa:1f:aa:48:41:f3:53:12:38:93:2e:
14:87:7f:26:bd:06:36:78:77:d1:32:77:1b:01:a2:
70:77:67:80:29:63:ad:bd:c2:56:16:d2:6e:69:03:
f2:6e:c6:da:f5:7a:e1:9b:ca:9c:bd:a7:51:88:ab:
58:aa:8b:12:93:25:49:74:de:14:40:f8:1c:ba:44:
a2:64:17:8a:36:a9:e7:f5:4e:3c:ea:51:b5:41:e2:
1c:8f:32:d6:19:1b:eb:dd:c2:a1:5c:3d:0d:7f:1d:
a3:9b:26:fa:e0:f6:12:85:b4:e8:21:55:c7:fc:db:
ce:18:18:67:2c:6c:5c:55:49:d3:d9:8c:23:15:c1:
8d:e8:2e:d1:05:1e:7e:da:a6:03:71:e6:72:36:dc:
94:86:ab:4f:ff:89:3a:42:78:02:cf:9e:71:a4:71:
07:59:59:94:1c:f8:9f:f1:04:2a:42:02:68:32:89:
0d:ab:8f:e5:b7:0e:62:02:15:15:bd:06:82:0e:43:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:13:08:F9:2C:0D:73:55:0C:72:41:D0:26:61:C2:90:77:57:A4:AF
X509v3 Authority Key Identifier:
keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/nxMI-SwNc1UMckHQJmHCkHdXpK8.roa
sbgp-ipAddrBlock: critical
IPv4:
175.179.96.0/19
Signature Algorithm: sha256WithRSAEncryption
05:d5:c0:98:8b:9b:97:8b:b9:15:f6:68:d1:7e:83:06:60:16:
4e:e3:fa:b5:f6:86:21:25:3e:84:ba:ae:97:54:2d:8e:34:20:
e7:d2:9a:86:4f:90:d8:a1:97:28:5c:64:37:eb:2e:fc:6a:38:
2f:63:8b:3b:a2:12:cc:62:19:b9:8e:1f:8f:f6:c6:c6:b2:2e:
fc:38:d5:9d:dc:ca:58:13:a2:2b:c9:73:db:4c:7b:76:fd:53:
ff:6f:18:5a:fc:93:b5:2b:b3:be:76:b5:8f:3b:f0:5b:e8:80:
96:08:82:10:cb:7d:a5:6a:6e:0b:6a:99:00:23:02:cd:49:fb:
3f:f5:eb:71:7a:79:47:f8:78:10:aa:c0:45:a8:c7:de:ba:86:
b1:88:24:74:74:4a:10:d5:34:06:f4:8d:b1:07:21:3b:7e:1c:
24:73:32:e2:ba:63:9d:3b:76:10:d8:ee:fd:26:58:84:80:b1:
99:f7:59:88:d8:b5:07:97:ac:75:49:74:75:a3:53:08:54:ee:
de:53:8e:12:0e:99:d7:53:43:78:b2:0f:e6:4f:f5:80:c4:9c:
4f:54:30:9d:ab:47:e3:5f:be:97:14:f6:f7:11:31:a2:37:bc:
a5:f0:ed:9c:da:a9:db:62:4d:96:fd:37:b6:c2:59:e2:e1:55:
aa:2c:5f:f4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICALcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw
ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNjA2MTYw
NDM1NDlaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlGMTMwOEY5MkMwRDcz
NTUwQzcyNDFEMDI2NjFDMjkwNzc1N0E0QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYFvIEh5hQlgRE0Hs4tbEctSogui5sc8H9BE+yrhF90Mfh2SUA
0AMQqbO/hpZq3XNRDlF9iIxpDvu7olJQepD6H6pIQfNTEjiTLhSHfya9BjZ4d9Ey
dxsBonB3Z4ApY629wlYW0m5pA/Juxtr1euGbypy9p1GIq1iqixKTJUl03hRA+By6
RKJkF4o2qef1TjzqUbVB4hyPMtYZG+vdwqFcPQ1/HaObJvrg9hKFtOghVcf8284Y
GGcsbFxVSdPZjCMVwY3oLtEFHn7apgNx5nI23JSGq0//iTpCeALPnnGkcQdZWZQc
+J/xBCpCAmgyiQ2rj+W3DmICFRW9BoIOQ4bjAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUnxMI+SwNc1UMckHQJmHCkHdXpK8wHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk
5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4
UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvODk3L254TUktU3dOYzFVTWNrSFFKbUhDa0hkWHBLOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWvs2AwDQYJKoZIhvcNAQELBQADggEB
AAXVwJiLm5eLuRX2aNF+gwZgFk7j+rX2hiElPoS6rpdULY40IOfSmoZPkNihlyhc
ZDfrLvxqOC9jizuiEsxiGbmOH4/2xsayLvw41Z3cylgToivJc9tMe3b9U/9vGFr8
k7Urs752tY878FvogJYIghDLfaVqbgtqmQAjAs1J+z/163F6eUf4eBCqwEWox966
hrGIJHR0ShDVNAb0jbEHITt+HCRzMuK6Y507dhDY7v0mWISAsZn3WYjYtQeXrHVJ
dHWjUwhU7t5TjhIOmddTQ3iyD+ZP9YDEnE9UMJ2rR+NfvpcU9vcRMaI3vKXw7Zza
qdtiTZb9N7bCWeLhVaosX/Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:25 2026 by rpki-client