
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/jwaoizYkqpdGp_acBX6mwwqyAPs.roa
File: jwaoizYkqpdGp_acBX6mwwqyAPs.roa (raw, json)
Hash identifier: xcNKrJHlgLWECgxUqXEZkvRVtspFt2B9cjK0gjIAB6U=
Subject key identifier: 8F:06:A8:8B:36:24:AA:97:46:A7:F6:9C:05:7E:A6:C3:0A:B2:00:FB
Certificate issuer: /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial: 52
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/jwaoizYkqpdGp_acBX6mwwqyAPs.roa
Signing time: Wed 25 Mar 2026 07:32:47 +0000
ROA not before: Wed 25 Mar 2026 07:32:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38628
IP address blocks: 126.209.240.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Validity
Not Before: Mar 25 07:32:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8F06A88B3624AA9746A7F69C057EA6C30AB200FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:9b:61:61:47:88:38:14:24:95:29:d6:53:
41:71:4d:7c:5c:0f:99:31:6b:03:08:e2:ba:6f:77:
76:79:c1:69:3f:d5:0f:51:ca:e1:42:34:37:00:d0:
c9:af:00:a2:88:bb:52:1d:35:49:76:9d:7a:08:73:
74:49:75:94:66:69:af:cc:aa:b0:d1:c6:89:4d:99:
cb:60:8d:8a:f9:32:99:c5:f7:ca:86:c6:01:9f:9c:
44:a4:99:db:f2:ee:0d:1f:e8:cd:f3:c6:04:54:25:
5c:93:ee:57:7e:ab:6d:63:8b:47:76:e1:91:26:1b:
87:a6:d1:ce:c2:c5:30:cd:c1:1d:2e:fd:3b:55:23:
1b:b7:26:43:81:18:9f:ce:bb:94:e9:a9:0d:0f:78:
6f:82:26:87:ed:84:b3:bf:e1:8e:c8:a4:0b:8a:08:
84:32:64:bf:88:e0:ce:26:97:57:fa:63:4f:d7:0a:
96:fe:5b:47:f9:71:d3:a4:27:39:56:5a:bf:66:b9:
d5:3c:ce:64:41:49:81:0d:2a:d5:e8:8e:c2:5f:7e:
cc:dc:24:12:b2:fb:6e:af:d2:5c:12:e4:13:6f:be:
80:ac:6b:4d:9b:29:9c:7c:2a:a1:26:56:ff:56:42:
a9:b7:87:3c:00:1f:e8:4e:8c:c0:3b:2b:6d:20:64:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:06:A8:8B:36:24:AA:97:46:A7:F6:9C:05:7E:A6:C3:0A:B2:00:FB
X509v3 Authority Key Identifier:
keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/jwaoizYkqpdGp_acBX6mwwqyAPs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
126.209.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:0c:36:e0:f9:68:60:4b:25:b9:78:fd:fe:7d:6a:32:e4:f2:
76:a1:22:33:26:36:d1:0e:ac:34:6f:ae:dc:70:f6:e8:f0:9b:
6d:00:64:1b:10:13:7f:39:2e:b2:b4:9a:90:3d:7d:00:b0:4d:
e9:05:a7:d9:af:e9:95:5a:15:08:bd:ca:62:f0:c5:e2:ef:18:
a2:99:b8:1a:2c:3f:9b:cb:f8:0b:52:44:20:b3:8d:03:ef:9b:
96:49:4b:7f:d1:ac:52:73:15:cb:11:12:ae:fd:85:65:bf:fa:
57:e6:4a:73:ce:9d:8b:df:ad:a1:f9:58:90:1f:c0:24:af:c7:
d9:82:15:a5:5f:d4:f8:cc:d1:67:3e:de:b2:28:e2:1d:c2:a8:
5f:ea:c8:3a:25:9f:36:e6:35:a7:4d:d1:90:01:4b:5b:44:fb:
c9:e7:3a:7b:06:cf:c8:a1:15:fb:7c:03:4f:a1:86:5f:c3:3c:
c6:b0:e8:6d:0c:c5:0f:1d:a0:fd:72:4a:dc:94:d5:cd:16:4c:
f4:ff:f9:f9:7e:6a:b1:43:f6:2f:30:b2:39:10:ea:82:ea:1b:
8a:28:24:a9:cc:1b:c3:6a:98:e9:7f:6c:5d:47:ac:84:2c:3f:
a5:5b:42:bb:68:cf:22:38:bf:18:a0:84:84:1e:60:03:55:bd:
ca:a9:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:55:35 2026 by rpki-client