
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1888/Dd2ZETi0uVQ2RGHPKkVoTdFKMds.roa
File: Dd2ZETi0uVQ2RGHPKkVoTdFKMds.roa (raw, json)
Hash identifier: x3cNAAq1nMiVugq74V/rsNch+kD5omN0uAdrgJWQPzI=
Subject key identifier: 0D:DD:99:11:38:B4:B9:54:36:44:61:CF:2A:45:68:4D:D1:4A:31:DB
Certificate issuer: /CN=D08052B815E9BBCE392805BB892F431B28E9D33C
Certificate serial: 06
Authority key identifier: D0:80:52:B8:15:E9:BB:CE:39:28:05:BB:89:2F:43:1B:28:E9:D3:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0IBSuBXpu845KAW7iS9DGyjp0zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/Dd2ZETi0uVQ2RGHPKkVoTdFKMds.roa
Signing time: Tue 01 Sep 2026 03:11:33 +0000
ROA not before: Tue 01 Sep 2026 03:11:33 +0000
ROA not after: Sun 15 Aug 2027 01:30:02 +0000
asID: 0
IP address blocks: 192.218.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/0IBSuBXpu845KAW7iS9DGyjp0zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/0IBSuBXpu845KAW7iS9DGyjp0zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0IBSuBXpu845KAW7iS9DGyjp0zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D08052B815E9BBCE392805BB892F431B28E9D33C
Validity
Not Before: Sep 1 03:11:33 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=0DDD991138B4B954364461CF2A45684DD14A31DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:37:60:0d:fb:12:de:d8:65:f1:ec:ff:70:d7:
32:cc:03:01:e3:0d:32:a7:b4:32:31:d0:fe:ce:5f:
52:31:5e:78:a6:3f:08:e8:4c:66:98:bf:24:44:99:
00:bf:fd:d3:77:9f:61:8d:7a:7c:8f:9c:b2:bc:75:
13:e2:8a:05:cd:62:fa:81:51:59:61:a5:4d:a5:70:
23:3b:9a:57:08:9c:c0:c7:a3:db:99:48:0d:fd:e8:
97:de:71:04:6b:c1:60:d2:bb:25:4c:63:42:01:8c:
2a:bc:dd:42:a8:0c:9b:08:4e:8c:24:94:a7:15:4a:
10:02:94:08:b8:90:30:87:7a:8a:ef:30:41:a7:c9:
f6:7e:0a:ee:c7:02:d1:1b:22:3f:37:6d:c0:11:24:
39:b6:c4:71:3e:fd:2f:4b:01:df:0f:90:f4:0c:9a:
6d:46:49:a0:df:fc:5d:eb:1b:ce:92:d0:cc:48:71:
f6:95:e2:be:ba:ba:d5:54:43:77:ab:5a:3b:14:28:
34:d8:7f:10:f4:ed:99:d1:da:2b:6b:b3:63:29:91:
d3:43:9f:27:b0:29:68:9d:34:b8:b9:16:84:a5:98:
b5:2c:74:0e:48:90:a6:9e:9a:bf:d4:c9:e7:af:a7:
40:7a:c5:7a:92:7f:e0:c6:a6:e1:b4:4d:bc:11:e6:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DD:99:11:38:B4:B9:54:36:44:61:CF:2A:45:68:4D:D1:4A:31:DB
X509v3 Authority Key Identifier:
keyid:D0:80:52:B8:15:E9:BB:CE:39:28:05:BB:89:2F:43:1B:28:E9:D3:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/0IBSuBXpu845KAW7iS9DGyjp0zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0IBSuBXpu845KAW7iS9DGyjp0zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/Dd2ZETi0uVQ2RGHPKkVoTdFKMds.roa
sbgp-ipAddrBlock: critical
IPv4:
192.218.131.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4c:31:6e:aa:e3:c2:22:dc:d4:1b:c7:90:fd:79:e7:c3:e1:
44:03:f7:0a:08:7e:5f:b9:d2:71:6c:69:01:02:af:8f:25:84:
4b:1c:98:32:b3:77:db:d1:b5:40:12:c4:30:63:53:80:17:b9:
6c:ea:04:71:32:c2:56:ac:91:fc:d2:9f:48:13:61:66:a9:9c:
fd:de:a8:55:60:a4:a7:09:b9:eb:81:2a:5a:fe:e9:a7:6f:b2:
1e:2a:ee:84:08:36:c0:8c:4b:d9:af:f8:59:82:cb:11:37:9a:
9c:89:b4:5b:14:e7:54:4d:d5:20:fc:aa:4a:99:0a:51:4b:01:
5a:9c:2e:e7:41:05:d2:44:83:69:f6:ef:ea:d0:e6:a8:6f:62:
f5:d4:fc:9e:87:64:f5:a7:7b:57:73:a1:ef:99:e3:0e:41:d0:
7d:fb:c3:92:df:22:7b:1e:13:19:6e:51:17:d9:e0:fa:5f:0d:
93:b9:56:c6:f4:df:09:93:9b:38:7f:ce:d5:5a:b7:da:5b:43:
a9:92:84:53:f2:b6:f7:07:70:44:2c:08:e3:c2:2a:28:f4:41:
ac:9a:04:ab:13:53:d1:32:e0:d4:dd:d4:fb:c6:85:98:e8:87:
ec:e3:09:77:af:62:c1:d0:76:82:f8:60:d0:cb:fe:d1:46:72:
51:a3:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:33:33 2026 by rpki-client