
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/2DN1_VR9xRCyVUt_CKpMtz-6ZKg.roa
File: 2DN1_VR9xRCyVUt_CKpMtz-6ZKg.roa (raw, json)
Hash identifier: rlEOD5QBBMnZ5RC5RXHrMYdvtWSO2r/CcSiRmx7lh7A=
Subject key identifier: D8:33:75:FD:54:7D:C5:10:B2:55:4B:7F:08:AA:4C:B7:3F:BA:64:A8
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 5B
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/2DN1_VR9xRCyVUt_CKpMtz-6ZKg.roa
Signing time: Thu 06 Aug 2026 02:31:06 +0000
ROA not before: Thu 06 Aug 2026 02:31:06 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 7529
IP address blocks: 61.124.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 6 02:31:06 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=D83375FD547DC510B2554B7F08AA4CB73FBA64A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:39:8c:5f:db:e1:03:91:9f:d3:09:e5:3c:
b5:ea:8a:df:4f:e9:df:c1:f4:bf:0a:d1:4b:90:c6:
24:23:1f:04:99:d8:04:16:af:aa:43:6c:3e:0f:55:
29:43:4f:86:de:4b:55:aa:74:56:60:69:aa:63:6f:
a0:a6:59:12:95:ad:b4:e5:75:96:c7:06:cf:7b:91:
f6:92:2f:76:6f:ca:08:59:e3:19:f1:af:8d:ae:db:
81:74:bd:8e:cc:7c:c6:61:ab:e7:a5:cd:1e:61:2f:
26:66:98:e4:87:9f:4b:f0:5f:92:d2:0b:81:bd:ae:
91:5f:0e:b0:27:b1:11:a0:14:4c:c9:d8:7c:07:88:
ea:29:be:b3:c8:cf:81:69:00:aa:54:a5:08:99:df:
a5:f3:e9:e3:c2:46:bb:34:08:b2:58:e8:ab:b7:92:
c7:f5:86:96:dd:4d:f1:b2:0a:87:e4:52:48:e7:ad:
7b:a7:87:1c:e0:68:ef:7a:24:36:d2:cd:99:13:64:
1d:80:9a:90:d7:5d:6f:28:d1:ab:c5:64:de:82:65:
19:11:5c:3b:aa:da:cd:d4:55:0f:5f:44:f0:6b:75:
33:f5:f0:01:b6:91:a9:c0:d3:cc:67:4a:05:cc:6e:
7d:01:87:2a:e8:10:d5:ff:40:ba:87:ba:4e:17:38:
cc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:33:75:FD:54:7D:C5:10:B2:55:4B:7F:08:AA:4C:B7:3F:BA:64:A8
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/2DN1_VR9xRCyVUt_CKpMtz-6ZKg.roa
sbgp-ipAddrBlock: critical
IPv4:
61.124.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ea:32:5d:98:a9:cd:21:f1:fb:5a:c5:21:a9:84:0f:ae:94:
72:c9:13:80:ca:c0:7b:2d:60:92:50:94:37:ce:c0:fd:bd:8d:
45:8c:8f:49:4d:f4:f1:26:d5:ad:f7:38:9e:8e:56:e0:99:ec:
8d:18:01:a7:f7:f8:35:67:5f:0e:40:0f:b2:07:b1:43:50:c7:
87:0e:d5:1a:17:fb:53:69:aa:70:c9:76:47:ba:21:34:54:d2:
ac:44:bc:88:c0:6a:1b:44:8a:62:f0:fe:72:9c:55:44:e4:73:
26:43:4d:ac:d0:c0:29:ba:c5:b2:aa:a6:41:35:a0:e0:d1:85:
96:27:b5:bf:6c:ea:8f:1a:99:4e:07:4c:5e:d9:04:e5:5d:c6:
f5:e2:33:4d:01:25:4d:7c:eb:6e:4b:bb:7d:07:e0:ac:eb:17:
66:e7:35:a4:89:ef:28:3b:9b:fb:7e:40:cf:94:08:bb:8d:0a:
57:3b:f0:56:fc:13:55:a8:97:96:80:37:52:08:ab:64:3b:f0:
57:48:1b:a1:f9:cf:38:a3:20:0e:cb:9e:c7:df:20:82:8c:89:
8b:c8:2e:8f:05:c5:46:72:42:dc:17:0a:35:6f:d4:31:9e:ae:
94:83:3b:24:0d:60:9a:67:e3:4f:b3:0f:d3:29:67:92:c8:3f:
7f:f6:0d:e2
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzEx
NzkyM0EzQUU2RDE0MTYwRjUwMzExMTVBRUQ0NENCNEQ4MjdEMB4XDTI2MDgwNjAy
MzEwNloXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoRDgzMzc1RkQ1NDdEQzUx
MEIyNTU0QjdGMDhBQTRDQjczRkJBNjRBODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMb2OYxf2+EDkZ/TCeU8teqK30/p38H0vwrRS5DGJCMfBJnYBBav
qkNsPg9VKUNPht5LVap0VmBpqmNvoKZZEpWttOV1lscGz3uR9pIvdm/KCFnjGfGv
ja7bgXS9jsx8xmGr56XNHmEvJmaY5IefS/BfktILgb2ukV8OsCexEaAUTMnYfAeI
6im+s8jPgWkAqlSlCJnfpfPp48JGuzQIsljoq7eSx/WGlt1N8bIKh+RSSOete6eH
HOBo73okNtLNmRNkHYCakNddbyjRq8Vk3oJlGRFcO6razdRVD19E8Gt1M/XwAbaR
qcDTzGdKBcxufQGHKugQ1f9Auoe6Thc4zNMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTYM3X9VH3FELJVS38Iqky3P7pkqDAfBgNVHSMEGDAWgBR8EXkjo65tFBYPUDER
Wu1Ey02CfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTkxL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10TmduMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZCRjVJNk91YlJRV0QxQXhFVnJ0Uk10
TmduMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xOTEvMkROMV9WUjl4UkN5VlV0X0NLcE10ei02WktnLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD18JjANBgkqhkiG9w0BAQsFAAOCAQEA
oOoyXZipzSHx+1rFIamED66UcskTgMrAey1gklCUN87A/b2NRYyPSU308SbVrfc4
no5W4JnsjRgBp/f4NWdfDkAPsgexQ1DHhw7VGhf7U2mqcMl2R7ohNFTSrES8iMBq
G0SKYvD+cpxVRORzJkNNrNDAKbrFsqqmQTWg4NGFlie1v2zqjxqZTgdMXtkE5V3G
9eIzTQElTXzrbku7fQfgrOsXZuc1pInvKDub+35Az5QIu40KVzvwVvwTVaiXloA3
UgirZDvwV0gbofnPOKMgDsuex98ggoyJi8gujwXFRnJC3BcKNW/UMZ6ulIM7JA1g
mmfjT7MP0ylnksg/f/YN4g==
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:26 2026 by rpki-client