
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/2ZMb8ihM0mYorgGeePfbnrTMFrg.roa
File: 2ZMb8ihM0mYorgGeePfbnrTMFrg.roa (raw, json)
Hash identifier: vdOCmk5K4GMi8kzRmbXmLQ0GejRu2QsQzN0b3QjegRk=
Subject key identifier: D9:93:1B:F2:28:4C:D2:66:28:AE:01:9E:78:F7:DB:9E:B4:CC:16:B8
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 47
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/2ZMb8ihM0mYorgGeePfbnrTMFrg.roa
Signing time: Wed 13 May 2026 04:36:21 +0000
ROA not before: Wed 13 May 2026 04:36:21 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 7529
IP address blocks: 210.229.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: May 13 04:36:21 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=D9931BF2284CD26628AE019E78F7DB9EB4CC16B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:16:27:4d:04:a4:af:5f:d0:3d:11:20:0c:
65:5b:bc:d6:cd:33:32:59:fc:c1:04:7b:f1:fa:ae:
93:24:ab:02:17:1d:85:36:2e:47:60:d7:2c:d7:71:
db:a4:85:38:f3:15:d5:c3:f6:b4:47:d2:70:10:64:
91:1f:3b:dd:12:e3:4f:35:c2:4a:25:a5:92:a1:43:
5c:cd:a5:ac:ce:7a:1b:b6:35:7b:39:2b:03:a9:82:
63:b5:57:21:b2:a4:a9:fa:7d:dc:e7:35:8a:1b:d9:
67:e1:dd:67:e7:64:47:f5:73:8e:5e:6a:6d:82:c1:
eb:a5:31:56:c8:21:dd:92:dd:69:de:96:fb:7e:17:
73:cb:fa:14:55:0a:8a:05:93:97:90:61:bf:08:9f:
c5:80:dd:ea:21:b8:6d:e9:83:38:98:7c:e1:75:34:
65:1d:82:92:e1:70:fd:95:b9:41:81:76:24:fd:aa:
d3:5b:f3:63:1a:38:73:13:8b:78:ec:dc:25:fa:0c:
28:7e:e0:cf:7d:09:d1:8c:b2:56:f2:fe:a8:26:25:
b1:c7:a1:c6:9f:39:bf:44:e5:fd:53:11:76:96:67:
24:58:7e:51:95:b1:04:08:a6:61:60:97:3e:aa:6e:
75:30:23:ee:56:43:8e:d4:24:0b:98:55:98:ee:b0:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:1B:F2:28:4C:D2:66:28:AE:01:9E:78:F7:DB:9E:B4:CC:16:B8
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/2ZMb8ihM0mYorgGeePfbnrTMFrg.roa
sbgp-ipAddrBlock: critical
IPv4:
210.229.34.0/24
Signature Algorithm: sha256WithRSAEncryption
12:cc:9f:ee:7d:a9:8c:eb:5a:1a:0b:20:23:61:89:4c:24:aa:
39:a7:88:1c:6d:c2:b9:b4:24:3d:44:02:21:ef:e7:df:be:c8:
20:ef:ec:79:0d:b6:cc:39:71:4e:a9:17:69:ba:da:50:37:f6:
6b:42:ac:14:b0:58:e0:2b:37:59:e6:15:b1:28:96:eb:26:b6:
d6:b4:22:bb:24:2a:4f:03:d7:9c:ae:76:fc:01:18:94:31:3c:
ce:1e:e0:5a:80:31:4c:e1:92:5c:5c:42:1b:8e:da:be:d6:7f:
bf:c8:29:f7:53:49:4c:ef:85:bc:c7:a2:84:da:91:98:c1:47:
e6:57:18:39:60:c2:3e:f2:8a:60:5b:28:7c:56:7b:8e:63:10:
84:61:15:f9:71:54:ba:c0:70:ea:4c:77:d7:6a:5d:de:5c:15:
53:b0:31:68:72:86:39:ea:ca:41:71:94:6e:4d:91:ad:1b:fb:
7f:a2:a9:8c:ca:05:68:f1:0e:ac:e4:1e:97:0b:fb:cc:ae:c6:
c6:5a:79:c8:d6:fd:08:2a:dd:56:3f:65:ff:fb:7d:57:18:01:
d7:65:91:c6:1d:1f:91:1d:23:30:fe:c2:6b:83:8b:51:ca:46:
24:a1:98:18:d5:c6:78:15:1a:65:d9:9e:73:fc:a7:82:ab:d2:
77:69:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:08:21 2026 by rpki-client