
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/3TPUZRe9rv0NLwLdOz3Bjqlk5r8.roa
File: 3TPUZRe9rv0NLwLdOz3Bjqlk5r8.roa (raw, json)
Hash identifier: tPgJkweTGQM+NQx0HfZ4hxPWQLSsFtdwAqkWI/CULQ0=
Subject key identifier: DD:33:D4:65:17:BD:AE:FD:0D:2F:02:DD:3B:3D:C1:8E:A9:64:E6:BF
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 9F
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/3TPUZRe9rv0NLwLdOz3Bjqlk5r8.roa
Signing time: Fri 14 Aug 2026 09:31:02 +0000
ROA not before: Fri 14 Aug 2026 09:31:02 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 14 09:31:02 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=DD33D46517BDAEFD0D2F02DD3B3DC18EA964E6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:a2:5f:12:c8:9b:db:55:15:6f:24:39:11:
75:ec:c4:f8:0c:fa:6d:c3:83:a5:25:6f:65:e8:a8:
8f:5c:1d:9b:c9:5e:4c:9e:b9:ea:67:02:34:6e:9c:
92:2d:70:1d:3b:38:e0:6f:ee:b0:15:66:36:d3:2c:
11:37:08:b5:0b:fe:d3:ec:15:4b:98:aa:38:f8:8c:
3d:e7:da:a7:37:c7:2c:7f:33:4e:11:1e:88:c4:5d:
4a:2c:93:5d:64:8b:1a:08:a0:04:f5:66:71:5d:f5:
78:11:9f:18:5f:37:5f:9a:f2:b6:ec:c1:eb:81:bd:
52:6f:f5:3f:c3:8a:9b:dd:de:77:77:48:24:e7:ca:
e4:a3:b3:cd:35:0b:b0:43:09:a5:51:b8:72:d9:49:
12:37:75:d0:17:f9:ed:ef:e5:68:c0:54:7b:0d:46:
ad:99:82:8e:97:2c:69:b4:97:47:9d:d2:2c:ae:45:
c8:92:87:f7:d8:5f:27:ce:61:78:dd:94:11:6d:9e:
0b:b9:96:de:9a:36:ce:79:17:01:e0:b3:27:60:45:
3c:9c:0a:b0:a3:45:62:5e:9a:1b:b8:77:2a:db:fd:
6f:e9:9f:83:4f:0f:26:7f:ca:ca:c6:01:64:d1:7f:
c7:a7:29:03:75:26:26:41:9b:33:ea:d9:fc:2a:7a:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:D4:65:17:BD:AE:FD:0D:2F:02:DD:3B:3D:C1:8E:A9:64:E6:BF
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/3TPUZRe9rv0NLwLdOz3Bjqlk5r8.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7b:ee:f9:60:90:0c:e5:c3:ef:e4:d9:4f:46:e8:ea:4b:e6:
53:e1:b7:9e:23:6a:5d:e1:ab:9c:22:b7:4c:00:99:6f:8c:f8:
96:07:c1:f2:d1:73:d8:ae:52:06:99:74:38:54:09:26:78:19:
54:5a:2a:f1:24:88:90:f5:14:46:9a:aa:83:22:b3:c6:bc:52:
1a:4f:d0:c5:b2:68:d9:4e:66:10:f2:5e:cc:96:08:4e:d7:e8:
40:c6:85:71:bc:8e:1c:8c:91:82:21:49:2d:fd:6f:4c:c8:5b:
28:05:6b:07:1e:74:a3:76:fd:a8:cd:fa:c1:82:61:83:98:04:
23:2f:8d:77:79:3f:ea:1d:5f:ba:a9:f3:01:1d:d6:ea:f5:d5:
c7:46:a2:91:c0:d8:4f:cc:df:df:49:11:a5:c5:6c:0b:53:9e:
df:91:03:67:0f:23:6b:1f:27:16:a2:2e:95:57:03:3e:fb:72:
ba:60:6e:d4:ad:38:a0:ff:6a:fa:9f:5a:43:d8:ea:30:39:60:
b7:40:bf:f9:e4:5c:90:79:5b:7a:17:b4:73:c2:a2:5c:63:45:
41:40:6f:27:90:24:29:87:2b:70:fc:d9:c9:bb:f7:01:44:a4:
95:89:d4:16:15:8e:4d:57:63:b2:2b:5c:82:83:93:32:26:63:
fe:31:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:55 2026 by rpki-client