
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/HLrT1xbgiLjDTcjfWXbWpv7Lel4.roa
File: HLrT1xbgiLjDTcjfWXbWpv7Lel4.roa (raw, json)
Hash identifier: JYrJeWZrjxVj9bOUh+yTMgPfeO3YoVAu2yNYqJCmlOM=
Subject key identifier: 1C:BA:D3:D7:16:E0:88:B8:C3:4D:C8:DF:59:76:D6:A6:FE:CB:7A:5E
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 75
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/HLrT1xbgiLjDTcjfWXbWpv7Lel4.roa
Signing time: Fri 14 Aug 2026 08:45:00 +0000
ROA not before: Fri 14 Aug 2026 08:45:00 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 14 08:45:00 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=1CBAD3D716E088B8C34DC8DF5976D6A6FECB7A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:98:d0:56:aa:64:4e:ac:4d:73:20:29:d9:
02:79:7f:01:ce:e7:53:d9:00:c1:44:5d:40:5c:50:
13:54:f8:bc:3c:36:2d:43:3a:bc:04:49:32:c5:e2:
8e:2f:db:0a:cb:37:86:87:24:6d:e2:a6:92:27:d5:
ec:60:eb:69:92:a0:fa:d9:9f:53:f5:d0:b7:db:b3:
1b:ca:4f:9e:4d:96:41:d2:87:72:06:e7:f9:83:c8:
eb:b1:55:e7:e8:e1:0a:58:a2:67:70:b6:de:71:98:
60:5d:27:a0:0c:1b:b9:b2:81:a2:da:13:1b:b7:3c:
55:ba:20:da:88:92:8e:65:cd:ee:60:96:4d:4e:dc:
87:67:1f:50:31:71:45:34:a5:25:c1:ea:9d:bb:42:
a2:5a:11:d3:97:80:20:b1:31:2d:72:57:3d:9a:a0:
ad:f3:62:6f:4c:9c:3a:68:88:a5:ea:32:a6:8c:1e:
43:66:c6:21:32:57:53:f3:3b:4a:f6:ed:72:2a:a4:
15:8e:90:75:74:c9:e6:fd:91:13:12:f8:bd:3e:54:
c4:89:05:9c:cb:87:68:f2:28:79:c2:ba:16:60:1e:
c5:5a:61:81:10:2b:50:00:a7:90:0b:ae:3d:94:e5:
f8:25:7b:a6:e3:57:ae:ca:58:56:91:18:7a:5e:3a:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:D3:D7:16:E0:88:B8:C3:4D:C8:DF:59:76:D6:A6:FE:CB:7A:5E
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/HLrT1xbgiLjDTcjfWXbWpv7Lel4.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.35.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c3:d8:d2:ee:50:e2:a4:8e:b8:2e:c9:6b:1a:fd:83:74:a9:
fb:11:6b:ec:19:22:90:4f:98:77:1f:6b:ad:cb:bd:b9:3f:fa:
63:80:1d:ff:79:cf:cf:b0:e5:53:1d:df:e4:0c:ef:eb:62:47:
6d:13:a0:29:80:5e:11:9c:77:ec:94:ce:66:7a:40:1f:5a:60:
13:93:2c:ca:38:96:0d:62:1f:69:f8:1f:da:90:f5:8b:2a:c1:
ec:f4:c2:5a:75:cd:cb:14:73:5d:41:56:93:66:de:3e:03:de:
c6:68:15:f8:e4:c6:56:51:e1:21:9f:59:ac:71:d7:1f:21:1e:
c5:ec:87:48:18:56:3d:19:61:fc:b5:36:4c:3f:99:2f:57:8c:
03:ac:88:ce:68:fd:ae:97:95:61:75:07:1e:7c:5c:90:03:f3:
a2:09:56:f7:14:bd:c9:a0:25:b0:f7:e6:3b:64:f9:56:fc:90:
62:74:62:d8:74:7d:d1:de:34:73:9f:21:ac:82:f9:16:bc:8f:
20:f8:e4:08:e0:6c:15:50:df:7a:e3:67:e4:ed:75:bc:50:09:
ef:0c:38:f1:10:41:80:99:dc:6e:28:26:f2:9c:92:5c:01:11:
c3:ed:23:8a:ce:14:da:b8:18:f1:a7:43:9a:3f:1b:df:c0:02:
66:db:76:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:54 2026 by rpki-client