
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/NNrLD9lQflbvMop7Fuh4QFRC9g8.roa
File: NNrLD9lQflbvMop7Fuh4QFRC9g8.roa (raw, json)
Hash identifier: I424yQNJ4r29fKlLjOM1M6nDLkclIwGho9IMwTVdTEY=
Subject key identifier: 34:DA:CB:0F:D9:50:7E:56:EF:32:8A:7B:16:E8:78:40:54:42:F6:0F
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: B6
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/NNrLD9lQflbvMop7Fuh4QFRC9g8.roa
Signing time: Thu 20 Aug 2026 12:53:44 +0000
ROA not before: Thu 20 Aug 2026 12:53:44 +0000
ROA not after: Sun 15 Aug 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 20 12:53:44 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=34DACB0FD9507E56EF328A7B16E878405442F60F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:e7:88:ff:72:22:52:79:35:bb:2d:2f:72:
2c:ea:83:d6:95:21:4f:78:67:3b:e3:56:82:75:26:
8d:cb:99:08:ae:b6:0c:0b:1a:b9:37:9c:23:ce:0e:
1d:2b:b7:67:f8:7d:17:23:b6:73:3c:4c:70:c7:6b:
74:96:b2:7f:19:e4:59:2c:c4:44:8f:0e:c0:ab:4a:
97:ae:59:82:7a:b0:42:ed:2d:34:9e:c6:9c:0b:92:
6e:fe:c9:8c:c2:a1:30:b4:81:a7:bc:ce:a0:69:9b:
6c:1a:73:3f:04:d7:02:5c:e9:64:64:53:9c:33:fe:
61:8d:65:95:08:c7:92:60:00:73:ff:25:23:b8:0a:
c2:fe:ac:b6:d8:19:f7:06:0f:db:7f:58:67:71:e2:
52:6f:96:e8:eb:cf:b8:60:5e:be:31:9c:7b:30:89:
75:10:36:54:97:7c:74:83:c0:3d:d2:75:1f:c7:df:
84:e9:57:15:2e:10:b6:6c:47:cc:57:f5:13:be:e0:
43:4f:7a:ef:1e:d1:4b:0b:70:4b:c5:aa:de:4a:ab:
53:f8:95:47:72:b9:26:c0:b7:54:fe:0a:ff:8c:e4:
e7:3f:51:5c:23:95:2c:dc:d1:05:78:8a:90:b9:34:
55:dc:a4:3f:16:33:b2:26:9e:02:b7:c5:6b:8f:ed:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DA:CB:0F:D9:50:7E:56:EF:32:8A:7B:16:E8:78:40:54:42:F6:0F
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/NNrLD9lQflbvMop7Fuh4QFRC9g8.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.80.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:b6:8d:54:80:3a:30:6b:d5:d6:3d:f4:84:19:a2:35:8d:f6:
99:aa:6a:11:1c:3b:3a:07:64:74:8f:9c:48:a8:d8:0a:ef:9c:
cf:dd:2d:f8:5d:01:6d:08:13:22:13:f3:68:33:d1:3f:c8:f9:
6b:60:0f:9d:e1:ea:97:f1:94:7c:2b:55:05:ea:c0:dc:f7:d2:
bb:c4:40:8d:14:50:a4:f5:60:bf:c3:a4:fa:fb:08:68:93:e2:
91:c8:41:92:e2:87:d0:d4:ef:97:48:37:a4:82:6d:70:69:ab:
7a:00:11:0a:d4:25:6d:0f:25:d1:69:46:a6:85:3d:41:99:14:
3e:92:65:da:37:00:ce:aa:64:6a:7a:db:a6:c8:81:67:00:1c:
b2:cb:ff:7d:c1:6e:9f:b3:56:36:19:06:f7:0b:e4:b5:a5:f1:
7e:8e:8c:2c:90:5f:c6:ee:9b:84:83:e0:32:54:90:70:9b:b1:
a7:96:df:46:d4:c3:db:e7:94:67:8d:a3:b8:66:a7:65:77:82:
c5:9d:24:25:df:47:08:00:6d:53:f2:ea:11:26:33:a3:6b:df:
aa:b3:a5:71:dd:18:c2:56:4e:71:7a:f5:2d:b2:84:aa:5d:c9:
c1:e0:2f:d7:b7:f0:a2:7a:bd:69:9b:9d:b1:72:ed:7a:a7:dd:
6c:8c:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:57 2026 by rpki-client