
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/SQhHHc3zsOBEBdJHTpHzW7bO3uo.roa
File: SQhHHc3zsOBEBdJHTpHzW7bO3uo.roa (raw, json)
Hash identifier: 06lASmXE6AbNKLCorYR/YrfPgzgjbX8dp6adFNF7BXk=
Subject key identifier: 49:08:47:1D:CD:F3:B0:E0:44:05:D2:47:4E:91:F3:5B:B6:CE:DE:EA
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 89
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/SQhHHc3zsOBEBdJHTpHzW7bO3uo.roa
Signing time: Fri 14 Aug 2026 09:17:00 +0000
ROA not before: Fri 14 Aug 2026 09:17:00 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 14 09:17:00 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=4908471DCDF3B0E04405D2474E91F35BB6CEDEEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:f7:14:9a:d1:95:3c:a9:29:f3:55:57:ce:
ba:2b:46:47:d6:e1:d1:06:d5:bd:dd:6e:c8:d6:b7:
f9:c0:44:72:2a:e2:50:87:86:95:7c:d9:44:ed:fd:
45:21:2a:a7:a5:5d:35:71:99:7a:77:19:ea:d2:24:
3d:a5:1e:7d:7d:97:c1:e1:b1:77:61:04:39:b4:9d:
1a:0d:fc:21:68:ef:5c:b4:84:9b:97:cd:fb:a3:63:
2a:b2:ab:d4:31:b2:ad:a8:74:c0:f6:f5:c2:ba:85:
e9:1a:cd:13:69:1f:24:cf:bf:27:8b:0e:6f:ef:c0:
4f:33:c4:ce:9d:54:8d:fa:39:0a:6e:80:9f:56:07:
24:d8:b8:60:97:cb:29:32:8c:0c:8b:48:c5:bf:d8:
4f:f9:0f:10:c2:1d:ff:8a:72:f8:e1:e8:a5:c7:1f:
00:1c:ba:14:3c:9a:4d:c9:ce:5a:2a:e7:ab:cf:f5:
c2:fb:e6:92:91:de:d4:87:4d:09:a0:4c:55:4b:25:
82:6e:b7:3a:77:b4:6e:73:8d:20:a6:0d:4b:70:17:
45:fb:7e:8b:3f:41:6a:53:ff:10:28:32:5a:0a:36:
27:30:7b:f0:6a:8f:7c:47:ce:04:e4:16:35:e8:1b:
15:44:4f:9b:8f:58:94:c7:63:9f:27:66:17:c3:b1:
db:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:47:1D:CD:F3:B0:E0:44:05:D2:47:4E:91:F3:5B:B6:CE:DE:EA
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/SQhHHc3zsOBEBdJHTpHzW7bO3uo.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.45.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2c:19:a2:d8:dd:85:a0:db:2d:85:4b:e4:e6:a6:5b:7c:af:
0f:34:e0:d1:82:15:1d:8d:fe:d1:ca:a7:a8:7c:f6:50:b1:b3:
92:e9:81:d5:55:6e:b7:e2:36:76:02:95:bb:68:6f:36:6c:a4:
22:1c:13:50:2c:da:f5:7a:e0:ad:76:8c:cb:d5:75:90:64:0b:
d9:de:b5:80:5d:55:33:fe:b3:0d:c3:ef:5a:04:76:3c:21:c7:
fa:22:8e:3c:c3:bf:a5:e0:3d:42:57:86:1d:42:65:e7:70:c3:
10:53:57:f4:58:a1:20:50:21:c5:4d:01:fe:14:95:d2:a7:8d:
55:c4:63:9a:f5:81:17:45:bb:db:3e:f3:4e:ad:38:b4:50:4c:
e9:ed:be:0e:4b:ce:5d:ce:20:46:7d:77:18:c1:22:bb:0b:26:
73:bb:d0:39:28:a9:78:0b:1e:d4:a6:ea:4a:96:de:8b:e9:f5:
41:ba:d4:96:64:2e:c1:78:fc:e1:11:2b:dd:fa:e2:82:65:59:
d6:2c:86:a1:97:da:04:c6:e2:e2:16:a4:55:f3:6e:28:7f:18:
75:89:b6:5a:75:0f:2d:60:8d:a8:56:e2:fa:06:c2:68:b9:3c:
e1:85:ed:9b:32:e4:b1:01:bc:02:1a:81:b2:46:82:e0:2e:e3:
9b:b8:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:57 2026 by rpki-client