
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/WgRMOhRYtbBaFG9WOHpHfuXIeX4.roa
File: WgRMOhRYtbBaFG9WOHpHfuXIeX4.roa (raw, json)
Hash identifier: 4alNY303rN3g37PhAZIr/l0yPFEnGoDIOeLN2+C0H4w=
Subject key identifier: 5A:04:4C:3A:14:58:B5:B0:5A:14:6F:56:38:7A:47:7E:E5:C8:79:7E
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: B3
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/WgRMOhRYtbBaFG9WOHpHfuXIeX4.roa
Signing time: Wed 19 Aug 2026 08:01:09 +0000
ROA not before: Wed 19 Aug 2026 08:01:09 +0000
ROA not after: Sun 15 Aug 2027 01:30:02 +0000
asID: 7529
IP address blocks: 133.157.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 19 08:01:09 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=5A044C3A1458B5B05A146F56387A477EE5C8797E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:e8:01:ff:39:7c:58:8d:c8:f6:b3:d8:66:
0a:ba:aa:62:b7:35:ff:75:17:b1:fd:6d:de:ca:a6:
61:39:66:c4:02:f9:f8:e9:58:74:49:65:41:9f:ba:
e6:42:23:ce:04:20:ba:ad:fd:4c:be:66:68:3d:96:
fb:63:62:5e:5d:df:b5:15:a0:dd:ea:c4:bc:96:c7:
72:51:7d:eb:16:c2:87:98:2e:52:d6:91:5c:6a:71:
c7:d3:53:d1:8b:9a:4b:e0:06:a7:90:a6:b5:86:2e:
23:d5:6d:ca:73:2c:53:95:70:b2:6a:cc:dc:b0:c2:
da:10:37:25:7a:16:6e:30:4f:95:d5:f4:98:18:fa:
45:19:38:db:63:cc:cb:04:4e:80:05:bf:07:33:e6:
39:b8:ff:f2:93:6a:35:e8:da:88:dd:fd:17:e5:5b:
a4:d4:f0:0c:58:a4:72:dc:fd:27:57:f8:1a:bc:95:
60:b4:69:be:53:d3:6d:3f:49:49:c4:4e:bb:a0:9b:
8a:83:f7:0c:01:72:ef:af:c6:51:1b:53:d4:bb:68:
52:45:55:61:99:16:10:ff:49:2b:b3:b2:99:d4:2e:
05:c4:23:c7:c1:1e:f0:ed:41:83:3e:56:ef:3f:62:
f8:d3:e3:ff:23:90:2f:96:b0:28:2b:24:83:4c:cf:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:04:4C:3A:14:58:B5:B0:5A:14:6F:56:38:7A:47:7E:E5:C8:79:7E
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/WgRMOhRYtbBaFG9WOHpHfuXIeX4.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.96.0/21
Signature Algorithm: sha256WithRSAEncryption
31:43:ef:65:5d:2f:3e:03:2a:2a:8b:c4:63:ae:fb:f7:28:36:
0d:f8:4b:61:3a:a6:61:10:a5:6e:52:e5:47:db:b2:2e:55:84:
9c:08:ef:17:ae:d7:60:a4:2d:e4:97:14:13:12:7f:d8:94:18:
2e:28:d1:54:74:da:9e:cf:94:3c:97:d7:4e:71:4a:56:47:53:
a3:7e:da:95:d4:c4:f7:e8:a2:13:ed:90:40:53:a9:8c:83:89:
c6:23:4d:c2:1c:0f:b3:88:24:df:ac:6f:ed:96:78:ba:1e:74:
6c:aa:22:20:47:1d:93:86:ec:d9:97:59:4d:16:a8:ce:26:c2:
46:60:21:37:c0:15:d6:84:3c:fa:0a:aa:3e:75:88:75:3c:92:
99:1b:fc:cf:78:b3:98:3c:3a:b7:3c:10:ba:a6:0a:a2:2f:9c:
4b:67:8c:65:cb:65:4a:89:71:c7:e0:ee:a6:58:db:3e:27:d3:
a4:e1:31:8d:d4:3d:52:e0:3b:d2:01:36:3e:5c:8f:d4:2e:e2:
01:4a:87:39:5d:7b:b5:ad:05:55:a5:ea:db:63:b7:e7:ab:fb:
47:db:9e:cc:af:36:58:5b:29:74:d7:7b:d0:47:95:e7:a3:2d:
4c:3c:4e:c6:f5:4e:69:09:61:bd:94:6e:90:c2:dc:9e:73:df:
d8:eb:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:55:16 2026 by rpki-client