
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/glmf71matyem9NkPugeEsBWzfTY.roa
File: glmf71matyem9NkPugeEsBWzfTY.roa (raw, json)
Hash identifier: wNhcOoDy/cNnz9tCpe+BC6wgQcGNHW27c0Ahgvu1jj0=
Subject key identifier: 82:59:9F:EF:59:9A:B7:27:A6:F4:D9:0F:BA:07:84:B0:15:B3:7D:36
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 95
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/glmf71matyem9NkPugeEsBWzfTY.roa
Signing time: Fri 14 Aug 2026 09:25:17 +0000
ROA not before: Fri 14 Aug 2026 09:25:17 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 14 09:25:17 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=82599FEF599AB727A6F4D90FBA0784B015B37D36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:72:9d:fd:05:e9:8a:6a:c0:84:db:e6:57:
a8:bc:d7:e9:d0:61:89:58:3c:3a:10:82:4e:81:83:
27:cc:69:b3:e6:f6:b7:db:76:bd:a2:cf:d4:33:ab:
ea:d6:96:4e:ac:6a:63:9e:eb:d0:dd:1d:ca:25:bb:
6f:aa:53:ec:8e:30:52:0f:d0:1a:9c:07:11:32:d7:
d7:60:7e:b5:76:49:ba:88:90:8c:30:29:97:d5:c9:
2f:f9:f3:db:58:8a:5f:84:ad:61:5a:91:ef:64:8e:
0e:f6:5c:3b:b6:fe:da:dd:72:36:31:c1:8f:3e:95:
97:76:51:d7:a8:b2:47:b6:a2:9d:96:6b:a4:10:2f:
6e:fa:e6:50:d7:97:77:df:e0:5c:71:48:ec:c9:e4:
55:bc:b7:cb:98:92:69:1d:fd:87:0b:fd:10:77:8d:
60:18:0c:2f:30:c0:93:bb:9a:42:6c:4e:1e:86:b8:
c7:62:2f:31:cf:49:12:02:18:fc:e5:9e:64:c7:51:
bc:e7:7a:d1:66:5c:ca:57:5c:b9:95:b0:63:d4:4f:
f5:3d:1a:7b:a7:8d:a5:a2:74:4f:ef:43:05:0b:0d:
e9:11:51:a4:b9:16:88:4b:82:52:a3:c1:6e:b3:48:
9e:87:75:44:25:62:af:d8:2d:07:81:9d:e2:df:21:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:9F:EF:59:9A:B7:27:A6:F4:D9:0F:BA:07:84:B0:15:B3:7D:36
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/glmf71matyem9NkPugeEsBWzfTY.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.51.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ce:6c:a7:9e:cb:93:22:34:d2:2b:1a:4a:4a:b9:dc:d8:d1:
f0:6c:f8:41:71:0b:ef:1d:e1:50:94:32:d7:b4:57:b8:25:07:
03:aa:12:59:61:a4:3e:42:0f:1d:ab:bc:70:6d:12:af:b3:b7:
73:49:73:38:c4:b2:25:28:f0:3f:6d:1d:68:64:c6:e5:17:c8:
fa:18:32:ae:34:fa:2d:05:1c:74:25:fc:52:31:c2:08:6c:91:
07:c4:9e:a8:f6:87:80:5e:09:bd:d6:a6:8d:a4:df:3c:8e:6f:
da:14:31:8e:94:d5:bb:19:f6:1f:42:c5:1f:bd:af:b1:bf:a7:
7f:f5:a0:58:6e:0a:e4:47:bc:10:13:f8:e9:32:33:11:7c:d5:
43:0d:04:f8:d3:98:05:ac:86:a7:2b:06:b1:cd:27:02:6e:bc:
06:46:90:cd:a4:f2:b2:9f:08:dd:81:a0:bb:dd:ee:32:08:af:
8a:78:8e:41:d7:4b:85:24:a2:6b:3b:85:01:1d:2b:8d:31:b2:
5c:ef:d4:64:69:f9:3b:89:9a:1f:74:42:f3:ac:cc:c0:12:d0:
aa:5f:dd:37:51:3d:d4:f8:f3:a7:a2:31:05:6b:d1:21:a7:14:
82:05:7d:42:b2:4b:20:bf:c3:ef:14:8b:39:dc:f2:e3:2b:a8:
23:8c:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:55 2026 by rpki-client