
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/iWFQU0syFY7mcSPjCEu678LTNYI.roa
File: iWFQU0syFY7mcSPjCEu678LTNYI.roa (raw, json)
Hash identifier: TJWPhQDz3lAxjAkKkN/owPDACDhH71c2nqCf4y7eBgk=
Subject key identifier: 89:61:50:53:4B:32:15:8E:E6:71:23:E3:08:4B:BA:EF:C2:D3:35:82
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: AB
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/iWFQU0syFY7mcSPjCEu678LTNYI.roa
Signing time: Fri 14 Aug 2026 09:38:55 +0000
ROA not before: Fri 14 Aug 2026 09:38:55 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 14 09:38:55 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=896150534B32158EE67123E3084BBAEFC2D33582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:0e:db:b5:9d:ce:54:4c:77:ad:de:c1:d8:
fd:25:d3:98:98:7d:ea:1b:21:43:65:e2:4d:e3:d7:
50:4e:c4:53:ad:91:c6:be:f1:3f:bb:e1:c7:9c:1a:
0f:4b:52:92:db:77:a7:3c:8d:e9:e8:cf:9a:2a:9b:
0d:7f:0c:73:b4:67:77:89:af:15:3f:39:57:9e:36:
27:4c:7d:82:9e:d8:23:57:64:41:81:34:e7:a0:6b:
26:c1:6b:03:c4:b5:9a:42:2b:2e:8d:8b:4b:10:da:
02:92:a0:1c:4e:44:51:be:3f:db:80:41:95:e8:88:
6d:7a:bd:a8:10:c8:3d:0b:e9:19:a6:50:e7:74:20:
ee:15:d3:61:70:7c:00:38:71:01:76:a5:ae:59:5f:
26:77:1f:55:0d:3a:e0:dd:08:6a:04:30:3c:ed:a0:
4e:2c:60:4a:c8:3f:fe:3f:46:cd:e8:62:4e:c2:9a:
88:96:80:41:b4:31:dd:5d:71:59:9f:56:2a:c3:ec:
72:81:98:cd:9a:17:c1:d9:ae:8f:1a:84:8a:2b:df:
fd:fb:98:c1:7c:bc:e1:54:a7:6b:79:67:c9:78:3e:
39:06:fd:2b:67:26:e0:23:71:5d:6c:19:0f:42:e4:
fc:15:ed:e8:53:29:b8:1c:c7:42:a1:f3:51:af:07:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:50:53:4B:32:15:8E:E6:71:23:E3:08:4B:BA:EF:C2:D3:35:82
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/iWFQU0syFY7mcSPjCEu678LTNYI.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4b:00:06:f9:65:d6:94:80:8f:9d:9e:e6:e2:c7:67:84:3d:
a9:1a:23:ff:d4:dd:d7:68:60:b7:3b:be:de:f0:58:2f:33:f1:
25:cd:f7:b1:c5:c1:38:ea:5f:66:d6:a6:88:76:57:f2:9d:65:
bf:41:1c:bf:5e:46:9f:c0:c8:3f:70:f3:45:9f:f1:09:df:ae:
c2:a5:aa:20:41:f6:d4:e1:bc:b7:9d:5e:80:2d:85:13:e1:ac:
aa:bc:dc:e9:fb:ba:93:0f:f1:cd:53:5f:80:60:b2:63:b1:de:
2d:5b:89:5a:5e:66:2c:d6:a9:ff:43:f9:a8:f2:ed:38:be:4b:
81:8b:f1:cb:d9:52:11:0e:80:62:fa:c6:b1:f3:23:67:a0:50:
52:02:a1:2a:7a:3b:4f:2e:d2:aa:d4:8e:bc:41:34:9b:6d:79:
a1:d8:e1:51:8b:ba:00:f9:d8:bd:8f:5c:40:35:ac:c7:10:17:
a3:b1:e9:cf:7b:21:50:53:3e:cb:88:c9:e1:2d:f0:f1:e5:c1:
a8:9a:fb:fa:d3:5f:5e:72:f3:9f:76:5a:a3:d6:4e:0c:39:5f:
8d:eb:7a:e2:c3:da:11:24:a1:1c:97:6c:30:8d:9e:af:51:39:
71:3a:f3:c1:37:f8:e9:af:1a:a2:85:42:2d:ab:a8:d7:28:ef:
fd:44:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:56 2026 by rpki-client