
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/luZE0cwNwEIObIiOIDCT_aG0Q_4.roa
File: luZE0cwNwEIObIiOIDCT_aG0Q_4.roa (raw, json)
Hash identifier: ByydwMozr6jSQ+pm0CvwfKn3GWh8UbJ/ZaRxvVIbQqQ=
Subject key identifier: 96:E6:44:D1:CC:0D:C0:42:0E:6C:88:8E:20:30:93:FD:A1:B4:43:FE
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 71
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/luZE0cwNwEIObIiOIDCT_aG0Q_4.roa
Signing time: Fri 14 Aug 2026 08:44:59 +0000
ROA not before: Fri 14 Aug 2026 08:44:59 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 14 08:44:59 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=96E644D1CC0DC0420E6C888E203093FDA1B443FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c7:8e:df:80:c5:3a:e6:17:1a:77:8a:1d:c7:
43:a9:91:d9:0b:e9:13:21:c3:89:7b:ec:83:b3:19:
ba:a7:bb:96:28:3c:89:1f:a4:7d:f4:a0:d8:b2:1b:
34:0c:44:97:c0:9d:b8:c3:a4:11:df:e9:9a:69:2e:
57:8f:46:ec:ad:58:ff:19:9f:64:cc:2e:2e:7e:b4:
44:83:97:7e:f3:ca:2f:33:2f:77:b7:7e:aa:f3:6a:
52:d9:1a:90:ac:41:ed:09:13:ce:eb:fe:1b:a1:0b:
0e:af:94:f8:c2:7f:b4:4b:93:04:32:91:24:ed:55:
0d:63:02:87:55:d2:f1:06:de:d1:69:05:ca:1f:29:
89:d8:54:8f:d7:f0:ab:ea:0d:24:9f:c3:97:33:b8:
7f:23:8d:cc:4c:0f:35:31:c7:d6:42:5d:02:d9:43:
b2:77:52:e3:90:ee:71:1f:96:ea:f0:99:ca:b8:d0:
db:99:36:ba:6a:44:21:5a:d4:77:26:35:b0:63:3e:
4d:ac:d1:10:b9:80:2a:9d:1e:67:f9:f2:b4:51:a4:
3b:9c:fc:ad:e0:80:a6:5b:8e:f7:e5:16:99:65:dd:
ba:4c:97:a9:1a:0e:e3:01:89:b0:bb:10:94:6e:62:
78:67:ec:1e:02:b6:25:cb:f6:96:ec:4a:a5:84:13:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E6:44:D1:CC:0D:C0:42:0E:6C:88:8E:20:30:93:FD:A1:B4:43:FE
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/luZE0cwNwEIObIiOIDCT_aG0Q_4.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.33.0/24
Signature Algorithm: sha256WithRSAEncryption
be:9c:db:04:64:4a:22:20:b5:79:5f:15:39:37:e3:62:a6:da:
0f:a8:34:c7:20:3e:b7:68:29:ee:a4:40:45:85:e1:b6:7d:c8:
c3:f0:1d:c9:a1:65:e8:11:17:e4:d8:57:8f:57:ac:b2:4b:e4:
c2:88:f3:05:fa:f5:14:c3:64:db:8a:cb:76:5c:c3:5a:d6:99:
13:f2:20:5e:10:63:5b:99:9c:ce:3f:f8:40:f8:bd:7e:43:65:
f5:4f:cd:23:4d:62:39:70:54:7e:51:10:db:8c:25:9a:ad:45:
25:34:fc:27:be:eb:c8:89:12:95:6b:12:2b:3e:9a:06:75:fb:
60:7d:64:67:67:78:61:d6:ea:20:cb:82:b7:f0:bf:ff:8d:39:
7e:37:0a:22:a6:95:26:c8:59:7f:bd:cd:06:4a:50:05:9d:ca:
3d:27:9d:1a:c3:3f:4c:03:27:96:c0:5d:0f:78:55:67:ec:5e:
35:be:3c:1b:c6:76:57:6d:f7:6a:08:bb:2f:e9:39:e5:d8:b6:
04:3e:be:fd:e2:0f:fe:f9:6f:86:5f:d7:96:e7:5d:a5:d9:eb:
73:17:d0:05:28:d3:91:f2:4d:88:38:aa:db:ef:7b:1e:c7:6b:
6e:fa:4c:07:f3:42:06:09:7c:eb:9d:21:6e:0b:5f:e0:e4:f0:
c3:7d:30:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:56 2026 by rpki-client