
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/tWQIbzv_y3suTAYSxijZVKRVunI.roa
File: tWQIbzv_y3suTAYSxijZVKRVunI.roa (raw, json)
Hash identifier: dp98/Wd//mMXkaFDTGEBUdAj8vQL78DStpyuBjoPbao=
Subject key identifier: B5:64:08:6F:3B:FF:CB:7B:2E:4C:06:12:C6:28:D9:54:A4:55:BA:72
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 8F
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/tWQIbzv_y3suTAYSxijZVKRVunI.roa
Signing time: Fri 14 Aug 2026 09:20:52 +0000
ROA not before: Fri 14 Aug 2026 09:20:52 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 14 09:20:52 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=B564086F3BFFCB7B2E4C0612C628D954A455BA72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:71:20:61:ca:17:a2:35:6b:2e:9c:0e:5b:e2:
cf:05:fe:5a:8b:53:2a:c9:84:8e:8f:02:3e:ef:7f:
45:91:2e:25:1e:97:b3:b2:30:3d:9d:dc:fb:7a:06:
01:c2:de:cd:3d:2b:5a:46:83:72:29:c4:dc:1e:15:
c6:53:be:e4:e5:3c:cf:fe:11:2d:7a:da:52:48:ea:
be:65:27:38:02:e9:7a:5b:3d:a8:e1:a9:a4:38:ae:
fb:97:70:75:b5:50:d2:05:ea:bd:f3:69:f2:13:ab:
79:d7:79:85:a1:11:89:a7:ee:01:b3:5b:be:63:2e:
41:70:f1:b8:84:6b:93:17:76:e9:03:8a:a4:74:63:
75:c2:b9:f2:e7:4a:7b:02:b6:89:34:8a:55:29:ab:
85:b7:32:4d:de:9a:a8:a0:a0:ed:2d:04:e4:19:28:
de:88:e7:76:32:98:27:42:97:c1:ec:2f:4a:25:55:
78:b3:8b:d0:36:a0:b0:52:b5:cb:7a:44:82:b9:f7:
3a:94:2e:2a:10:0a:9a:2d:f5:67:3b:35:b7:26:3c:
9f:a0:5a:f8:30:6b:e1:61:0d:b9:ff:a4:93:36:7e:
7e:84:98:d2:28:20:98:b1:09:8b:b9:7f:c8:74:19:
ca:d2:56:ce:74:a8:22:4a:79:87:9b:8d:1e:cf:01:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:08:6F:3B:FF:CB:7B:2E:4C:06:12:C6:28:D9:54:A4:55:BA:72
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/tWQIbzv_y3suTAYSxijZVKRVunI.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:13:0c:07:b5:02:62:c2:e4:92:2b:3a:9c:9c:30:e1:cc:6f:
09:cb:97:95:93:ae:3d:b0:44:7a:36:f0:99:6e:60:57:f8:e4:
ad:13:cb:aa:d3:e0:94:74:ce:b9:65:02:a2:ed:d7:28:07:16:
fa:95:3c:5c:e4:f4:1c:4e:60:d5:1d:d7:78:07:9d:53:3f:0b:
98:c9:db:52:f8:af:48:c2:17:b2:51:9c:c1:55:af:c5:2e:04:
7b:b1:c2:b4:ba:60:d3:00:ad:d4:64:f9:a8:6f:5e:c7:c5:7c:
6d:6d:2b:e9:28:e4:9d:eb:18:e6:9b:d8:39:e7:33:45:c8:90:
b8:47:a6:42:2a:70:13:8c:80:52:09:f2:54:da:20:38:15:b3:
dc:97:d6:48:4a:25:37:5a:6d:0a:92:f5:92:2e:34:ca:4b:4f:
4e:24:31:00:dd:ae:54:bd:8b:5b:32:c2:42:57:a8:9e:6c:69:
5c:1d:bd:b7:10:18:aa:a1:80:1e:98:52:80:cf:b7:b9:55:b3:
98:a0:dd:69:bd:ff:2a:3c:60:ff:aa:a3:93:52:1a:25:45:de:
04:b8:35:10:c1:30:fd:4d:90:b9:64:f8:45:42:57:19:98:cd:
0d:de:28:f5:c0:78:3c:76:34:13:11:a0:b9:a1:0f:ab:b5:d5:
02:39:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:24:14 2026 by rpki-client