
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/yDsC1AMfT-xD-nnEMEs8LO-s2y0.roa
File: yDsC1AMfT-xD-nnEMEs8LO-s2y0.roa (raw, json)
Hash identifier: RewyxFtJz9Qm3yUU9uz9w036Unlr9k+6vq1yvsiagU8=
Subject key identifier: C8:3B:02:D4:03:1F:4F:EC:43:FA:79:C4:30:4B:3C:2C:EF:AC:DB:2D
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: 97
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/yDsC1AMfT-xD-nnEMEs8LO-s2y0.roa
Signing time: Fri 14 Aug 2026 09:25:18 +0000
ROA not before: Fri 14 Aug 2026 09:25:18 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.157.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Aug 14 09:25:18 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=C83B02D4031F4FEC43FA79C4304B3C2CEFACDB2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:2a:bc:1a:fb:8b:aa:02:4f:b2:4e:a9:f3:
51:b0:e1:9e:ef:c0:8c:c8:dc:ac:65:38:a8:33:ef:
2b:4a:f6:7a:78:84:a4:6e:af:95:e8:25:5a:75:e3:
6d:c3:82:04:e3:0b:80:b7:67:51:1e:11:6f:3a:9a:
de:e7:0e:c0:77:dd:5e:68:06:f0:9c:f7:8e:db:29:
b6:8c:4b:ed:b3:61:61:08:51:fb:4b:05:4b:26:ce:
bb:e8:e6:71:eb:79:ab:74:5f:72:30:56:b2:4f:54:
c2:c6:e7:4d:da:e9:64:b0:e8:f2:52:71:53:7c:59:
0c:9c:92:04:47:d3:75:8a:d0:df:d4:61:6c:b8:76:
5b:22:64:cc:75:4a:1a:ce:e2:b3:ae:6e:29:5a:99:
60:23:a1:28:0c:c9:55:37:a2:63:73:18:6d:7d:71:
11:b4:3d:36:5e:a9:d0:c1:89:b5:1c:96:a7:83:8b:
c8:31:a1:24:6f:cb:9d:a8:44:44:dd:67:46:5c:f4:
3b:b4:7a:70:a1:d0:50:45:ce:12:99:18:94:15:83:
28:24:83:90:c9:79:ca:ba:ec:05:d2:f1:52:74:01:
ca:88:d2:1c:88:71:cb:f2:17:ec:09:70:cc:12:40:
6e:c3:63:fa:89:b3:b6:39:06:e4:16:13:78:6c:93:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3B:02:D4:03:1F:4F:EC:43:FA:79:C4:30:4B:3C:2C:EF:AC:DB:2D
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/yDsC1AMfT-xD-nnEMEs8LO-s2y0.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.52.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5a:e6:1f:10:bc:33:a4:45:67:cc:ae:f2:70:55:68:0f:a7:
60:11:5e:f0:14:74:07:07:a4:76:66:11:5b:b2:81:8a:0d:d5:
18:03:a9:99:bd:1a:43:c8:57:19:61:08:91:08:d1:2f:e3:53:
89:51:d2:4b:4b:45:5a:c6:00:26:88:c8:2d:8f:99:6b:bb:87:
54:50:bd:cf:39:b2:03:6a:af:1f:7b:f2:90:5a:95:95:90:ba:
70:49:f1:dc:6b:a8:36:f6:cb:95:6a:13:f5:cb:09:14:aa:2a:
78:30:63:cd:ce:9e:ed:10:9c:df:85:0a:8b:43:d9:99:57:0b:
b4:6a:b8:4f:a6:fc:85:58:80:1b:2a:f7:a2:31:f5:e8:90:8e:
8a:74:f0:5b:cc:f4:64:e0:df:7b:12:9f:2f:cc:fd:11:3a:12:
d1:c6:54:cf:76:05:5c:56:e3:7a:90:af:b3:87:77:dc:43:ad:
95:ea:6c:aa:d7:cf:b6:88:21:7c:3e:ce:ea:64:7d:c1:47:f6:
41:04:b9:d9:b5:60:1e:72:d0:d2:af:d1:39:4a:84:98:9c:0c:
af:b4:67:a4:ed:dd:2b:8f:3b:be:92:fe:e5:b5:0b:0e:ff:97:
ec:b2:e2:4c:f3:5e:05:77:d4:25:db:2a:99:e6:28:8f:11:dc:
31:0b:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:05:57 2026 by rpki-client