
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/2JDsW1SHirNqlCtxbH7gCpE3Yo0.roa
File: 2JDsW1SHirNqlCtxbH7gCpE3Yo0.roa (raw, json)
Hash identifier: dWlmqA5B32dUKjwHFlbu3Dujuslayt06hhx0oKOtIyU=
Subject key identifier: D8:90:EC:5B:54:87:8A:B3:6A:94:2B:71:6C:7E:E0:0A:91:37:62:8D
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 80
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/2JDsW1SHirNqlCtxbH7gCpE3Yo0.roa
Signing time: Thu 25 Jun 2026 13:02:40 +0000
ROA not before: Thu 25 Jun 2026 13:02:40 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 18071
IP address blocks: 133.183.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Jun 25 13:02:40 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=D890EC5B54878AB36A942B716C7EE00A9137628D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:02:e2:2f:6a:87:c9:d7:5b:87:e3:0c:16:
1d:32:59:52:ce:4f:6c:4f:b1:81:4e:d6:9b:5e:d9:
79:07:ca:72:b5:86:c3:bf:66:b7:87:77:70:47:bb:
0d:b1:f0:bd:3c:8f:16:23:1b:c7:6b:05:f6:84:6c:
29:cc:6e:e0:d4:28:c7:1d:8a:07:76:d2:d4:7e:87:
49:b2:33:b5:89:65:23:a1:3c:6c:26:f4:c0:05:c1:
40:b5:ca:ec:b1:b9:1c:2e:42:e4:59:9f:d6:27:5c:
c2:eb:ce:7d:25:84:5d:45:b4:1a:87:1b:93:fb:5b:
cd:cb:95:e6:7d:45:f7:b9:4a:be:21:e6:1f:38:1a:
30:84:06:34:08:60:af:6e:3d:19:38:a5:de:1e:15:
85:29:9d:39:a8:98:f4:65:32:f3:97:aa:c1:9d:f4:
ea:66:2c:ed:93:df:82:01:9e:ea:7b:b9:0c:eb:50:
0f:f9:a3:39:bc:e4:9a:ff:36:3a:0e:12:67:88:7e:
f2:ff:46:48:73:80:35:cb:b9:16:90:90:b8:d5:fe:
b4:98:d6:18:b0:99:20:31:04:ad:40:72:80:83:e3:
42:cf:99:fc:3d:45:c4:2d:df:73:ad:87:3f:2c:3f:
26:d4:34:bd:26:e2:73:b6:e2:cd:16:0f:fe:93:a6:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:90:EC:5B:54:87:8A:B3:6A:94:2B:71:6C:7E:E0:0A:91:37:62:8D
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/2JDsW1SHirNqlCtxbH7gCpE3Yo0.roa
sbgp-ipAddrBlock: critical
IPv4:
133.183.104.0/23
Signature Algorithm: sha256WithRSAEncryption
09:c8:54:16:c1:db:f1:29:eb:1f:2b:e1:bd:ac:49:8f:bd:ab:
00:66:70:43:b8:8d:e0:a2:cc:af:36:60:bb:65:fb:c7:71:7b:
d2:a8:e6:0c:0c:e1:08:f2:b3:ec:51:3b:3f:4d:00:5d:1b:76:
b2:f2:0c:7d:4b:9d:1f:72:8f:05:79:d4:12:cf:5d:4f:91:07:
35:71:77:84:27:be:a5:83:bb:28:9b:b0:84:be:48:c0:86:9c:
59:b2:18:25:93:21:62:c3:72:4a:17:78:a0:b1:cb:20:8d:87:
b2:b2:5d:38:7d:3a:7b:60:7b:3e:5f:2d:32:a7:56:69:43:9c:
cc:ef:1a:53:09:f2:b1:1c:c8:bb:2a:8a:55:19:eb:b7:68:21:
fc:b0:f6:34:8d:0f:4b:65:1d:5a:7e:19:1b:80:0c:a4:98:4e:
36:df:87:60:80:ec:d1:cf:3c:f2:52:d0:7b:bb:d7:9f:8f:97:
c8:60:ed:d4:ad:fb:59:bb:a8:7a:de:49:aa:fc:06:d9:ac:00:
af:c3:d9:7f:64:7a:23:65:46:55:b5:3f:d6:fb:da:1e:96:ef:
9c:e0:ba:a1:b2:55:67:db:9b:08:31:0a:98:5a:70:93:92:5f:
6e:38:bc:b6:86:80:3f:fc:fc:08:f8:7b:e1:53:d5:8f:a1:37:
75:6d:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:59 2026 by rpki-client