
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/IKqWyvOcHPLdnX7FQU_KKa2Ocdk.roa
File: IKqWyvOcHPLdnX7FQU_KKa2Ocdk.roa (raw, json)
Hash identifier: PAxEC1/40ZvF8TUAVuglgCalL2JRLBN27GS5iA8Xt04=
Subject key identifier: 20:AA:96:CA:F3:9C:1C:F2:DD:9D:7E:C5:41:4F:CA:29:AD:8E:71:D9
Certificate issuer: /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial: 92
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/IKqWyvOcHPLdnX7FQU_KKa2Ocdk.roa
Signing time: Thu 25 Jun 2026 13:06:56 +0000
ROA not before: Thu 25 Jun 2026 13:06:56 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 18071
IP address blocks: 133.183.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Validity
Not Before: Jun 25 13:06:56 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=20AA96CAF39C1CF2DD9D7EC5414FCA29AD8E71D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:9a:03:c1:d0:48:92:84:41:c2:82:99:8a:
a0:7d:27:4d:34:61:4d:8e:f1:bc:5d:3a:00:84:d5:
73:f7:f8:e5:37:15:86:f4:c8:3e:8d:45:77:65:ac:
f8:56:4b:b9:e2:b6:02:3a:0e:09:45:68:a4:33:5d:
ee:a2:45:31:e7:da:eb:e7:c0:a4:9e:75:d0:7c:e2:
9b:48:1b:27:e7:78:7f:de:5c:6d:af:f7:1a:86:52:
23:ff:20:88:48:7d:22:a6:cb:9f:f3:48:c3:24:df:
67:30:4d:3f:d7:39:5e:27:a2:5c:d0:e4:57:26:d4:
56:1e:ea:0f:01:b0:79:8a:9e:e1:91:97:53:6d:41:
35:3e:39:9c:47:05:90:de:67:00:c2:ad:7b:fb:45:
04:fb:39:d5:d8:4c:40:c8:bb:50:1c:f0:7b:16:3e:
4d:de:ad:ac:d9:0b:88:fa:af:32:f3:95:11:60:d7:
4f:f0:1f:bb:2a:2b:f8:17:4a:fe:29:0d:a6:4c:7b:
74:07:1e:5a:57:76:80:55:41:bc:cb:f8:49:4e:34:
61:ef:79:c6:c9:f0:1e:28:a9:50:8d:8b:24:20:27:
33:6f:79:9a:83:2b:84:5d:db:ad:ad:56:13:6d:0e:
a1:a2:26:f0:b8:58:d0:de:d8:ed:49:00:0f:45:5b:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AA:96:CA:F3:9C:1C:F2:DD:9D:7E:C5:41:4F:CA:29:AD:8E:71:D9
X509v3 Authority Key Identifier:
keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/IKqWyvOcHPLdnX7FQU_KKa2Ocdk.roa
sbgp-ipAddrBlock: critical
IPv4:
133.183.160.0/19
Signature Algorithm: sha256WithRSAEncryption
56:c2:1d:01:3c:58:ab:ee:52:7e:32:a5:14:4c:78:d1:61:9b:
e6:76:f6:2c:2f:00:24:00:7f:9c:98:4a:6c:55:e5:c0:51:15:
f2:a4:f5:41:34:7e:13:b0:6e:b5:12:13:0f:cc:ec:eb:20:85:
49:0c:73:5f:ca:ef:f7:a8:a6:72:78:48:56:93:54:cf:72:db:
b8:43:49:13:55:14:a3:d3:c2:7c:0c:44:30:5b:b8:e5:a6:ca:
79:ef:69:0c:84:b7:27:8b:b7:54:5a:47:51:68:ed:fb:4f:42:
52:f2:59:11:14:c3:e3:be:4c:15:d9:c1:ab:9c:d8:b4:f2:ed:
11:ff:4d:57:de:f9:9a:ec:4d:ef:c3:9d:a1:ad:22:2f:13:c7:
96:08:94:bb:ae:58:92:04:e2:a9:89:ca:ad:7b:7d:d7:31:30:
46:37:9d:e6:fd:af:6f:3c:50:53:7d:66:c1:db:bb:23:13:66:
31:3f:ff:4f:bb:ba:ab:40:e4:56:c1:af:be:30:51:5c:50:55:
3e:f6:e0:0a:33:ef:eb:48:51:81:af:d6:3f:ac:a9:88:af:42:
f6:94:5c:8c:1f:6f:84:67:bb:dc:51:e4:11:90:e0:bf:0c:cd:
b1:ea:25:32:11:86:02:1b:56:dc:ed:5e:79:cc:df:cd:60:7b:
49:ce:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:59 2026 by rpki-client