
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20276/riyIRWDdIvdxusQUoNur8IpCeWM.roa
File: riyIRWDdIvdxusQUoNur8IpCeWM.roa (raw, json)
Hash identifier: +Je+QUdyyEov70QU3y1bEF/91jijQO3vp32a4dMlc6U=
Subject key identifier: AE:2C:88:45:60:DD:22:F7:71:BA:C4:14:A0:DB:AB:F0:8A:42:79:63
Certificate issuer: /CN=7D93A99E1B79A1343479DBFBB7C278F5B3BAD486
Certificate serial: 03
Authority key identifier: 7D:93:A9:9E:1B:79:A1:34:34:79:DB:FB:B7:C2:78:F5:B3:BA:D4:86
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/riyIRWDdIvdxusQUoNur8IpCeWM.roa
Signing time: Wed 10 Jun 2026 07:16:29 +0000
ROA not before: Wed 10 Jun 2026 07:16:29 +0000
ROA not after: Thu 10 Jun 2027 07:05:16 +0000
asID: 55383
IP address blocks: 165.99.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D93A99E1B79A1343479DBFBB7C278F5B3BAD486
Validity
Not Before: Jun 10 07:16:29 2026 GMT
Not After : Jun 10 07:05:16 2027 GMT
Subject: CN=AE2C884560DD22F771BAC414A0DBABF08A427963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:e5:e2:58:56:db:09:34:99:02:cb:73:58:
8d:1f:b7:59:e3:2e:6f:c8:0e:d2:ea:af:e4:11:fb:
f0:fc:93:d2:8f:fb:0e:19:a6:ef:e9:a9:79:eb:c4:
52:93:ff:16:04:95:e1:e4:d5:9a:16:e4:ba:93:d0:
ac:7a:78:2f:bd:c6:35:a0:cd:e9:0f:a4:37:84:e7:
c7:96:74:de:9b:ca:ff:54:e7:1e:92:3a:77:2c:c1:
d1:fb:ff:fd:eb:8e:31:52:ce:9e:16:9f:a8:79:f2:
5b:2d:57:a0:ae:cd:09:32:89:4d:ec:4c:bc:11:75:
3d:9e:aa:20:82:bd:94:d7:4f:62:a9:0a:d9:32:2a:
20:a8:03:3c:3e:bc:92:6a:af:6e:25:b0:f8:21:ce:
5d:73:83:21:be:e7:7e:d3:92:1d:2b:9c:c6:55:dc:
81:3d:3e:74:d8:82:06:55:c2:d4:b3:d3:da:75:34:
3e:6e:db:7c:79:48:b5:3e:7d:22:58:47:ea:c0:9b:
44:68:4e:96:f6:79:ab:56:8a:c6:a3:6f:9a:a7:bb:
7d:5a:22:86:45:ce:a1:27:ff:11:2e:1a:12:b7:66:
fd:a0:e8:a5:13:f2:6e:00:1a:4c:fd:7e:fb:98:f0:
8e:4d:32:7c:2d:2f:72:8e:10:fb:7e:b8:dc:50:e1:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2C:88:45:60:DD:22:F7:71:BA:C4:14:A0:DB:AB:F0:8A:42:79:63
X509v3 Authority Key Identifier:
keyid:7D:93:A9:9E:1B:79:A1:34:34:79:DB:FB:B7:C2:78:F5:B3:BA:D4:86
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/fZOpnht5oTQ0edv7t8J49bO61IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fZOpnht5oTQ0edv7t8J49bO61IY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20276/riyIRWDdIvdxusQUoNur8IpCeWM.roa
sbgp-ipAddrBlock: critical
IPv4:
165.99.246.0/23
Signature Algorithm: sha256WithRSAEncryption
61:89:ce:7f:c0:e2:54:f8:e0:f9:0b:6c:09:7f:e9:db:e2:60:
23:15:cb:2b:84:1c:ad:ca:2f:ea:05:c6:7f:12:7a:8b:6b:33:
cf:53:95:b3:67:53:24:59:4a:66:e4:ee:ad:f1:4f:67:94:b5:
79:20:e4:02:14:e1:da:7e:ca:5f:15:fc:af:78:b9:65:c2:96:
f6:52:ad:b5:27:d0:e6:60:f3:7f:25:70:64:2f:91:8d:db:50:
45:f2:a2:10:1e:86:cb:c5:0e:90:f9:72:e6:ec:66:c8:c8:9f:
c1:d6:5a:44:5a:d9:2c:32:06:bf:1a:43:1f:6e:d4:a7:c1:cf:
c9:51:74:b3:a7:08:4d:51:17:d8:c0:cb:2f:83:62:5d:c2:27:
b0:dd:58:af:53:8a:3a:eb:80:89:17:d7:03:4f:11:4b:d9:5a:
90:6e:6c:cc:db:54:19:b6:0e:52:49:ca:22:50:7e:79:21:cf:
04:b6:78:b7:c5:57:08:b4:52:01:69:85:4e:70:03:9c:8e:7b:
57:7e:cd:e1:d3:dd:a9:19:25:6e:56:f6:20:b3:ab:9e:a0:f7:
2a:a5:e1:d2:1e:b8:c7:a3:61:c6:c2:d6:ea:f5:e4:eb:f0:60:
ae:0b:91:3a:5d:a3:7f:eb:5c:dd:19:ba:ba:15:23:33:56:97:
09:83:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 18:56:04 2026 by rpki-client