
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/oGc05reXnMn4S2OaMUXWUUmCL6o.roa
File: oGc05reXnMn4S2OaMUXWUUmCL6o.roa (raw, json)
Hash identifier: yU0mXTFR5Y0/HrTprspLNWciTh6eNTYiHqsVt6tYAMs=
Subject key identifier: A0:67:34:E6:B7:97:9C:C9:F8:4B:63:9A:31:45:D6:51:49:82:2F:AA
Certificate issuer: /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial: 04
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/oGc05reXnMn4S2OaMUXWUUmCL6o.roa
Signing time: Mon 03 Aug 2026 06:34:39 +0000
ROA not before: Mon 03 Aug 2026 06:34:39 +0000
ROA not after: Tue 03 Aug 2027 00:26:42 +0000
asID: 131965
IP address blocks: 153.115.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Validity
Not Before: Aug 3 06:34:39 2026 GMT
Not After : Aug 3 00:26:42 2027 GMT
Subject: CN=A06734E6B7979CC9F84B639A3145D65149822FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:9d:b0:ca:5e:1b:d2:c7:35:b8:e4:b2:a9:
dd:e0:1d:32:5b:30:d4:07:83:96:60:ee:00:45:a9:
63:3c:d8:4f:ea:d8:cc:64:62:1e:99:68:ae:1d:e4:
fc:44:ed:8d:49:f3:1f:c5:16:00:4d:bd:7d:77:bd:
a2:51:cc:45:d6:5c:47:f3:93:f9:76:0f:6b:c0:9e:
26:34:c9:3e:ec:78:6b:1f:cd:f2:6f:b9:8d:34:df:
13:5f:34:b8:76:3c:54:af:6d:45:33:c6:7d:5f:d2:
af:78:02:c6:42:4f:f6:2e:40:55:b4:f2:1e:17:0e:
bd:c8:25:25:18:b2:e7:39:a7:39:e7:58:2c:13:5a:
aa:2d:02:e8:76:a9:7d:9d:80:a8:f9:12:7a:ef:2a:
31:5e:d2:55:18:e7:e6:20:83:c7:e7:ba:67:f1:37:
a6:99:44:50:4e:fc:c7:b6:73:eb:7b:c5:bb:3f:96:
37:47:06:94:fa:98:36:85:64:f1:c7:7b:d7:2f:5f:
bb:2b:b8:b2:9c:35:cf:ea:18:01:df:d5:70:13:25:
9c:8d:7f:4b:56:18:7e:f2:9b:ee:93:2d:05:c6:b4:
33:b9:14:89:13:8e:81:62:a7:c6:a3:24:48:af:41:
bf:37:cb:88:3c:11:3d:37:c0:12:dd:a3:30:4d:8d:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:67:34:E6:B7:97:9C:C9:F8:4B:63:9A:31:45:D6:51:49:82:2F:AA
X509v3 Authority Key Identifier:
keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/oGc05reXnMn4S2OaMUXWUUmCL6o.roa
sbgp-ipAddrBlock: critical
IPv4:
153.115.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:00:77:66:db:31:b5:5c:7b:a3:54:fe:fe:2f:76:65:cc:ab:
0b:28:08:3a:17:d2:4c:10:9f:44:9b:f5:57:c1:b2:ed:b0:ea:
08:3c:6f:65:99:30:67:23:61:4d:81:14:2e:79:99:dc:fd:7e:
ac:39:8f:8c:ba:20:9d:14:fe:a0:21:81:37:7a:12:80:c4:95:
09:01:66:f5:8f:06:f0:d3:43:a8:47:24:6f:b7:55:6e:ac:33:
c0:71:b7:0c:b4:be:84:ea:5c:45:ef:70:57:7d:3c:9b:ee:f9:
29:24:e5:74:91:dc:e4:1d:50:b7:51:f9:d2:e2:1c:93:f3:6a:
18:02:55:e0:2a:59:81:f0:ac:b8:29:2f:b8:e9:e0:f6:d7:9a:
d3:42:3f:f4:c3:7b:5c:f5:7b:5b:bd:a4:0b:21:16:9a:eb:a3:
e6:cc:81:19:b4:98:9f:ff:f7:32:6e:d9:d9:84:22:ba:80:48:
1a:30:15:63:6f:0e:f4:aa:bd:52:d8:fe:d7:c4:5f:3b:45:d8:
32:b6:89:29:b8:fb:17:39:c4:e2:e0:69:f5:8e:01:1d:ac:70:
80:78:10:cd:a1:3e:72:06:d6:af:32:dd:98:ff:9a:ab:e6:c5:
17:5d:33:ca:86:c6:99:ea:70:9a:2a:c4:39:55:c5:73:d2:51:
bb:47:b5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:22:49 2026 by rpki-client