
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Pdw116ghPaNWcK4YWENTC-iPm7k.roa
File: Pdw116ghPaNWcK4YWENTC-iPm7k.roa (raw, json)
Hash identifier: fS2xAQr9zLzwmtgKoi/t2tw32cWj1L/fgcFr0qvfX1E=
Subject key identifier: 3D:DC:35:D7:A8:21:3D:A3:56:70:AE:18:58:43:53:0B:E8:8F:9B:B9
Certificate issuer: /CN=9E1460D2688F6D1068B97C1F914040434B8F0324
Certificate serial: 5C
Authority key identifier: 9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Pdw116ghPaNWcK4YWENTC-iPm7k.roa
Signing time: Thu 13 Aug 2026 02:53:20 +0000
ROA not before: Thu 13 Aug 2026 02:53:20 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 45674
IP address blocks: 192.47.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 06:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E1460D2688F6D1068B97C1F914040434B8F0324
Validity
Not Before: Aug 13 02:53:20 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=3DDC35D7A8213DA35670AE185843530BE88F9BB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:2a:a8:4b:a7:e5:c6:da:01:0e:75:4f:b2:
d8:65:82:aa:b1:9b:2d:e8:fd:b8:19:a3:35:1c:e8:
36:49:21:5e:77:6b:ad:8f:01:87:0b:40:d5:64:32:
76:d0:42:59:b0:c4:b4:3b:05:3b:ed:c9:2f:e5:31:
fc:9e:27:f4:51:1f:e4:e4:e9:c0:a2:6c:49:27:17:
23:9f:1d:0c:fc:61:2e:58:ce:47:db:bb:61:26:bd:
d5:e0:11:29:ea:50:7c:1d:c0:de:cb:05:a4:ed:3b:
ac:a0:43:13:de:c1:18:3c:e2:dc:c4:c6:7b:3a:b9:
b5:14:f5:05:31:ab:26:38:31:8b:66:20:44:46:8b:
05:54:4d:06:44:97:c5:24:6e:23:9f:0e:db:5b:ee:
10:e5:a8:13:b8:2a:7a:c7:6b:7d:e2:c4:d1:00:c5:
7a:5f:e3:bf:ed:66:99:ad:60:7a:4c:3b:77:88:71:
c2:ff:7e:5e:ab:44:58:27:37:2b:ea:cf:16:5e:c7:
56:f2:f1:1f:d9:85:05:93:74:2e:9f:95:bc:01:cb:
5a:9f:ff:20:c9:35:e1:b9:6d:d7:6b:42:e2:88:88:
46:11:97:97:86:76:4a:0c:e0:c7:4f:22:f5:01:30:
c7:8b:57:b1:15:10:83:13:9a:89:82:b4:e1:08:62:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:35:D7:A8:21:3D:A3:56:70:AE:18:58:43:53:0B:E8:8F:9B:B9
X509v3 Authority Key Identifier:
keyid:9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/Pdw116ghPaNWcK4YWENTC-iPm7k.roa
sbgp-ipAddrBlock: critical
IPv4:
192.47.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:73:8b:af:d4:63:a6:d6:01:d7:00:fc:2c:06:7f:78:64:5c:
e7:2f:cb:d4:a4:69:18:e0:e2:00:2e:19:a3:89:b9:cb:93:6b:
49:13:e5:01:1e:43:7f:a2:36:81:e1:42:4e:cf:c8:00:5e:9a:
9f:b8:20:2b:6a:b4:e9:1d:e8:ce:5c:b2:9f:3c:9c:51:b3:dd:
fb:fb:a3:7f:ba:d7:4d:04:52:d7:0e:7d:e7:88:d5:ec:8d:6a:
82:77:75:8b:e6:92:61:b1:47:5a:2a:15:e9:dd:99:57:5f:1e:
47:38:45:5e:28:96:d8:6f:2b:a2:fd:ed:a9:d7:14:41:70:07:
58:b8:c8:59:a9:6a:a5:23:ab:fa:fa:30:72:8f:54:52:e6:51:
70:1b:29:b3:61:c0:4f:f9:42:5d:6b:d2:0d:75:0e:b9:6a:77:
88:41:b2:b0:f9:70:73:72:22:57:57:08:33:53:5f:b8:b7:82:
e5:49:e1:b6:8f:13:5e:9a:b7:17:ec:a0:59:01:49:16:08:18:
51:0d:89:c7:ce:56:b7:83:a1:4f:2a:61:0f:5b:ff:be:53:ce:
d3:c4:21:d8:76:eb:94:91:4e:f3:5a:23:9a:0c:1a:45:f0:8a:
2b:a7:20:57:cd:05:73:79:a2:d6:c3:38:1f:6b:d2:9c:56:06:
75:ae:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:07:57 2026 by rpki-client