
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30462/-EW8XhXuogR17RiBQdtFB_uEY7U.roa
File: -EW8XhXuogR17RiBQdtFB_uEY7U.roa (raw, json)
Hash identifier: uqUhMDO4hoBp69lbHUxhEKwdnzDSVpDgmVjRYhpDAQc=
Subject key identifier: F8:45:BC:5E:15:EE:A2:04:75:ED:18:81:41:DB:45:07:FB:84:63:B5
Certificate issuer: /CN=AE1EFBF607BD33D8A7CD33CD79481491A6C5581A
Certificate serial: 02
Authority key identifier: AE:1E:FB:F6:07:BD:33:D8:A7:CD:33:CD:79:48:14:91:A6:C5:58:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rh779ge9M9inzTPNeUgUkabFWBo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/-EW8XhXuogR17RiBQdtFB_uEY7U.roa
Signing time: Mon 03 Aug 2026 06:36:55 +0000
ROA not before: Mon 03 Aug 2026 06:36:55 +0000
ROA not after: Tue 03 Aug 2027 06:31:46 +0000
asID: 131965
IP address blocks: 2400:b1a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rh779ge9M9inzTPNeUgUkabFWBo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1EFBF607BD33D8A7CD33CD79481491A6C5581A
Validity
Not Before: Aug 3 06:36:55 2026 GMT
Not After : Aug 3 06:31:46 2027 GMT
Subject: CN=F845BC5E15EEA20475ED188141DB4507FB8463B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:66:5e:74:a2:93:1b:3c:45:4a:56:7c:66:
52:79:91:69:a1:5c:71:0e:c3:12:66:7a:c5:b2:47:
ef:33:41:cf:19:13:fd:dd:0d:59:88:5a:68:5e:1f:
18:90:b3:85:84:ad:99:2d:34:59:bc:68:aa:32:fb:
18:e3:2e:8c:14:d4:0c:86:44:bb:ab:4a:6a:6b:9f:
c6:05:cd:fd:9f:e4:3c:15:20:48:7b:cf:99:f3:8a:
c6:ec:fc:f0:e5:39:e0:8b:a1:5e:6d:fe:af:29:d3:
0f:d6:d0:97:af:7f:ef:a1:7a:c7:a2:03:7e:fb:cb:
b7:97:68:5b:fd:c8:37:99:55:2b:c0:b2:3f:69:dd:
09:31:f7:6d:b4:8d:32:15:a5:20:63:fb:73:53:94:
fe:09:a2:71:31:bb:21:a1:96:7c:8a:56:e2:a9:cf:
5b:53:73:83:03:e9:ff:8e:3d:f7:af:90:66:a4:43:
80:00:83:9e:f2:cc:65:85:c0:86:6f:91:0d:ed:72:
74:bf:40:bc:ff:46:ba:75:b9:91:8f:42:9e:90:ae:
9b:f2:4a:85:bf:dc:83:6c:dc:5e:3b:4f:bb:e7:ea:
bd:0c:8c:64:dd:1b:d2:91:23:0a:d3:f7:5d:b8:57:
ab:4b:d1:d2:f0:60:06:24:8a:60:67:62:6c:ed:77:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:45:BC:5E:15:EE:A2:04:75:ED:18:81:41:DB:45:07:FB:84:63:B5
X509v3 Authority Key Identifier:
keyid:AE:1E:FB:F6:07:BD:33:D8:A7:CD:33:CD:79:48:14:91:A6:C5:58:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rh779ge9M9inzTPNeUgUkabFWBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/-EW8XhXuogR17RiBQdtFB_uEY7U.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:b1a0::/32
Signature Algorithm: sha256WithRSAEncryption
32:86:7e:73:68:9a:4d:e7:58:d9:9a:5e:54:41:1e:f0:4e:99:
a8:30:27:11:10:be:3a:d7:f9:27:83:97:1c:87:f9:f1:8b:22:
e3:9e:56:d7:cb:bb:a1:42:a7:87:b1:ff:e7:57:8e:3d:f5:87:
8d:3e:36:f6:76:5c:a1:42:a3:d9:34:99:e2:c9:bc:2a:91:73:
cc:16:c8:06:0f:9f:f1:ea:17:22:a1:1f:b4:ce:e8:c0:3f:db:
cb:d0:c1:77:3b:6c:a6:af:06:87:8c:8c:d5:a7:72:00:04:a7:
01:7c:46:14:93:78:dc:79:3a:c1:3d:ff:93:61:d5:b5:b2:6f:
e0:bc:4d:30:45:2e:ad:d5:25:05:56:d8:d5:90:9a:43:b1:5a:
fd:f3:9b:4a:b4:d8:8e:23:cf:7b:af:83:66:3d:25:14:2a:c9:
fb:a3:2a:c5:84:dc:11:37:f0:1c:fd:64:6d:66:e7:c7:0c:ec:
54:03:c0:5d:c4:85:87:9e:d1:c5:8c:cf:e4:74:93:2d:ad:b8:
59:e8:27:80:9b:fe:db:49:bf:f0:47:b4:5c:19:b0:5a:4c:ff:
17:7e:aa:48:85:12:85:27:17:3c:5c:d4:80:76:f2:57:62:59:
cc:9d:4e:dc:b0:d1:62:3b:e7:a9:ae:b3:c5:6f:d1:85:86:18:
76:1e:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:29:55 2026 by rpki-client