
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/39066/Vk1XZ4uUSSq-2TeAIXdDjJckabs.roa
File: Vk1XZ4uUSSq-2TeAIXdDjJckabs.roa (raw, json)
Hash identifier: o4PUxkseRcMY78BabZdBfBEEqHTq6gXJiZjs1U38FP8=
Subject key identifier: 56:4D:57:67:8B:94:49:2A:BE:D9:37:80:21:77:43:8C:97:24:69:BB
Certificate issuer: /CN=136FCCEC27A392367C797BBC15256B0F26AE8D3B
Certificate serial: 02
Authority key identifier: 13:6F:CC:EC:27:A3:92:36:7C:79:7B:BC:15:25:6B:0F:26:AE:8D:3B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E2_M7CejkjZ8eXu8FSVrDyaujTs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39066/Vk1XZ4uUSSq-2TeAIXdDjJckabs.roa
Signing time: Tue 01 Sep 2026 03:31:28 +0000
ROA not before: Tue 01 Sep 2026 03:31:28 +0000
ROA not after: Tue 31 Aug 2027 00:37:16 +0000
asID: 131158
IP address blocks: 2001:df3:540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39066/E2_M7CejkjZ8eXu8FSVrDyaujTs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39066/E2_M7CejkjZ8eXu8FSVrDyaujTs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E2_M7CejkjZ8eXu8FSVrDyaujTs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=136FCCEC27A392367C797BBC15256B0F26AE8D3B
Validity
Not Before: Sep 1 03:31:28 2026 GMT
Not After : Aug 31 00:37:16 2027 GMT
Subject: CN=564D57678B94492ABED937802177438C972469BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:5e:e6:20:bf:cc:92:d8:1f:a6:9c:03:54:
f0:76:87:09:d3:32:83:42:af:90:59:b6:1b:9a:f7:
82:d6:32:47:ba:b0:37:04:32:e8:89:e1:80:25:6a:
64:81:1a:f8:6b:2a:27:32:ea:9b:02:0d:d7:05:bc:
f1:a5:2d:3f:6b:43:96:8a:2b:01:85:bd:b2:b0:7d:
ab:c5:8e:ea:40:5e:bf:c0:9e:06:25:1f:b2:5f:3e:
c7:d7:3f:21:91:e5:16:77:25:8f:3b:9f:31:f4:08:
de:8f:f2:cf:27:d5:7a:f3:41:0e:82:95:22:de:ce:
1f:4b:6c:b5:81:6c:77:3a:92:f2:85:0d:73:37:93:
84:d7:26:46:d1:3e:ba:35:a8:f7:cd:c8:f1:3e:3a:
da:58:39:57:20:b6:1f:c5:6a:7d:e8:0d:8b:22:6a:
74:bf:e2:e4:ac:84:d4:45:24:54:ad:4f:e1:a6:c8:
51:23:e3:0d:42:34:f7:71:f4:74:a3:b4:68:79:a3:
27:89:21:ac:67:23:fe:44:76:ab:eb:bb:71:7e:c3:
22:d8:aa:6f:34:f7:bc:0e:8a:e3:f5:58:e6:b6:a9:
8f:30:1b:56:25:27:d2:c5:1c:22:65:3e:ca:2e:a1:
47:c0:6e:ca:1b:8f:df:a8:3c:87:80:a5:3f:a0:4a:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4D:57:67:8B:94:49:2A:BE:D9:37:80:21:77:43:8C:97:24:69:BB
X509v3 Authority Key Identifier:
keyid:13:6F:CC:EC:27:A3:92:36:7C:79:7B:BC:15:25:6B:0F:26:AE:8D:3B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39066/E2_M7CejkjZ8eXu8FSVrDyaujTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E2_M7CejkjZ8eXu8FSVrDyaujTs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39066/Vk1XZ4uUSSq-2TeAIXdDjJckabs.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:540::/48
Signature Algorithm: sha256WithRSAEncryption
2c:7c:a1:3f:5a:ae:28:79:0a:b8:d0:92:4b:74:0d:fc:99:46:
ec:59:76:6c:95:0a:0d:39:00:0e:0d:3b:db:59:c6:8c:75:e3:
1b:68:3c:e0:86:20:77:2c:5d:a7:18:e1:48:d7:97:32:5b:ce:
88:5b:b3:0b:8e:05:7e:50:5a:87:d3:98:8e:9d:7c:f8:06:4f:
8a:8a:b9:35:16:91:54:de:64:33:9a:09:c6:67:a9:22:a7:56:
16:13:59:35:8e:23:34:74:8d:a1:15:93:49:61:fe:90:3d:f7:
e0:9e:89:73:da:9b:b9:e8:fa:e1:ce:65:a0:c6:98:7e:15:5d:
2c:81:4a:8b:f6:50:02:cd:d7:a4:73:4d:51:3d:e6:9e:4e:57:
f3:0a:37:43:5b:86:16:11:4f:5f:1d:37:8c:f5:ab:b2:b4:9c:
ac:a5:9d:72:8a:f4:95:ff:dd:14:4c:ed:1a:85:d6:82:8d:fc:
a1:7b:21:52:0c:43:2a:53:1d:5b:97:3b:20:5d:86:96:c1:2b:
2d:c4:8c:18:61:e3:52:a3:32:f1:f8:09:04:40:b7:d8:54:5d:
11:98:96:ca:27:f3:a1:ea:09:b5:6c:69:e0:53:f0:ff:38:f1:
e1:12:11:d1:1d:55:cd:19:4d:51:b0:46:96:e4:08:6c:76:99:
9d:b7:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:39:12 2026 by rpki-client