
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/423/-2cgJie6j7F2Lb-TNb2JcAG-mEk.roa
File: -2cgJie6j7F2Lb-TNb2JcAG-mEk.roa (raw, json)
Hash identifier: Q/cltwyq1uRZrJ3WmVF/fQ5UT+SAHAT+mqovYRSU5wc=
Subject key identifier: FB:67:20:26:27:BA:8F:B1:76:2D:BF:93:35:BD:89:70:01:BE:98:49
Certificate issuer: /CN=2BE75FD02827D9FF899B9DD3E91D4F382BB56D49
Certificate serial: 14
Authority key identifier: 2B:E7:5F:D0:28:27:D9:FF:89:9B:9D:D3:E9:1D:4F:38:2B:B5:6D:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/-2cgJie6j7F2Lb-TNb2JcAG-mEk.roa
Signing time: Thu 18 Jun 2026 04:52:26 +0000
ROA not before: Thu 18 Jun 2026 04:52:26 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 9999
IP address blocks: 203.89.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BE75FD02827D9FF899B9DD3E91D4F382BB56D49
Validity
Not Before: Jun 18 04:52:26 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=FB67202627BA8FB1762DBF9335BD897001BE9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:0b:a6:85:c3:c8:58:03:60:e0:ed:2b:af:
11:a9:7f:79:a3:1f:d6:7a:1f:ee:25:65:db:03:cd:
71:b1:50:ac:80:3a:37:bd:53:07:b8:db:42:00:df:
ba:37:58:ad:58:e4:28:75:d3:5c:a4:5b:66:60:15:
8a:5c:46:6f:bf:b2:ec:35:b5:a2:fb:60:f3:d9:7b:
b5:68:fc:2a:0b:2d:06:9f:ab:31:d6:c6:3b:87:c6:
c2:fb:2e:2b:9c:32:47:0c:26:96:87:ed:86:2d:de:
fa:fc:6e:61:ea:13:09:ec:d1:db:03:98:03:08:0d:
c3:b4:a2:e7:2a:c8:0e:d4:9e:dc:cc:5e:f7:56:32:
4a:98:35:80:44:74:67:67:34:4b:94:63:52:7a:58:
eb:b3:07:1b:3a:68:b0:6b:c6:e5:a9:33:8d:53:d9:
2e:2d:fb:26:07:59:40:37:35:53:ed:f3:2e:fd:ef:
52:d3:dc:7b:c5:00:73:1c:ab:28:9c:e9:3d:4a:0e:
77:67:f3:a1:d9:6a:85:dc:f9:e8:d5:d6:9c:34:cf:
b2:31:b3:e7:29:25:93:cc:ee:55:bb:30:98:2b:55:
f2:d1:64:a0:91:12:92:33:23:7e:9c:60:ba:91:0f:
a6:3f:2e:bc:ba:5e:cd:10:d9:25:99:1d:fc:ff:e0:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:20:26:27:BA:8F:B1:76:2D:BF:93:35:BD:89:70:01:BE:98:49
X509v3 Authority Key Identifier:
keyid:2B:E7:5F:D0:28:27:D9:FF:89:9B:9D:D3:E9:1D:4F:38:2B:B5:6D:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/-2cgJie6j7F2Lb-TNb2JcAG-mEk.roa
sbgp-ipAddrBlock: critical
IPv4:
203.89.128.0/22
Signature Algorithm: sha256WithRSAEncryption
99:74:1a:1c:fb:2b:c1:ad:9d:74:81:5f:ad:4d:5a:f7:4b:4e:
94:0c:55:5d:31:2a:bc:46:f9:64:8c:ad:f3:20:0c:d7:21:3d:
92:61:11:8f:12:c2:7c:d7:33:07:41:cc:b5:9f:65:77:5a:b3:
b0:7e:ea:84:f1:8d:e5:ef:e1:ec:6c:b7:03:0a:8e:60:6c:93:
9d:5d:19:42:3c:db:8b:0e:35:bf:43:a9:bc:e8:83:c0:80:1d:
3b:27:04:2f:fe:70:fc:4a:64:9b:a0:eb:e9:93:11:4e:28:f3:
bd:ec:83:77:bb:16:ad:ca:b4:ee:1d:17:f3:76:ee:61:7a:74:
27:0f:9f:35:84:60:36:bd:9e:fa:17:5e:2e:f7:c3:5b:98:72:
3f:d0:58:a9:6d:07:d8:32:c7:66:8f:1d:69:71:aa:9f:a8:e6:
e4:ea:3c:28:ac:8b:4a:6c:9b:5f:95:81:0a:f4:70:e1:0b:a4:
92:d5:8e:59:7f:bd:49:b1:41:b0:f3:91:2c:03:0e:d2:cb:44:
2a:d0:6b:15:95:7a:bf:7e:fa:db:07:c9:82:0b:56:83:12:41:
65:5a:60:c3:64:1c:b8:33:f3:68:b0:72:14:01:b3:5c:0b:5e:
68:ad:81:80:60:2f:22:eb:06:26:ee:d5:45:f0:d4:70:10:c6:
bb:3f:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:25 2026 by rpki-client