
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/-DOPU_1goar2AepIfIjRlSmeLzU.roa
File: -DOPU_1goar2AepIfIjRlSmeLzU.roa (raw, json)
Hash identifier: 25zesMq3TNWA58Q0J66nAPpKBpou8darXnotfx8wU+Y=
Subject key identifier: F8:33:8F:53:FD:60:A1:AA:F6:01:EA:48:7C:88:D1:95:29:9E:2F:35
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 57
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/-DOPU_1goar2AepIfIjRlSmeLzU.roa
Signing time: Wed 20 May 2026 02:17:55 +0000
ROA not before: Wed 20 May 2026 02:17:55 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 220.147.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 20 02:17:55 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=F8338F53FD60A1AAF601EA487C88D195299E2F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:c0:f7:31:e2:39:0c:82:d6:b5:a5:d8:4e:
8b:8f:23:7c:72:88:5a:ae:df:92:b9:27:ae:6e:11:
e8:9a:86:d0:05:df:e6:0c:a2:30:4d:2e:64:41:d5:
59:50:d3:8b:67:15:28:77:44:a3:d4:65:00:8d:d6:
2b:8a:20:dd:ec:5a:8f:8f:27:d4:56:15:db:11:2d:
39:c3:7b:84:f8:d2:71:bf:2e:b4:e3:cf:bf:a0:e8:
18:d6:35:00:66:05:35:5e:4f:c3:14:bc:3a:5b:f0:
5e:bd:d4:f0:ef:09:23:1a:44:36:04:2a:d1:f0:3a:
00:90:bc:f2:01:9c:8d:83:aa:4d:a4:e9:22:fb:5e:
11:84:fe:04:b0:83:af:b0:d5:18:0c:07:c6:7d:49:
69:c3:ea:ca:44:8d:12:85:a7:0a:bd:14:07:d6:53:
ed:c3:d4:7b:0d:5f:2e:1a:be:fd:aa:11:64:e6:09:
9b:92:54:a5:73:96:82:3b:8b:84:92:80:f9:33:5b:
15:13:45:4d:06:e1:5d:b7:35:6e:2d:6f:b6:c1:1a:
02:21:a2:bd:d8:06:17:9e:d0:bd:fd:46:23:2c:61:
da:95:13:67:ca:e5:eb:6b:62:73:23:f3:c8:a2:c5:
d5:6f:74:de:62:36:7f:17:97:46:e2:fb:e3:fe:9a:
c4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:8F:53:FD:60:A1:AA:F6:01:EA:48:7C:88:D1:95:29:9E:2F:35
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/-DOPU_1goar2AepIfIjRlSmeLzU.roa
sbgp-ipAddrBlock: critical
IPv4:
220.147.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3f:6f:d0:c0:d8:5c:03:b1:fe:b7:00:03:7d:18:78:cd:b1:8f:
93:a5:d1:cf:2d:88:fb:50:7f:64:ca:cb:1e:3f:23:fa:81:6e:
cc:e2:66:fa:da:22:f3:0d:f6:16:75:a8:5e:0a:ce:15:24:bd:
56:54:4d:4b:bf:6b:c6:04:5c:2a:04:02:16:71:14:aa:78:07:
58:72:d9:5b:62:cf:4b:df:95:9f:15:2b:af:0b:c1:28:6a:df:
85:34:65:10:ae:23:61:d6:35:b1:79:75:60:e0:30:4d:a3:72:
25:54:64:ab:78:ea:5a:87:d2:7b:4e:82:f8:ff:ca:5c:f1:c8:
f7:fc:9a:00:85:dd:bb:fa:47:d6:f3:c4:bc:e1:44:60:31:d6:
b9:c7:fc:00:b3:48:fb:9e:eb:a2:34:56:f2:0f:a8:f7:9c:ee:
05:06:2d:96:df:8e:f8:79:ac:48:aa:06:3b:92:c8:d8:59:a3:
28:35:f7:0c:f1:66:89:2f:9f:2e:ed:12:9c:31:b9:55:c4:51:
30:ca:bc:73:3c:e4:1e:20:ad:0b:61:9f:fa:86:83:ae:c3:f6:
85:7b:14:86:f1:4b:7f:39:4b:fe:77:e2:1a:e6:18:1b:ec:c2:
eb:4e:f5:28:b7:5e:70:72:cc:b0:62:d0:f6:53:14:c3:dc:27:
33:3e:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:06 2026 by rpki-client