
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/02uBHAWDvI-_RaGTqzrP0u4kb_g.roa
File: 02uBHAWDvI-_RaGTqzrP0u4kb_g.roa (raw, json)
Hash identifier: SZ8OHCtPmZ2mGOsNZJpJZScSkJT2kVXBCQUkHTJht0U=
Subject key identifier: D3:6B:81:1C:05:83:BC:8F:BF:45:A1:93:AB:3A:CF:D2:EE:24:6F:F8
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 9E
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/02uBHAWDvI-_RaGTqzrP0u4kb_g.roa
Signing time: Wed 29 Jul 2026 02:45:46 +0000
ROA not before: Wed 29 Jul 2026 02:45:46 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2519
IP address blocks: 133.32.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 15:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jul 29 02:45:46 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=D36B811C0583BC8FBF45A193AB3ACFD2EE246FF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:53:05:42:70:79:41:9f:03:35:45:4c:65:
fb:f2:a7:dd:b7:d1:98:fd:14:8e:5e:e7:19:55:63:
a5:f6:4d:e3:0e:64:ed:43:48:c3:89:fe:cb:51:4f:
d1:ac:22:95:04:8d:0d:60:59:d1:43:3e:33:e2:b0:
59:a5:35:6f:8c:52:64:62:15:cf:ab:e3:c2:c8:52:
07:db:32:8a:99:fc:2b:ce:7e:c9:81:c9:3f:70:7a:
a9:72:3d:bd:89:12:00:b4:06:43:a6:c1:6c:9b:1c:
9d:d2:0b:a2:94:b0:d9:dd:c4:50:8f:c1:48:0b:08:
24:7b:7d:a1:50:42:4d:3e:fc:ff:73:a2:50:de:8a:
97:42:fe:db:95:24:1b:59:ab:11:e9:c0:47:ec:a6:
a4:c3:d3:b7:43:8c:98:a2:cf:e7:7f:fe:1b:2c:1e:
ba:0d:d5:8e:93:58:cb:89:94:f4:1d:56:d6:37:04:
bb:8e:bd:a7:9d:2b:cc:d8:c5:a6:b1:17:ee:ee:54:
b8:2d:6b:73:0c:2d:84:5c:85:21:10:68:87:1f:b0:
ae:8a:ec:6f:61:4e:ee:1b:6c:db:49:d6:fe:ed:a4:
94:1f:3e:ad:15:e4:42:27:5c:95:57:65:ca:f5:78:
fd:0e:bf:28:8c:fa:e7:66:48:23:d1:c5:45:d5:07:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:81:1C:05:83:BC:8F:BF:45:A1:93:AB:3A:CF:D2:EE:24:6F:F8
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/02uBHAWDvI-_RaGTqzrP0u4kb_g.roa
sbgp-ipAddrBlock: critical
IPv4:
133.32.208.0/20
Signature Algorithm: sha256WithRSAEncryption
96:7d:15:f2:9a:60:ca:bf:b9:b5:b3:82:ab:3e:c2:be:e4:b0:
3f:b1:44:60:39:1f:35:3b:a9:e0:1b:b9:04:41:b9:b5:65:b1:
94:e9:f8:43:91:71:61:fc:dd:ad:24:e3:09:4e:61:1a:03:6a:
9f:ab:99:d3:0e:68:38:9c:f0:ba:5a:85:fa:eb:1c:1a:59:dc:
65:40:9c:c3:c0:e6:80:8c:26:84:c7:d0:c3:b7:24:0d:84:c6:
d4:61:4d:fe:b9:fc:47:28:87:0b:3b:db:b5:ec:64:06:5f:41:
01:81:38:4a:4a:8c:aa:df:12:7a:b9:e3:4f:2d:ab:86:93:74:
d0:45:80:bd:df:38:e4:fb:ae:80:a4:cf:d4:2e:22:d0:56:ae:
e3:cc:53:bc:cc:a8:1c:d1:0d:01:7c:3c:e3:07:16:94:df:e2:
08:92:10:aa:0a:d5:14:1e:a3:05:51:20:ff:88:cf:05:e7:b8:
ba:7b:ac:04:94:d2:99:6c:86:55:12:70:13:e3:ae:4f:8d:3f:
5a:15:64:e2:a0:9d:9a:d6:60:74:75:4a:3d:a2:e5:46:e7:3a:
16:cd:74:5b:66:ae:97:a8:8b:7a:48:a5:86:55:9d:3f:a6:d1:
13:f4:75:e0:c5:6f:ec:25:a9:39:c8:62:20:25:67:c9:f1:35:
e3:ed:23:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:13 2026 by rpki-client