
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/1hw_XalJyPkY8SrYCUOG_KT5a0U.roa
File: 1hw_XalJyPkY8SrYCUOG_KT5a0U.roa (raw, json)
Hash identifier: mQACGoScAajofqU5jY2Fj0YgTCJbBq0kPFEHflX3hsY=
Subject key identifier: D6:1C:3F:5D:A9:49:C8:F9:18:F1:2A:D8:09:43:86:FC:A4:F9:6B:45
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 7B
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1hw_XalJyPkY8SrYCUOG_KT5a0U.roa
Signing time: Tue 30 Jun 2026 01:13:41 +0000
ROA not before: Tue 30 Jun 2026 01:13:41 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 2519
IP address blocks: 36.3.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 30 01:13:41 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=D61C3F5DA949C8F918F12AD8094386FCA4F96B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:e0:71:45:c2:69:79:fa:55:35:8f:df:dd:
57:2d:8f:20:2c:25:5f:75:cd:72:e5:6e:07:a7:02:
af:91:42:99:4c:36:fe:1d:51:25:fa:6b:f6:97:81:
fb:d0:0d:46:7a:6a:e3:bb:e3:35:35:d4:ba:36:4d:
d0:87:58:e3:7d:5e:44:65:dc:b6:22:ac:f0:70:4d:
c3:12:b8:04:f5:53:a2:b1:e3:d4:62:23:80:72:ef:
0a:d3:16:f1:2f:c5:8d:9c:63:6b:ab:73:69:9b:fd:
b5:5f:e2:78:f5:72:93:c8:e2:c7:26:3f:f7:9a:4d:
7a:ed:94:74:9e:df:86:4f:e9:14:6f:20:5c:54:3f:
e4:4c:a3:2d:17:00:cd:9d:58:c8:59:41:23:70:80:
30:32:35:a4:2f:c1:ca:09:81:1e:aa:bd:61:cf:45:
38:44:0e:cf:c4:91:98:5e:b1:1f:e2:a4:02:26:85:
a1:4e:41:1d:71:1b:3a:2b:26:bb:de:f4:f6:40:6c:
07:42:4b:cd:87:03:1a:8a:cd:44:c5:78:6f:47:e4:
03:97:cd:d4:12:c1:92:71:9c:ff:e8:4c:2e:79:10:
ff:76:0e:86:98:a0:d3:10:f5:b8:b4:70:92:84:94:
1f:3a:42:c4:cd:51:8e:9d:85:9e:ac:05:c9:96:f6:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:3F:5D:A9:49:C8:F9:18:F1:2A:D8:09:43:86:FC:A4:F9:6B:45
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1hw_XalJyPkY8SrYCUOG_KT5a0U.roa
sbgp-ipAddrBlock: critical
IPv4:
36.3.128.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:5b:de:a5:8f:5f:01:7b:e4:23:04:79:7e:11:e4:9e:89:72:
02:c4:e3:a2:94:8a:2c:a7:47:f0:d9:e9:a0:97:49:58:64:02:
2a:9a:05:c4:57:cc:90:3c:23:1c:ab:b9:64:47:26:31:d8:b5:
cf:4c:f7:29:bc:de:16:a0:40:29:b6:5a:38:1e:c3:db:a4:6d:
cb:a3:e6:b5:33:7e:95:6e:fa:b3:de:19:72:eb:f2:51:8c:af:
8b:91:b9:1b:15:08:61:e5:dc:bb:3f:30:fd:f3:b3:93:00:11:
d0:e8:40:e2:3d:79:b5:bd:16:df:83:01:6f:b3:de:26:a0:d2:
6d:8d:88:a5:26:37:02:8e:06:8f:bb:fc:ab:68:d5:2a:69:eb:
cc:ca:b2:51:97:5b:83:d6:63:18:f3:a8:5b:ba:fc:af:05:b2:
e4:9f:4a:e7:aa:01:02:10:32:02:7d:04:7e:25:b4:27:b6:98:
0a:b5:3a:59:69:d1:ef:7c:12:17:ef:2a:36:05:a9:9c:ed:48:
cf:ce:e5:f6:fd:6b:03:93:00:32:bc:e1:8e:d1:12:3f:9c:3a:
d7:5f:a5:96:6a:6d:ec:5d:20:7c:24:3d:da:4b:74:9a:4f:b6:
b9:5b:87:e6:96:b7:9d:20:50:fa:b4:62:59:21:1c:d6:86:f9:
54:7d:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:18 2026 by rpki-client