
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/3mi4XWaT35UrGTG8q3bYDevMfi0.roa
File: 3mi4XWaT35UrGTG8q3bYDevMfi0.roa (raw, json)
Hash identifier: o6iyp4CrN94ffiaa79n6R6RnOBXzFuK/nSZ1STRf1Cc=
Subject key identifier: DE:68:B8:5D:66:93:DF:95:2B:19:31:BC:AB:76:D8:0D:EB:CC:7E:2D
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 9C
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/3mi4XWaT35UrGTG8q3bYDevMfi0.roa
Signing time: Wed 29 Jul 2026 02:33:23 +0000
ROA not before: Wed 29 Jul 2026 02:33:23 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2519
IP address blocks: 133.32.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 15:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jul 29 02:33:23 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=DE68B85D6693DF952B1931BCAB76D80DEBCC7E2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:4c:bd:fb:7a:4f:00:3a:c5:0d:40:52:4b:
b8:64:8b:83:55:d6:f5:17:fc:d4:ca:23:20:a4:13:
fe:87:9a:d2:e5:2d:86:48:7d:ba:b9:99:d3:93:2b:
af:62:dd:1d:07:07:ec:79:9b:18:8b:95:0f:93:36:
db:51:1f:10:0a:dd:04:15:9e:6f:40:68:56:a5:67:
c4:91:a6:dc:e7:96:a0:a0:2c:c6:42:a8:8c:49:3a:
84:24:dc:e9:0c:03:fd:cc:d3:b7:7c:1b:9c:24:7d:
f1:0c:67:f0:30:ce:f1:cf:87:14:08:12:0b:fb:df:
52:16:29:31:15:79:22:45:a8:93:e3:8b:d9:41:2c:
3c:27:80:cf:eb:53:2e:0e:77:af:b8:77:be:f2:f4:
aa:f5:68:be:71:6c:c9:2c:78:8d:cd:0d:2a:cc:0a:
09:a5:0e:22:88:ed:12:0b:b0:19:64:f5:24:89:d7:
ea:a3:4d:78:6c:5a:db:e0:f1:b4:b5:fb:e1:46:0e:
89:c2:24:7c:74:82:13:50:90:26:3a:f1:10:d4:55:
6e:34:51:a6:34:8d:36:81:35:32:ea:dc:e1:ae:27:
10:6f:73:e3:94:ac:f0:fb:45:11:41:c3:d3:e5:63:
67:a1:81:af:f6:bf:52:cd:70:c2:04:58:87:3c:d0:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:68:B8:5D:66:93:DF:95:2B:19:31:BC:AB:76:D8:0D:EB:CC:7E:2D
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/3mi4XWaT35UrGTG8q3bYDevMfi0.roa
sbgp-ipAddrBlock: critical
IPv4:
133.32.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b9:4b:e6:ae:1a:0b:20:1d:e8:03:1c:68:68:6a:19:3c:15:e2:
e8:a2:6a:2e:f0:9d:c3:10:69:5c:8a:96:95:1c:4d:0c:16:4b:
09:5a:66:b5:26:5f:8f:5a:11:7d:73:23:fe:e2:6d:c1:75:86:
8f:26:0a:dc:a9:10:ec:24:15:67:cf:7c:37:70:27:05:fc:ed:
40:df:01:6b:fa:9b:0f:dc:59:e6:ca:87:ba:62:76:70:53:42:
af:ec:b9:f0:4e:e0:11:8c:09:93:43:48:66:f5:55:b1:61:96:
36:79:03:52:75:1b:17:93:e9:92:5d:c7:be:27:29:16:a2:ef:
fe:82:f3:cd:13:45:bf:0b:90:83:ea:2f:8d:f1:95:c5:74:05:
be:50:5f:ce:3a:92:60:b5:a1:7b:3a:53:f3:bd:fa:d5:62:b5:
ad:3f:5f:ec:d3:43:9a:2b:67:be:6f:bd:f8:17:f9:36:53:f0:
56:86:88:76:57:f7:9e:a7:fd:82:39:2f:39:59:e2:6a:88:27:
15:b8:68:6c:30:a7:09:1c:b5:01:f2:b0:b7:0b:87:bb:b0:ad:
ab:ba:e6:37:0a:a5:15:bb:76:2f:7e:a3:80:b0:f9:ed:89:ac:
39:ee:01:4d:e2:dc:27:b8:30:52:f2:79:d2:52:07:1b:07:ae:
58:c5:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:16 2026 by rpki-client