
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/6OwqxZD8_FqJV0B_1PXJ5WgitUI.roa
File: 6OwqxZD8_FqJV0B_1PXJ5WgitUI.roa (raw, json)
Hash identifier: wXkO4ZSObLKb1k1ZfuEVOcwF7mJECqCeBkogfeaxJNM=
Subject key identifier: E8:EC:2A:C5:90:FC:FC:5A:89:57:40:7F:D4:F5:C9:E5:68:22:B5:42
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 52
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/6OwqxZD8_FqJV0B_1PXJ5WgitUI.roa
Signing time: Tue 19 May 2026 05:31:18 +0000
ROA not before: Tue 19 May 2026 05:31:18 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 17506
IP address blocks: 221.240.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 19 05:31:18 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=E8EC2AC590FCFC5A8957407FD4F5C9E56822B542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c1:a4:48:39:2d:02:39:66:47:37:ad:88:6b:
19:2f:bf:80:70:e8:d1:7d:cd:e8:55:93:e7:dd:eb:
ff:38:51:ad:3a:ba:b3:dd:76:7e:ea:4c:d3:76:e3:
fa:c7:6d:e8:70:7e:34:37:9a:25:e9:85:77:1e:8b:
45:31:49:93:ca:ec:99:1c:29:f8:83:f2:a9:22:5a:
fd:5a:71:c3:8e:2b:c0:b8:1b:22:b4:4b:68:db:91:
9a:bb:a0:09:53:e5:23:83:0b:74:9e:2d:5b:ad:d8:
c8:68:c8:65:bb:2d:d5:ac:c0:3e:c6:9f:38:0a:f5:
da:97:b1:6b:96:13:62:f1:63:06:49:5e:12:d1:ad:
e7:62:59:be:c3:6e:18:2d:dc:00:db:6f:e0:c9:d2:
1f:88:96:cd:ca:30:a6:fe:9d:22:5f:d6:dd:a2:12:
54:29:81:28:fc:fb:f0:e1:e8:02:94:63:d9:d2:ec:
30:bb:5a:d2:58:af:a5:fb:19:25:29:2d:1b:a2:8a:
75:c8:92:3f:ad:ca:44:ce:c8:bc:a8:44:0b:36:8e:
c8:ed:15:ac:6a:c3:1c:a3:62:60:81:e4:85:55:12:
36:c3:ca:3a:60:1d:0e:76:aa:77:85:e8:56:4a:e3:
fa:cc:f3:a2:3b:06:40:ef:78:1a:09:ff:34:f7:d0:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:2A:C5:90:FC:FC:5A:89:57:40:7F:D4:F5:C9:E5:68:22:B5:42
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/6OwqxZD8_FqJV0B_1PXJ5WgitUI.roa
sbgp-ipAddrBlock: critical
IPv4:
221.240.0.0/12
Signature Algorithm: sha256WithRSAEncryption
45:90:b4:37:6d:46:d4:61:fd:e1:d5:a9:91:38:a6:08:6c:b4:
99:df:e3:92:91:1e:60:99:6a:4f:74:92:d4:e4:20:6f:56:ae:
41:48:43:88:c7:74:cc:e2:08:c4:dd:50:05:62:53:89:e1:94:
f1:c2:7e:a1:ed:76:7c:f9:02:47:1d:9f:52:c2:58:8a:9c:a3:
03:71:06:96:c2:83:3d:b6:83:92:06:97:60:18:6a:24:f5:10:
14:33:07:fb:74:29:2b:f4:7a:f1:05:ce:85:0f:2c:8f:68:f6:
05:33:50:34:b3:4d:f8:1b:b9:2a:c1:4c:ae:ba:d6:87:eb:04:
cb:d3:7e:74:18:4f:74:e9:37:4b:b3:49:f8:df:93:55:9e:96:
0f:a8:ce:7e:e2:43:e7:68:a9:6f:59:3a:bf:c6:a7:0d:e0:40:
b0:f5:11:29:b2:00:f2:4d:74:9b:08:ba:36:4f:59:31:6e:3e:
9a:aa:4f:76:77:f7:a9:c5:70:ce:fb:8e:1d:c4:9f:6e:c8:4e:
ab:9a:19:fc:35:c4:33:48:2d:6e:89:19:ba:83:1c:25:d4:a6:
b4:6b:1f:3a:5b:49:43:21:11:75:ae:c8:11:5c:90:c1:4d:f3:
61:2e:2e:74:43:dd:5f:ff:27:ba:7a:d5:54:98:59:1f:f6:95:
20:4f:04:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:14 2026 by rpki-client