
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/8cJ8mb0GbUudvUn0oZwgJNThOXg.roa
File: 8cJ8mb0GbUudvUn0oZwgJNThOXg.roa (raw, json)
Hash identifier: ovTtRp8m1HRD7jLyWsjaXQsIyZkuDS6PI4mADy9LeU4=
Subject key identifier: F1:C2:7C:99:BD:06:6D:4B:9D:BD:49:F4:A1:9C:20:24:D4:E1:39:78
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 5A
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/8cJ8mb0GbUudvUn0oZwgJNThOXg.roa
Signing time: Wed 20 May 2026 02:35:46 +0000
ROA not before: Wed 20 May 2026 02:35:46 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 220.158.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 20 02:35:46 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=F1C27C99BD066D4B9DBD49F4A19C2024D4E13978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:40:1e:68:31:10:d6:e6:1e:4e:cb:69:72:54:
c1:08:b4:78:b3:bf:35:f8:52:46:74:01:af:71:e6:
6f:f2:ed:a4:f0:e3:04:a3:4b:7f:4e:37:a9:49:e6:
29:ae:f1:a9:50:00:a1:d4:fb:af:5e:d6:c6:66:ce:
af:42:e8:c8:f6:4c:88:4e:ee:b5:cb:c7:88:d4:cb:
81:2f:a6:03:34:ec:bf:a9:61:a1:f6:ad:81:d1:54:
1b:39:6a:f4:72:db:9c:39:4c:3b:d9:36:e1:b1:36:
9c:a3:dd:26:b7:f7:0f:e1:2e:ea:73:53:35:e6:11:
64:b6:7a:19:8a:89:92:8f:e6:65:32:04:7b:68:3b:
b5:16:ba:60:09:f9:3e:40:66:85:b5:da:d7:6c:4f:
04:eb:36:f9:3c:b9:43:e8:a7:23:b9:35:ee:af:5f:
fc:fa:75:e7:f3:bf:10:ea:03:58:81:c0:c7:27:fe:
62:3a:6d:37:6b:fa:73:d3:f4:09:87:34:f9:95:bc:
1b:e5:70:b2:dd:d2:a9:d3:5e:7f:3c:e4:ea:d1:71:
db:71:f0:04:9f:b5:1c:d2:87:3c:e8:3c:a5:f8:49:
82:5e:3e:51:ac:44:27:03:93:37:3b:f5:93:4e:f4:
80:07:be:fa:7f:dc:90:e8:81:59:bc:42:e4:ef:12:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C2:7C:99:BD:06:6D:4B:9D:BD:49:F4:A1:9C:20:24:D4:E1:39:78
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/8cJ8mb0GbUudvUn0oZwgJNThOXg.roa
sbgp-ipAddrBlock: critical
IPv4:
220.158.80.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:89:96:8c:eb:b6:54:a5:58:a6:24:99:ad:fd:93:36:82:6b:
e9:c8:e4:81:4d:b3:4c:59:3c:af:a1:2b:dd:3c:ef:69:2d:62:
01:16:9a:1c:7c:cd:41:0e:4b:ea:ba:b6:8e:de:87:c0:96:cc:
a0:b7:52:8b:8d:e8:35:54:78:6d:cd:31:4f:01:64:06:00:00:
c7:a8:0a:8a:6a:38:e2:ab:85:29:d3:7c:97:2d:07:31:66:85:
42:aa:47:d7:39:ef:29:e1:6c:64:41:2d:26:aa:d4:6d:e3:d1:
c7:97:3e:02:36:68:c5:2b:72:47:35:ee:62:2b:6c:46:b8:66:
6b:e3:a6:c2:45:e9:be:ba:e0:ef:00:51:21:42:c3:c0:87:72:
6a:92:1e:97:3d:ca:be:3b:0f:78:bf:3f:81:de:a7:7b:b1:8f:
aa:61:d2:2e:0c:c3:3b:f5:10:f2:1d:6a:a4:80:86:45:d4:d9:
05:bf:7d:09:21:72:79:59:e2:53:2e:05:cd:e5:12:9f:ed:8a:
fb:f9:f0:fc:68:85:c3:5c:50:6c:a3:df:7f:82:ff:48:8b:72:
ca:2a:10:c0:06:d5:bd:9f:87:85:88:fa:18:d0:c9:dd:50:e8:
01:a8:fa:39:21:c5:16:bd:78:e3:e1:e0:db:37:a5:ad:b3:b9:
44:a4:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:02 2026 by rpki-client