
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/AlkS1-ooUjO64G2HelsNgB3hjVw.roa
File: AlkS1-ooUjO64G2HelsNgB3hjVw.roa (raw, json)
Hash identifier: jtQQyi1o0iDbG7Z6SL80ulxMOIJkONz+ZqfTpky/95s=
Subject key identifier: 02:59:12:D7:EA:28:52:33:BA:E0:6D:87:7A:5B:0D:80:1D:E1:8D:5C
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 9D
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/AlkS1-ooUjO64G2HelsNgB3hjVw.roa
Signing time: Wed 29 Jul 2026 02:41:26 +0000
ROA not before: Wed 29 Jul 2026 02:41:26 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2519
IP address blocks: 133.32.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 15:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jul 29 02:41:26 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=025912D7EA285233BAE06D877A5B0D801DE18D5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:46:99:1f:4c:da:ea:fc:ca:d5:10:90:d4:
12:37:13:c0:d7:86:b2:ba:e4:c0:a5:bb:d7:a1:37:
8f:1b:2e:db:9d:72:aa:75:5f:15:59:f3:0b:03:92:
0c:9c:9f:a4:7c:24:88:98:16:54:3d:da:b4:ca:a2:
e4:db:13:52:b6:c6:23:d7:38:88:21:e7:51:cc:a2:
47:f2:6c:2b:62:66:10:c4:e0:fd:c4:44:24:3d:0c:
21:aa:c7:4f:90:e1:78:65:4b:a7:64:25:76:d3:e2:
e4:33:15:bd:cb:f4:62:67:13:df:d2:1a:67:68:74:
be:c7:44:58:99:1d:d1:fb:4a:b0:7f:99:e1:c2:be:
56:fc:00:f4:2e:d1:46:9a:fb:73:6c:fc:a6:37:b4:
45:c2:d2:90:38:f1:77:4f:6e:a6:20:7e:e7:1e:bd:
53:b6:81:68:19:bf:77:6f:ed:c0:f1:03:4a:fa:7e:
53:bd:85:5d:9f:28:40:ab:3b:bf:96:89:d5:78:9c:
c8:f2:78:25:27:8c:22:47:a4:6c:6f:38:e9:75:2e:
82:96:38:5d:32:c1:f2:cc:80:f7:e9:1a:59:c6:e7:
79:46:4c:ce:03:6d:82:69:4d:e0:b5:42:d8:86:ce:
e9:c8:fd:af:c8:d0:05:ab:7c:eb:ac:8b:2c:07:29:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:59:12:D7:EA:28:52:33:BA:E0:6D:87:7A:5B:0D:80:1D:E1:8D:5C
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/AlkS1-ooUjO64G2HelsNgB3hjVw.roa
sbgp-ipAddrBlock: critical
IPv4:
133.32.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:19:99:09:0d:b3:ae:a6:f8:2e:a9:95:d4:97:cd:c1:99:7e:
92:51:dc:c3:25:f0:d1:18:8d:42:b5:05:7d:a1:e5:f9:4e:d8:
b6:11:7c:b8:58:c8:37:83:d6:aa:17:60:f8:c4:9f:4d:0f:1c:
2b:8d:0f:7a:a6:6d:06:c9:c2:93:86:99:fc:bf:d3:d1:2a:0d:
6f:73:7d:8e:00:e9:63:a1:bb:66:0f:e7:a1:d6:e7:67:a7:97:
b7:8e:fe:5a:ff:69:f5:a6:e3:af:e4:d7:80:29:5f:50:c2:89:
da:9a:78:bc:94:d6:61:63:f6:57:2b:91:99:88:ae:40:99:5f:
b3:3b:a1:25:70:16:04:99:3c:e7:b8:83:45:46:5b:64:5f:07:
a9:bf:04:1d:05:e0:75:3d:33:74:35:b1:39:57:30:8b:b8:06:
ec:9c:d2:91:2e:eb:14:53:ff:da:26:40:1a:24:94:c5:40:c2:
db:2f:26:a2:a0:99:29:22:f8:8f:f7:fa:7b:9a:6e:37:e6:e6:
da:c4:15:58:89:67:e1:65:67:9a:bd:4c:89:c8:01:1b:4a:ed:
d7:3f:1e:87:05:d1:1f:f4:74:d8:e2:b8:95:a4:0c:5e:4b:39:
9a:a8:9b:08:89:60:fe:08:69:37:ce:ba:b8:fd:73:56:bd:1a:
3a:ab:ba:41
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDY3
ODkxQjk0RUQ5RTU1N0U3Nzk3NDZCRkEyM0UwM0QxRUQyMzRFRTAeFw0yNjA3Mjkw
MjQxMjZaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyNTkxMkQ3RUEyODUy
MzNCQUUwNkQ4NzdBNUIwRDgwMURFMThENUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYnkaZH0za6vzK1RCQ1BI3E8DXhrK65MClu9ehN48bLtudcqp1
XxVZ8wsDkgycn6R8JIiYFlQ92rTKouTbE1K2xiPXOIgh51HMokfybCtiZhDE4P3E
RCQ9DCGqx0+Q4XhlS6dkJXbT4uQzFb3L9GJnE9/SGmdodL7HRFiZHdH7SrB/meHC
vlb8APQu0Uaa+3Ns/KY3tEXC0pA48XdPbqYgfucevVO2gWgZv3dv7cDxA0r6flO9
hV2fKECrO7+WidV4nMjyeCUnjCJHpGxvOOl1LoKWOF0ywfLMgPfpGlnG53lGTM4D
bYJpTeC1QtiGzunI/a/I0AWrfOusiywHKRmjAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUAlkS1+ooUjO64G2HelsNgB3hjVwwHwYDVR0jBBgwFoAU1niRuU7Z5VfneXRr
+iPgPR7SNO4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ1Mi8xbmlSdVU3WjVWZm5lWFJyLWlQZ1BSN1NOTzQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8xbmlSdVU3WjVWZm5lWFJyLWlQZ1BS
N1NOTzQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDUyL0Fsa1MxLW9vVWpPNjRHMkhlbHNOZ0IzaGpWdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAaFIIAwDQYJKoZIhvcNAQELBQADggEB
AJ8ZmQkNs66m+C6pldSXzcGZfpJR3MMl8NEYjUK1BX2h5flO2LYRfLhYyDeD1qoX
YPjEn00PHCuND3qmbQbJwpOGmfy/09EqDW9zfY4A6WOhu2YP56HW52enl7eO/lr/
afWm46/k14ApX1DCidqaeLyU1mFj9lcrkZmIrkCZX7M7oSVwFgSZPOe4g0VGW2Rf
B6m/BB0F4HU9M3Q1sTlXMIu4Buyc0pEu6xRT/9omQBoklMVAwtsvJqKgmSki+I/3
+nuabjfm5trEFViJZ+FlZ5q9TInIARtK7dc/HocF0R/0dNjiuJWkDF5LOZqomwiJ
YP4IaTfOurj9c1a9GjqrukE=
-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:15 2026 by rpki-client