
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/IOeEm96ON23szF68QcrzmzIsXGk.roa
File: IOeEm96ON23szF68QcrzmzIsXGk.roa (raw, json)
Hash identifier: RXPrmsfrpIuYaAVAQeAIgJPxjjgwNPdpvFEWgoGaQ3U=
Subject key identifier: 20:E7:84:9B:DE:8E:37:6D:EC:CC:5E:BC:41:CA:F3:9B:32:2C:5C:69
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 46
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/IOeEm96ON23szF68QcrzmzIsXGk.roa
Signing time: Tue 19 May 2026 02:58:28 +0000
ROA not before: Tue 19 May 2026 02:58:28 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 210.131.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 19 02:58:28 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=20E7849BDE8E376DECCC5EBC41CAF39B322C5C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:20:af:d0:93:cb:d1:d1:4f:dd:5f:57:d7:
be:bc:0d:4c:e1:d2:8b:a6:9d:8f:85:f6:32:47:22:
ee:c0:25:71:0c:0b:b5:5e:83:0d:61:73:10:9e:9c:
29:96:e4:e2:fb:04:93:a8:02:ac:c6:80:a6:41:80:
53:2e:5a:bf:09:35:98:41:c2:a1:1b:86:4f:d9:19:
51:6b:d8:be:1b:70:fe:e5:69:39:9a:32:f3:d8:ec:
96:81:10:5c:4f:73:c8:57:ff:82:9e:b8:dc:a0:66:
5a:9f:d6:3c:0a:bb:b0:f4:81:77:3e:46:fb:5a:ca:
a7:5d:e7:ff:16:7f:93:93:3e:64:90:ac:32:23:8c:
ee:99:b7:6f:b6:5a:b4:c0:03:7f:c6:7f:a6:15:99:
09:f4:c2:5f:d9:ec:23:ba:2e:7a:8d:b5:05:03:ec:
a5:17:1e:fa:23:29:41:53:a4:6e:6f:d6:e8:33:d4:
52:fb:d3:52:5a:e7:13:10:3c:be:35:43:bf:df:36:
62:18:28:5d:e2:3d:31:7d:62:4e:b0:11:2b:0a:e3:
e8:f4:f4:62:4d:f2:5f:1c:6a:19:bd:41:79:ff:54:
c3:f5:72:64:60:dc:1c:f8:1b:45:a3:35:df:88:5a:
a1:86:56:70:81:6b:23:3b:4c:3d:6a:5d:12:a0:46:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E7:84:9B:DE:8E:37:6D:EC:CC:5E:BC:41:CA:F3:9B:32:2C:5C:69
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/IOeEm96ON23szF68QcrzmzIsXGk.roa
sbgp-ipAddrBlock: critical
IPv4:
210.131.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7f:4b:06:c4:ae:ad:6a:3a:7d:c0:3f:42:86:5d:db:cb:ca:86:
71:29:04:c9:36:7f:1d:16:4f:07:33:58:ce:c6:40:17:f7:a1:
db:10:5d:ec:00:99:55:48:e2:a4:78:d0:3a:fb:94:1f:8d:91:
ea:fd:08:99:22:bf:42:a9:0a:90:29:c1:db:07:0b:5d:2f:79:
31:75:2b:75:3a:ac:1e:28:37:5d:f0:ed:0c:09:e1:ce:f1:17:
be:b0:aa:cc:a2:35:f7:c4:f0:34:a2:83:53:4f:57:8c:31:00:
81:03:ac:54:2e:37:49:27:e7:6e:c7:27:36:1c:ba:fb:1e:0e:
aa:12:c4:6c:34:4b:22:d0:47:76:5a:c7:05:44:cc:21:4f:ea:
98:c8:8a:43:ea:29:de:db:ab:bd:7e:84:d2:6f:a6:4e:31:56:
01:2f:ae:8c:27:d1:fa:c8:40:1d:7f:9d:87:bc:d5:dc:37:84:
35:36:82:c1:41:ca:b9:48:4e:3f:19:4f:50:a9:7a:f2:6f:dc:
66:0e:12:1a:13:b7:3e:f0:74:51:1c:46:3c:fd:6a:ea:ea:7a:
b8:6a:b3:fa:4a:c9:4c:73:34:62:75:3d:48:66:7a:92:6f:b0:
1a:f8:4a:d6:af:bd:65:aa:e6:3b:56:80:bd:75:25:10:73:c3:
e2:d9:df:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:13 2026 by rpki-client