
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/IeuvWuwseyWhKW0w32geYAsvcYs.roa
File: IeuvWuwseyWhKW0w32geYAsvcYs.roa (raw, json)
Hash identifier: BCNunVJuX1avaaJdF9KUb4ZKY2kkzMvcnyVHvnSUzrM=
Subject key identifier: 21:EB:AF:5A:EC:2C:7B:25:A1:29:6D:30:DF:68:1E:60:0B:2F:71:8B
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 4E
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/IeuvWuwseyWhKW0w32geYAsvcYs.roa
Signing time: Tue 19 May 2026 05:07:14 +0000
ROA not before: Tue 19 May 2026 05:07:14 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 17506
IP address blocks: 220.218.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 19 05:07:14 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=21EBAF5AEC2C7B25A1296D30DF681E600B2F718B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:ab:43:89:e7:4c:6a:16:ba:a0:2c:08:59:
40:e3:14:4a:66:c2:54:b8:50:81:72:4b:88:df:f2:
70:9b:0c:68:b8:1a:94:32:c5:9a:61:c0:05:b1:16:
ff:e7:1b:0e:78:45:e7:d5:e1:fb:ea:b1:36:3c:01:
87:16:02:d6:ad:4d:9b:50:34:4b:35:c3:01:67:04:
74:5a:9c:39:01:b5:fe:23:6d:d3:16:a5:0d:d8:b1:
3c:15:9f:77:70:2c:cd:57:13:ea:c5:18:4a:e3:25:
85:f1:aa:b3:27:68:ed:7e:92:59:95:58:a2:4a:e4:
b7:40:16:84:c3:0e:be:a4:c3:83:1e:3a:8a:bd:29:
7c:09:62:16:e8:99:25:d0:d5:03:bb:03:8d:64:9d:
91:ba:d0:be:c5:19:3e:b1:84:95:24:58:fb:27:fb:
6b:cb:29:84:37:a0:cb:5c:70:2f:0e:3a:a6:1c:28:
55:40:08:1d:bc:b2:91:46:ef:48:93:86:d6:88:73:
fc:c7:46:f2:ec:31:4f:02:64:2b:0b:c5:a1:03:03:
af:ce:43:e7:31:29:58:12:a6:29:79:a6:fb:94:5a:
92:49:8d:0b:46:d5:60:34:ed:7a:85:43:e0:b1:0c:
de:b2:df:c5:8f:ee:9e:12:72:49:fd:c9:ce:fa:68:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EB:AF:5A:EC:2C:7B:25:A1:29:6D:30:DF:68:1E:60:0B:2F:71:8B
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/IeuvWuwseyWhKW0w32geYAsvcYs.roa
sbgp-ipAddrBlock: critical
IPv4:
220.218.0.0/16
Signature Algorithm: sha256WithRSAEncryption
87:4e:47:79:b6:39:44:db:ff:cf:c5:e0:d6:08:cc:db:15:7c:
bb:db:78:b4:5b:eb:a8:ac:83:ab:f6:64:52:09:9e:58:65:ba:
89:d7:d7:78:d2:8e:d4:d7:c1:ad:cc:8d:85:8b:e6:cc:37:6f:
ec:2f:87:c3:d1:1c:4b:74:b8:a7:e9:0f:ab:c1:85:02:f0:28:
bc:33:cf:21:39:2c:f8:44:38:ba:b5:0a:ee:1d:f6:0e:d4:c5:
4a:dc:c9:5d:86:4e:7b:f5:2b:93:7e:c2:d3:d3:10:37:5a:11:
f1:0e:86:a8:e0:bc:49:9f:fe:e2:79:4a:d7:61:57:96:88:7d:
43:9b:1e:57:97:7d:d2:d9:45:df:b6:0b:6c:fd:c0:59:f5:ad:
e4:e3:83:5a:95:9a:ec:43:66:cc:c7:f1:e3:8c:47:14:97:04:
39:19:05:e6:c7:90:2a:10:96:a4:43:4e:dd:1b:2a:26:6c:9b:
8e:4f:d4:bf:07:5f:c4:b6:54:75:89:1d:f0:37:84:d2:11:62:
75:5c:ce:8b:26:f8:84:93:1c:4d:0a:02:dd:2f:2d:2b:3d:eb:
95:14:e8:4e:3c:6f:1a:7a:0b:40:b9:2d:3c:82:57:01:ea:e4:
00:d3:6e:b5:81:f8:05:84:a4:18:e1:18:4b:7d:1a:42:ea:ba:
0e:ba:0e:dd
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUxOTA1
MDcxNFoXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoMjFFQkFGNUFFQzJDN0Iy
NUExMjk2RDMwREY2ODFFNjAwQjJGNzE4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALmNq0OJ50xqFrqgLAhZQOMUSmbCVLhQgXJLiN/ycJsMaLgalDLF
mmHABbEW/+cbDnhF59Xh++qxNjwBhxYC1q1Nm1A0SzXDAWcEdFqcOQG1/iNt0xal
DdixPBWfd3AszVcT6sUYSuMlhfGqsydo7X6SWZVYokrkt0AWhMMOvqTDgx46ir0p
fAliFuiZJdDVA7sDjWSdkbrQvsUZPrGElSRY+yf7a8sphDegy1xwLw46phwoVUAI
HbyykUbvSJOG1ohz/MdG8uwxTwJkKwvFoQMDr85D5zEpWBKmKXmm+5RakkmNC0bV
YDTteoVD4LEM3rLfxY/unhJySf3JzvpoO5kCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBQh669a7Cx7JaEpbTDfaB5gCy9xizAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvSWV1dld1d3NleVdoS1cwdzMyZ2VZQXN2Y1lzLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzaMA0GCSqGSIb3DQEBCwUAA4IBAQCH
Tkd5tjlE2//PxeDWCMzbFXy723i0W+uorIOr9mRSCZ5YZbqJ19d40o7U18GtzI2F
i+bMN2/sL4fD0RxLdLin6Q+rwYUC8Ci8M88hOSz4RDi6tQruHfYO1MVK3Mldhk57
9SuTfsLT0xA3WhHxDoao4LxJn/7ieUrXYVeWiH1Dmx5Xl33S2UXftgts/cBZ9a3k
44NalZrsQ2bMx/HjjEcUlwQ5GQXmx5AqEJakQ07dGyombJuOT9S/B1/EtlR1iR3w
N4TSEWJ1XM6LJviEkxxNCgLdLy0rPeuVFOhOPG8aegtAuS08glcB6uQA0261gfgF
hKQY4RhLfRpC6roOug7d
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:01 2026 by rpki-client