
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/JUhMyIA9pKqBU1o2oLBlqcZZPBY.roa
File: JUhMyIA9pKqBU1o2oLBlqcZZPBY.roa (raw, json)
Hash identifier: 5EvsjVozXPV0r5cAGZBWPPVwYepPvjqlSlW9LKxklUs=
Subject key identifier: 25:48:4C:C8:80:3D:A4:AA:81:53:5A:36:A0:B0:65:A9:C6:59:3C:16
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: AC
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/JUhMyIA9pKqBU1o2oLBlqcZZPBY.roa
Signing time: Wed 29 Jul 2026 06:57:42 +0000
ROA not before: Wed 29 Jul 2026 06:57:42 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2519
IP address blocks: 133.149.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 15:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jul 29 06:57:42 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=25484CC8803DA4AA81535A36A0B065A9C6593C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:48:53:7a:aa:9c:da:d0:04:0b:de:8c:1d:
7c:20:34:b1:c5:68:06:fe:1b:77:36:07:13:87:56:
20:99:68:3e:5e:a9:f6:e6:32:99:75:d6:eb:ac:ff:
73:38:05:2f:ab:50:09:9d:6c:70:5f:61:9f:3a:38:
4e:36:dd:04:a1:21:e6:02:22:44:0f:d0:f6:7b:5c:
49:94:5f:0a:50:9c:75:13:6e:ae:ae:b2:33:ad:31:
31:4e:e7:d7:52:c6:ff:06:2d:cc:bc:04:bb:39:04:
d1:8d:b3:98:c6:5c:18:73:52:e6:8c:60:c0:06:13:
98:7e:e4:23:a8:b8:21:ad:28:0e:30:cd:93:84:6e:
6c:8f:23:22:de:71:30:9c:81:1d:f4:a0:67:f9:be:
8c:a5:84:dd:7f:c0:b7:a3:df:09:9a:96:13:a6:5d:
67:ad:14:78:69:8c:ae:7e:4a:71:b8:14:16:13:af:
6a:bd:38:a9:3f:99:72:36:44:12:fc:07:c6:a3:82:
64:30:6a:3d:9f:cb:bd:17:e1:bc:db:b7:54:3f:34:
ab:b2:a0:41:12:30:d1:4c:c8:52:dc:1f:3c:32:c4:
81:b9:0d:13:bc:bd:42:a4:cb:c6:46:60:9b:51:dc:
49:0c:6d:ed:a8:2e:f9:43:2b:8b:bc:ee:7d:ed:72:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:48:4C:C8:80:3D:A4:AA:81:53:5A:36:A0:B0:65:A9:C6:59:3C:16
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/JUhMyIA9pKqBU1o2oLBlqcZZPBY.roa
sbgp-ipAddrBlock: critical
IPv4:
133.149.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5a:42:91:f7:17:8f:6c:dc:7a:fe:41:f3:51:f0:e1:5d:67:9c:
b6:34:d5:27:45:d1:49:1d:2e:94:7a:27:81:ad:5a:4f:93:79:
6f:35:2f:77:28:50:a6:fb:d8:02:6b:41:ff:df:6c:e4:24:5f:
f9:42:3d:a3:a1:ac:d9:dc:b6:e8:64:15:9e:7a:16:e8:3c:ac:
2d:a8:74:9b:13:6b:9e:44:c2:35:4f:51:63:ad:31:5f:3a:e4:
a5:a8:c3:2f:fd:6c:9c:ea:2b:f8:00:66:e4:aa:46:08:df:27:
01:f6:1d:3e:70:1a:a6:d8:43:ca:f5:62:87:22:04:0e:e1:96:
98:b1:e3:d5:dc:46:64:07:2c:26:c6:a8:ca:79:9d:a9:e0:5e:
80:4f:30:2c:3a:44:8e:65:6c:10:7f:83:47:4f:b5:94:0d:a8:
3c:26:9a:a5:69:a2:20:1b:bb:9e:7e:11:7a:9b:33:6c:b1:5a:
09:a7:37:61:49:06:a4:a8:9d:69:26:85:65:7b:69:5c:1e:56:
29:bd:2d:51:59:09:4b:66:ee:93:30:42:8e:fb:9f:b9:ed:c2:
9f:36:37:0b:7d:a6:d4:e1:2f:36:2f:0b:ff:9a:1f:3e:36:fb:
35:9b:71:cf:0d:52:6b:18:a8:20:43:d2:d7:e3:a7:a4:01:1c:
24:e1:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:17 2026 by rpki-client