
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/Lc3Kh1Q9pQ97k6yr89qE4U0CE2I.roa
File: Lc3Kh1Q9pQ97k6yr89qE4U0CE2I.roa (raw, json)
Hash identifier: Bi0Ug/HFcg48TtvtMOKxAv9TY+QGuOjus0zRTErHw7U=
Subject key identifier: 2D:CD:CA:87:54:3D:A5:0F:7B:93:AC:AB:F3:DA:84:E1:4D:02:13:62
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 41
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Lc3Kh1Q9pQ97k6yr89qE4U0CE2I.roa
Signing time: Tue 19 May 2026 02:27:41 +0000
ROA not before: Tue 19 May 2026 02:27:41 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 202.241.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 19 02:27:41 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=2DCDCA87543DA50F7B93ACABF3DA84E14D021362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:ff:46:af:9a:68:1d:d4:25:0a:a6:eb:05:
6d:d3:5d:c6:40:62:f7:f0:48:f6:19:4f:cf:74:21:
58:d6:77:e9:35:b2:df:5f:bc:fe:ec:d0:4b:d5:c9:
82:d5:e4:90:f2:5e:b0:c2:1c:9a:8c:c0:c5:0f:28:
86:f0:53:b8:a9:2a:36:ea:28:ab:b3:51:43:0e:99:
bc:bc:a1:8c:22:85:95:8b:03:af:e6:e1:2b:90:92:
b2:a7:3a:66:dd:48:0c:81:00:b4:29:af:1e:57:d2:
7c:b9:23:4e:5c:ab:93:94:c8:7d:0e:16:a2:23:bc:
29:46:b9:b6:aa:6b:27:ba:53:d2:d6:77:8a:1e:f3:
73:ee:6c:ef:d5:c6:36:90:5d:a5:51:3c:8b:49:3f:
0b:bc:84:15:fb:e3:5d:fc:26:1a:fb:ea:68:ed:d2:
32:20:e3:d0:d5:bb:9b:e2:98:a4:f4:e6:83:eb:9c:
8e:89:9b:f9:ad:80:65:df:12:4d:3a:4b:d4:24:3b:
cc:59:62:72:e2:c6:27:70:60:1d:76:05:64:7a:1f:
69:0f:5a:fb:6b:13:64:b3:6a:f0:ec:28:6c:c2:82:
6d:f2:1f:97:23:be:e8:de:ce:1b:38:76:b5:b9:4b:
93:cd:8d:d1:fa:9e:15:08:d0:b8:24:53:30:bc:df:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CD:CA:87:54:3D:A5:0F:7B:93:AC:AB:F3:DA:84:E1:4D:02:13:62
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Lc3Kh1Q9pQ97k6yr89qE4U0CE2I.roa
sbgp-ipAddrBlock: critical
IPv4:
202.241.160.0/20
Signature Algorithm: sha256WithRSAEncryption
67:2e:4d:fe:f7:b0:5a:9a:d7:77:39:8d:68:0b:ce:20:87:0d:
06:0c:23:99:8e:2c:94:34:70:1d:8e:78:8b:ae:ab:13:be:ab:
93:57:25:22:ca:04:b8:95:05:a5:55:1c:15:90:aa:7b:28:da:
59:fe:cf:ae:9d:70:38:3a:b6:03:fe:59:dd:10:a2:50:7e:7e:
31:be:2c:f9:16:44:d8:4c:d8:40:49:f3:62:d6:c4:16:08:0a:
22:2c:c5:c1:80:18:10:cd:fc:f3:d0:46:2f:b6:7d:14:1f:77:
ae:a5:f7:22:25:59:a9:31:53:89:ca:7e:4a:ee:11:a1:53:dd:
8f:e2:8f:e0:9d:fc:43:6d:ec:a6:c0:05:d1:d4:98:24:9c:34:
27:9e:8d:9e:31:86:bb:3d:78:d7:5a:55:da:be:77:ed:fb:83:
18:ae:1b:ee:23:ed:32:3e:47:96:4f:f5:f6:b4:4f:7b:a3:e9:
29:21:ba:7b:e0:8c:59:6a:dc:58:e8:48:94:32:0f:31:27:36:
f7:65:e8:78:a7:e7:38:60:2f:a9:f6:32:f7:6b:a3:99:79:77:
46:f8:ce:db:11:c9:7c:24:c8:9c:73:58:a3:11:a3:b3:da:dd:
35:26:89:53:2e:77:82:00:fc:e2:b4:5a:af:23:89:e1:eb:77:
bd:0b:d2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:07 2026 by rpki-client