
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/M-8KxstQKhVfLEMbF66RfovP77k.roa
File: M-8KxstQKhVfLEMbF66RfovP77k.roa (raw, json)
Hash identifier: MmvM6ozqnHwwo1zQv+7NrNgX+E52hKAS4TVc+yHcAOc=
Subject key identifier: 33:EF:0A:C6:CB:50:2A:15:5F:2C:43:1B:17:AE:91:7E:8B:CF:EF:B9
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 77
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/M-8KxstQKhVfLEMbF66RfovP77k.roa
Signing time: Tue 30 Jun 2026 01:13:35 +0000
ROA not before: Tue 30 Jun 2026 01:13:35 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 2519
IP address blocks: 36.2.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 30 01:13:35 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=33EF0AC6CB502A155F2C431B17AE917E8BCFEFB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:c6:ea:9f:a9:36:f7:42:4d:ef:5c:42:3e:
3e:97:67:9f:0b:d2:d6:fa:18:03:35:f5:c6:69:ec:
97:82:e1:a0:77:84:7e:9c:88:92:09:6a:05:9e:b6:
e5:d7:80:52:31:86:37:50:fa:67:7a:2c:0c:9f:a5:
db:9b:34:eb:6f:33:32:bb:8f:c2:16:a7:25:c4:d4:
c2:9b:81:44:c1:86:4f:3e:e1:bd:28:c1:25:b5:43:
64:89:84:1d:86:d3:09:66:8b:50:bc:34:44:8d:5d:
dc:72:25:7c:fb:f2:d4:34:3a:db:a9:5e:53:c2:0d:
d7:af:13:82:4b:31:f2:74:73:c5:b3:41:6a:be:f7:
fc:0f:3f:59:5a:aa:a8:02:69:10:74:51:52:f5:4f:
0c:13:fd:7b:47:77:4a:bb:6a:d3:c9:ee:90:a4:32:
93:ab:7f:1e:47:99:39:38:f1:35:8d:78:30:79:e2:
9c:22:43:ec:39:b3:9f:54:9f:05:8c:df:98:06:a2:
ad:78:88:0d:38:42:fd:25:7e:22:68:78:3d:32:11:
98:0a:83:5b:70:7e:b4:fd:af:85:fd:75:9d:e6:32:
35:7e:02:95:78:62:76:42:92:68:31:ed:bc:d9:22:
e3:30:50:a3:90:2c:d6:36:3c:50:e3:d7:51:72:ba:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:0A:C6:CB:50:2A:15:5F:2C:43:1B:17:AE:91:7E:8B:CF:EF:B9
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/M-8KxstQKhVfLEMbF66RfovP77k.roa
sbgp-ipAddrBlock: critical
IPv4:
36.2.240.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:cf:fe:6d:33:42:82:e4:b8:84:51:3c:e5:d8:10:67:28:22:
31:8c:f6:f1:07:85:c1:1d:c5:91:ef:4f:2a:09:a5:9c:ed:6d:
b8:43:16:bd:a4:af:ef:ef:4c:ed:82:8c:21:24:af:e5:4f:e1:
59:a2:47:ea:09:61:48:ab:c7:95:73:c9:9e:eb:64:6e:6c:39:
31:a5:8e:2d:17:6d:e7:e4:7e:f4:23:c9:a1:39:32:0a:f8:7d:
bf:68:49:34:44:6b:85:5e:dc:12:60:08:e3:66:34:bc:09:0a:
7f:7f:ef:06:1f:e9:10:76:4e:07:fd:76:78:a1:2f:94:cf:dd:
24:8c:18:b8:c1:63:fd:6b:7b:9d:3e:34:78:e9:39:75:05:41:
5e:63:a6:06:70:19:61:7a:13:6f:1c:f1:f9:c4:07:7e:20:a4:
20:8f:1d:48:bf:63:aa:a3:79:46:71:d6:d3:11:86:bc:62:49:
cc:d8:8f:08:77:37:9f:ec:ce:86:a4:86:20:e6:21:96:47:be:
99:89:e0:5f:ed:a3:46:e2:dd:bf:4d:8b:b1:4e:df:d6:bd:9c:
89:90:dd:32:a3:c5:1b:f4:41:86:74:e1:8f:b8:9d:86:3e:96:
a7:93:4e:fc:eb:ba:2b:a6:24:33:61:81:ca:b4:fa:d9:b5:44:
22:43:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:19 2026 by rpki-client