
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/OC-r8HRgcwBzvIf2r7zKt8NQ84g.roa
File: OC-r8HRgcwBzvIf2r7zKt8NQ84g.roa (raw, json)
Hash identifier: l//+sAAxA4C7GGHcymmDNZzkSzdCAYUjRT8qY8ilId8=
Subject key identifier: 38:2F:AB:F0:74:60:73:00:73:BC:87:F6:AF:BC:CA:B7:C3:50:F3:88
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 45
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/OC-r8HRgcwBzvIf2r7zKt8NQ84g.roa
Signing time: Tue 19 May 2026 02:52:03 +0000
ROA not before: Tue 19 May 2026 02:52:03 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 203.140.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 19 02:52:03 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=382FABF07460730073BC87F6AFBCCAB7C350F388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:06:d4:de:f5:19:96:af:c0:00:55:0a:fd:
9b:bd:69:22:e0:8b:a4:26:e0:b7:66:f9:75:3d:a4:
36:17:01:de:0b:32:67:b9:0d:cd:a9:e2:3b:96:cc:
ea:e4:7a:5a:67:1e:c3:f3:a0:21:05:ac:14:10:56:
74:4c:c1:a6:7f:da:5c:7f:b2:47:94:23:9a:ac:be:
dc:ab:87:ca:65:8c:83:21:f6:80:21:7e:f8:1b:c0:
d6:2c:58:24:f1:9a:8d:02:e8:04:83:a0:03:f4:97:
71:34:24:7b:a1:96:66:96:e2:c9:54:62:e2:e8:b5:
05:fc:09:18:f8:b6:1c:39:45:2f:25:75:f0:36:e7:
b2:39:2e:91:af:f4:5e:93:90:8e:d2:e6:27:81:71:
95:80:e2:81:24:91:73:de:cc:97:ad:a6:b6:10:91:
f8:f1:f1:3a:18:24:1c:a6:f8:d5:2e:68:0f:c1:22:
41:ef:2e:f5:c0:f3:07:1a:10:2b:9f:02:e8:22:4a:
90:14:d2:05:4e:48:cc:01:2f:74:2d:28:11:cb:70:
1f:f5:58:54:f3:be:28:41:2d:ac:a9:cf:ed:36:7a:
fe:0f:b3:14:7c:f8:b3:20:c4:e9:f7:c6:84:cf:98:
be:c1:df:a2:47:07:04:a6:9d:94:44:1f:08:df:d4:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2F:AB:F0:74:60:73:00:73:BC:87:F6:AF:BC:CA:B7:C3:50:F3:88
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/OC-r8HRgcwBzvIf2r7zKt8NQ84g.roa
sbgp-ipAddrBlock: critical
IPv4:
203.140.32.0/19
Signature Algorithm: sha256WithRSAEncryption
81:bd:6c:23:4c:0f:6d:2b:c5:c0:79:2a:8f:38:ad:5f:c0:3a:
5a:fd:9b:74:30:3a:38:5b:09:ef:e6:8d:6a:bf:a3:22:cb:fc:
47:04:64:5c:98:d3:b7:ef:03:a5:7f:c2:ea:9f:f4:d7:62:4e:
82:2d:ae:a9:bd:dc:46:a2:31:78:02:54:26:ba:d0:e3:63:d9:
20:12:55:eb:bf:a8:5f:25:de:9c:68:e8:3c:cc:99:f1:eb:51:
f0:4a:36:01:ec:99:ee:40:3c:de:3f:44:81:7b:bd:fb:54:ab:
c5:5d:bc:33:35:0d:0a:9f:7e:87:47:31:3d:9f:39:e1:0a:f0:
8e:44:37:4f:73:b9:c4:a8:23:64:70:94:e4:54:04:bc:18:71:
d4:82:c5:b5:0f:e4:7a:53:77:34:e5:6c:f4:a3:f3:0b:93:68:
c5:48:bf:9e:70:0a:f3:dd:4d:23:13:96:47:67:44:0f:92:e5:
73:82:88:80:ad:0b:88:03:b1:07:0d:24:68:55:ce:2f:bb:41:
f7:fc:88:ea:33:f1:38:6d:4a:95:8f:33:51:60:3f:1b:ce:82:
05:a2:f8:af:e7:ed:17:3b:d6:f5:11:1a:f9:e9:06:79:77:3d:
f9:a2:21:93:1f:79:9e:ab:6a:05:21:96:2e:71:42:16:d1:3d:
f9:8b:62:89
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUxOTAy
NTIwM1oXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoMzgyRkFCRjA3NDYwNzMw
MDczQkM4N0Y2QUZCQ0NBQjdDMzUwRjM4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKWZBtTe9RmWr8AAVQr9m71pIuCLpCbgt2b5dT2kNhcB3gsyZ7kN
zaniO5bM6uR6Wmcew/OgIQWsFBBWdEzBpn/aXH+yR5Qjmqy+3KuHymWMgyH2gCF+
+BvA1ixYJPGajQLoBIOgA/SXcTQke6GWZpbiyVRi4ui1BfwJGPi2HDlFLyV18Dbn
sjkuka/0XpOQjtLmJ4FxlYDigSSRc97Ml62mthCR+PHxOhgkHKb41S5oD8EiQe8u
9cDzBxoQK58C6CJKkBTSBU5IzAEvdC0oEctwH/VYVPO+KEEtrKnP7TZ6/g+zFHz4
syDE6ffGhM+YvsHfokcHBKadlEQfCN/UGJsCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQ4L6vwdGBzAHO8h/avvMq3w1DziDAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvT0MtcjhIUmdjd0J6dklmMnI3ekt0OE5RODRnLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcuMIDANBgkqhkiG9w0BAQsFAAOCAQEA
gb1sI0wPbSvFwHkqjzitX8A6Wv2bdDA6OFsJ7+aNar+jIsv8RwRkXJjTt+8DpX/C
6p/012JOgi2uqb3cRqIxeAJUJrrQ42PZIBJV67+oXyXenGjoPMyZ8etR8Eo2AeyZ
7kA83j9EgXu9+1SrxV28MzUNCp9+h0cxPZ854QrwjkQ3T3O5xKgjZHCU5FQEvBhx
1ILFtQ/kelN3NOVs9KPzC5NoxUi/nnAK891NIxOWR2dED5Llc4KIgK0LiAOxBw0k
aFXOL7tB9/yI6jPxOG1KlY8zUWA/G86CBaL4r+ftFzvW9REa+ekGeXc9+aIhkx95
nqtqBSGWLnFCFtE9+YtiiQ==
-----END CERTIFICATE-----
Generated at Sat May 23 05:47:55 2026 by rpki-client