
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/OeghUfKP72vra1Exy_TG43XOS6c.roa
File: OeghUfKP72vra1Exy_TG43XOS6c.roa (raw, json)
Hash identifier: MpWrz4S3YfWNc7ST59Azm336xQTGZ0ME04BC6jBN+gA=
Subject key identifier: 39:E8:21:51:F2:8F:EF:6B:EB:6B:51:31:CB:F4:C6:E3:75:CE:4B:A7
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 89
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/OeghUfKP72vra1Exy_TG43XOS6c.roa
Signing time: Tue 30 Jun 2026 02:07:45 +0000
ROA not before: Tue 30 Jun 2026 02:07:45 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 2519
IP address blocks: 116.91.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 30 02:07:45 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=39E82151F28FEF6BEB6B5131CBF4C6E375CE4BA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:be:62:68:0a:92:59:7c:22:54:6b:2e:58:
79:d0:3e:c3:5e:a0:6b:4b:24:ca:84:e0:d3:11:27:
7e:22:41:82:49:38:79:8d:1e:1a:bf:cd:5d:76:73:
c8:60:f8:e2:92:7b:34:54:50:14:b1:49:f2:91:62:
13:50:db:d3:56:6a:8e:43:3c:df:f8:50:61:07:9b:
90:52:e7:42:a5:08:3f:df:cc:c8:a8:1b:53:47:08:
82:24:1e:9b:c6:09:6a:11:db:e7:26:8e:e6:f5:11:
60:ea:07:25:64:66:97:ad:9b:34:9d:40:2a:ee:19:
f8:c9:b0:36:a1:81:7f:68:28:45:6f:cf:03:95:bf:
65:2d:f0:c0:26:94:0b:24:3d:f4:c6:43:37:a9:14:
33:cc:f9:90:c7:54:de:27:f9:cd:2e:d3:cb:a9:77:
7f:dc:7a:a3:d3:7b:32:14:04:31:97:26:66:85:a9:
f6:b2:05:8f:b0:1f:c2:93:03:87:55:5a:6d:a1:b6:
a6:a2:6e:91:fc:6c:67:ad:1e:e5:04:62:4c:a9:19:
3e:cd:fc:18:df:4b:9a:3a:9a:b7:19:50:0a:33:e4:
3d:f6:2b:21:f2:d1:96:1a:52:24:52:85:f3:e5:ec:
72:4d:d9:df:8e:39:07:b6:03:ec:d4:d6:45:fa:63:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:21:51:F2:8F:EF:6B:EB:6B:51:31:CB:F4:C6:E3:75:CE:4B:A7
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/OeghUfKP72vra1Exy_TG43XOS6c.roa
sbgp-ipAddrBlock: critical
IPv4:
116.91.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:33:7d:76:7e:6a:68:26:07:2b:89:26:e0:55:d2:19:1d:41:
bd:fb:e7:c7:7b:c7:f9:dd:e2:4e:64:32:34:44:f5:d9:05:40:
9f:a7:0b:7d:a1:08:6f:dd:ed:73:9f:86:81:6b:00:bb:4e:54:
83:81:c4:4f:ac:e4:5d:3c:c9:7c:7c:b8:34:8a:90:c9:14:ff:
90:34:7f:9d:15:0e:c4:ee:7f:f3:a1:63:04:23:d8:a1:52:88:
6a:b2:29:fc:85:ab:ee:d7:72:ff:f6:bc:65:63:e1:ef:64:32:
ae:64:df:f5:4b:dc:7d:b8:19:b1:5e:23:05:c1:56:8c:14:bf:
f4:a9:bc:9f:96:0e:96:af:7f:c8:90:ef:13:ab:22:76:47:7f:
37:bf:8f:f7:33:b6:53:9f:70:96:23:25:b4:09:e5:8b:e5:ab:
4f:6e:56:16:16:16:e3:9e:a4:38:f2:9f:c2:72:ac:64:66:43:
e3:61:7c:65:bd:dd:26:37:ce:88:76:45:04:12:62:e5:93:8a:
96:b6:27:67:bd:56:e2:5d:a5:2a:16:36:2f:a9:d1:67:0a:75:
9e:59:6c:17:3d:be:aa:85:73:57:5b:7c:97:d8:92:d3:9c:42:
42:bf:77:14:b2:6b:f2:63:f1:3a:f2:e0:5d:dd:0c:0d:60:cf:
94:78:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:18 2026 by rpki-client