
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/SpHNCeU8VIdFZL8vPBnN5Qis-1E.roa
File: SpHNCeU8VIdFZL8vPBnN5Qis-1E.roa (raw, json)
Hash identifier: cnB+Bt9OI064Xwiwb5FghZAhZKBUxemkskFBfKxqU2o=
Subject key identifier: 4A:91:CD:09:E5:3C:54:87:45:64:BF:2F:3C:19:CD:E5:08:AC:FB:51
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 4D
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/SpHNCeU8VIdFZL8vPBnN5Qis-1E.roa
Signing time: Tue 19 May 2026 05:01:11 +0000
ROA not before: Tue 19 May 2026 05:01:11 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 17506
IP address blocks: 220.151.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 03:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 19 05:01:11 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=4A91CD09E53C54874564BF2F3C19CDE508ACFB51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:88:ac:eb:69:07:4e:e5:75:3c:36:45:be:
9b:b6:13:ba:1e:6f:f5:df:3a:5e:34:4a:cb:6d:96:
02:7c:c4:ba:ab:af:44:4d:bb:e0:d8:ae:0d:f8:31:
54:27:77:27:87:5d:c4:5d:a7:4f:80:64:c6:f4:99:
39:bd:76:00:5d:d5:bb:27:9c:36:f3:eb:5c:2b:1d:
eb:a1:50:12:af:cf:4f:cf:b6:c0:a5:0f:ee:ff:04:
6d:e9:84:8e:42:8d:28:9d:b2:91:50:e6:4f:3e:c7:
0d:c3:7a:22:10:15:b6:90:ec:01:00:49:c8:66:64:
c1:bc:64:e5:7d:e3:b5:a3:b8:91:1e:97:f1:5f:27:
68:95:eb:be:4c:1f:07:a5:76:d7:d3:df:c1:c4:d1:
de:d9:63:bf:3c:5b:53:29:a7:c9:91:7c:9b:8e:ce:
43:4e:11:11:a3:bb:3c:98:b3:2f:d4:9a:3d:be:0b:
52:9f:44:75:9b:f6:8a:99:79:3e:9a:5d:64:0f:33:
25:44:e7:e0:02:bc:06:b7:c4:5c:90:ae:ed:1d:f7:
10:1e:3f:6c:cc:66:4b:d5:50:b6:b6:4d:64:7e:5b:
b5:6a:a4:be:a4:ef:37:3d:4a:69:5a:dd:08:66:6b:
b2:ce:b2:7a:ce:9d:2e:ce:9e:a5:ea:8a:86:3c:05:
9b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:CD:09:E5:3C:54:87:45:64:BF:2F:3C:19:CD:E5:08:AC:FB:51
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/SpHNCeU8VIdFZL8vPBnN5Qis-1E.roa
sbgp-ipAddrBlock: critical
IPv4:
220.151.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:39:b0:6c:3c:6a:48:e1:46:1a:ac:d6:88:9a:31:42:93:7e:
88:27:c3:a3:82:0e:55:68:35:70:2f:7e:f0:8b:91:fc:04:d7:
e8:16:e6:84:d9:e5:ef:87:20:6b:b7:24:fa:e3:e6:b7:91:f0:
9d:26:c1:e1:45:5e:4b:b8:ee:18:48:43:1e:6b:89:5d:20:0e:
7d:b0:ce:1a:6c:0c:a6:4d:ba:fc:10:6f:1a:1e:1b:95:ad:96:
0d:48:0e:38:4d:15:ab:5e:8f:ff:38:75:8d:38:c0:78:b4:d0:
75:d5:01:c8:8d:49:4e:50:30:12:70:1f:7b:b2:87:9d:b9:d1:
2f:fb:32:8b:cc:87:9e:97:6d:59:57:96:71:18:c6:45:3e:43:
c7:ea:26:f4:5f:2a:15:66:34:17:79:01:55:a8:35:ce:29:bf:
19:ef:e8:bb:fa:3f:dd:58:d0:e7:1f:c4:79:3e:66:d6:e5:dd:
fe:2e:c3:86:2d:d1:35:61:c1:68:7e:2c:d2:17:c1:b0:86:96:
05:7a:14:4f:fe:83:09:ab:8d:db:81:7e:b3:3b:85:f2:d9:da:
e7:48:92:24:a2:07:2a:1b:7a:e5:62:a4:2f:97:6e:36:74:3e:
29:73:e2:76:43:c7:d4:00:96:dc:a4:d0:2f:79:b0:90:41:aa:
92:26:ea:b9
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDUxOTA1
MDExMVoXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoNEE5MUNEMDlFNTNDNTQ4
NzQ1NjRCRjJGM0MxOUNERTUwOEFDRkI1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANGfiKzraQdO5XU8NkW+m7YTuh5v9d86XjRKy22WAnzEuquvRE27
4NiuDfgxVCd3J4ddxF2nT4BkxvSZOb12AF3VuyecNvPrXCsd66FQEq/PT8+2wKUP
7v8EbemEjkKNKJ2ykVDmTz7HDcN6IhAVtpDsAQBJyGZkwbxk5X3jtaO4kR6X8V8n
aJXrvkwfB6V219PfwcTR3tljvzxbUymnyZF8m47OQ04REaO7PJizL9SaPb4LUp9E
dZv2ipl5PppdZA8zJUTn4AK8BrfEXJCu7R33EB4/bMxmS9VQtrZNZH5btWqkvqTv
Nz1KaVrdCGZrss6yes6dLs6epeqKhjwFm4UCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBRKkc0J5TxUh0Vkvy88Gc3lCKz7UTAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvU3BITkNlVThWSWRGWkw4dlBCbk41UWlzLTFFLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANyXMA0GCSqGSIb3DQEBCwUAA4IBAQBv
ObBsPGpI4UYarNaImjFCk36IJ8Ojgg5VaDVwL37wi5H8BNfoFuaE2eXvhyBrtyT6
4+a3kfCdJsHhRV5LuO4YSEMea4ldIA59sM4abAymTbr8EG8aHhuVrZYNSA44TRWr
Xo//OHWNOMB4tNB11QHIjUlOUDAScB97soedudEv+zKLzIeel21ZV5ZxGMZFPkPH
6ib0XyoVZjQXeQFVqDXOKb8Z7+i7+j/dWNDnH8R5PmbW5d3+LsOGLdE1YcFofizS
F8GwhpYFehRP/oMJq43bgX6zO4Xy2drnSJIkogcqG3rlYqQvl242dD4pc+J2Q8fU
AJbcpNAvebCQQaqSJuq5
-----END CERTIFICATE-----
Generated at Sat May 23 05:48:04 2026 by rpki-client