
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/Yga2QMouJv4O4IHPCOvq9TGCpZw.roa
File: Yga2QMouJv4O4IHPCOvq9TGCpZw.roa (raw, json)
Hash identifier: t9AOTPXwIiJAlZIWKbOUVps1sAd/EXhGiy7eNzHHj6c=
Subject key identifier: 62:06:B6:40:CA:2E:26:FE:0E:E0:81:CF:08:EB:EA:F5:31:82:A5:9C
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 59
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Yga2QMouJv4O4IHPCOvq9TGCpZw.roa
Signing time: Wed 20 May 2026 02:29:50 +0000
ROA not before: Wed 20 May 2026 02:29:50 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 220.158.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 20 02:29:50 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=6206B640CA2E26FE0EE081CF08EBEAF53182A59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:9b:a1:53:e9:05:52:45:88:79:94:11:7b:
3f:10:01:16:26:56:8f:31:7a:7c:92:8c:5f:9f:24:
25:f8:7c:4b:3b:53:7c:26:41:ea:b2:87:40:10:33:
7a:2e:3f:6d:a2:7b:a5:58:3f:ef:b9:96:94:8e:b6:
42:11:f7:5b:cb:97:6b:83:a6:7c:58:64:7f:c0:a1:
f8:e8:a3:4e:5c:74:b3:d0:d2:9c:d1:5f:d1:90:a9:
70:25:19:a6:3c:41:a2:9a:ab:76:2a:9e:ee:d4:5f:
27:8d:bd:4e:8f:e5:fb:68:d3:c0:4c:62:5b:8a:a0:
0a:96:38:2e:b0:3b:c0:39:19:31:44:67:d6:d9:74:
6c:69:14:80:2d:80:e2:9b:8b:45:4b:6d:60:05:86:
b7:80:46:86:1c:54:d2:c3:32:51:54:fb:12:db:a2:
48:cd:b5:3f:89:4b:5f:15:84:09:c9:fa:ea:1e:30:
b9:64:cc:20:5b:20:7d:b0:68:3c:5d:ae:d3:af:7d:
d9:f8:53:96:02:c2:24:1a:9c:2f:5a:8b:c9:1e:1b:
1c:52:35:68:c8:00:9c:c7:9e:97:5c:54:ba:f3:7b:
5e:0f:68:bf:8d:13:2e:a5:5b:b4:69:27:e4:82:61:
29:de:d5:a3:b6:1a:f8:0f:70:63:71:9b:39:80:a2:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:B6:40:CA:2E:26:FE:0E:E0:81:CF:08:EB:EA:F5:31:82:A5:9C
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Yga2QMouJv4O4IHPCOvq9TGCpZw.roa
sbgp-ipAddrBlock: critical
IPv4:
220.158.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:f4:29:ca:cd:1f:d6:de:d2:4d:18:bc:bf:55:55:34:13:7f:
24:68:bd:c4:38:fb:0d:64:f5:0c:df:33:df:95:b3:3f:73:52:
c6:df:38:35:f6:69:56:7c:72:82:cf:b0:f9:82:16:38:de:c1:
6b:6f:2a:fc:4e:59:06:1f:02:d9:09:78:50:80:c5:bd:33:7a:
38:b0:ff:f4:77:67:a5:66:a4:60:09:dd:ea:38:47:a3:cb:8a:
b0:9f:ba:15:ef:b0:85:d5:92:e8:e9:16:04:13:39:b8:6b:92:
67:c1:43:f9:e0:a6:2a:d5:39:ed:a4:26:8f:58:e7:5e:0c:ef:
9a:17:81:aa:28:05:c7:ee:6f:ae:66:87:cd:0e:28:64:7f:d2:
dd:1f:43:3b:4c:8b:a3:bc:52:37:d6:d6:e8:f7:36:cf:ff:00:
78:7f:17:c4:b9:f3:80:49:ae:b4:24:5d:b6:60:85:f9:e7:21:
5b:a0:ea:6a:f1:96:2c:dd:9c:71:49:b2:51:b3:3e:76:5d:e1:
0c:c7:e4:18:3e:5f:e7:ba:2d:44:bc:6a:e3:bf:d4:32:d9:19:
20:da:3e:ea:a6:c2:3c:6b:92:5c:75:03:ca:ec:3e:28:52:a1:
0b:30:d6:0d:57:f7:bf:14:e3:00:83:2f:38:82:33:47:11:f4:
03:22:f8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:08 2026 by rpki-client