
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/_OK4MJ_XzHpre32kM8UflrC9aeE.roa
File: _OK4MJ_XzHpre32kM8UflrC9aeE.roa (raw, json)
Hash identifier: IRByItYs+KxMM16f/syrpVpYljv5R617PIBhqIu4L8k=
Subject key identifier: FC:E2:B8:30:9F:D7:CC:7A:6B:7B:7D:A4:33:C5:1F:96:B0:BD:69:E1
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 7D
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/_OK4MJ_XzHpre32kM8UflrC9aeE.roa
Signing time: Tue 30 Jun 2026 01:19:35 +0000
ROA not before: Tue 30 Jun 2026 01:19:35 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 17506
IP address blocks: 58.4.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 30 01:19:35 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=FCE2B8309FD7CC7A6B7B7DA433C51F96B0BD69E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:f9:35:41:a4:d7:4e:cc:0b:fe:4c:34:e1:
62:9a:31:e9:f5:e2:e5:ee:9a:84:23:0b:00:c7:0b:
ea:4a:78:d7:27:6f:9d:0a:29:58:d1:a5:a5:0e:13:
1f:0e:8e:b6:19:93:61:f9:d8:af:40:f1:d2:f4:4d:
12:e0:90:52:96:a2:d6:48:d4:0e:37:a8:e4:b5:dc:
b9:33:52:94:1c:e1:c1:d4:86:1b:16:49:67:41:08:
76:b7:04:a4:90:39:15:34:e5:55:cb:98:80:93:8f:
85:71:aa:b1:bb:c1:e4:66:a7:4a:4b:b6:a0:ca:86:
a4:5f:d4:7c:8e:4b:c1:ab:0f:d5:3b:02:3b:46:71:
00:a4:99:32:49:b1:6a:e4:e6:8d:4e:dd:3a:ab:a6:
a9:95:83:22:b6:37:4a:2d:64:53:1b:df:6d:58:8e:
7b:d2:5f:f5:67:f4:fe:0a:e1:44:a8:34:e0:87:9f:
eb:b5:30:77:81:49:96:21:c0:ae:fa:55:9e:70:8d:
dd:a0:21:1d:c5:9d:91:0b:c3:a3:c4:a5:22:0b:f3:
68:43:39:a4:bc:6b:54:bf:15:94:43:9b:01:69:31:
49:41:c3:e0:58:02:2f:0b:b8:3d:18:ec:c6:b4:5b:
2c:0f:ff:0f:0c:59:c2:95:0d:18:ee:13:26:be:c4:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E2:B8:30:9F:D7:CC:7A:6B:7B:7D:A4:33:C5:1F:96:B0:BD:69:E1
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/_OK4MJ_XzHpre32kM8UflrC9aeE.roa
sbgp-ipAddrBlock: critical
IPv4:
58.4.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b7:1f:d6:b3:75:f1:0a:aa:92:9e:d6:33:57:87:5a:cd:5e:8b:
02:2f:d2:1d:6d:a3:90:29:24:8e:43:87:b9:9a:eb:10:fa:9c:
27:ec:11:37:2a:cb:4c:7c:d6:44:88:f6:f6:39:4e:56:7e:29:
7f:f2:41:76:3e:9d:03:65:06:8a:51:aa:4c:a7:39:2b:0f:79:
7c:f1:cb:fe:d7:5c:be:0a:f2:cc:f3:f7:dc:42:6e:12:8e:96:
75:31:ee:0c:d4:82:09:2a:43:0c:6b:50:51:8f:e8:a6:8a:97:
5c:7a:71:d9:4a:1a:0f:cc:8f:af:39:df:f3:dc:7a:7c:14:5e:
e1:9b:bf:b4:46:ac:fb:2c:ee:b3:09:2a:b0:64:d4:e0:08:ea:
78:79:7a:0e:c9:cf:53:5e:b3:92:87:8e:7f:39:28:dc:f1:a8:
12:84:3b:ad:f0:5a:6f:1b:a1:7d:79:9a:1a:33:f6:20:da:7a:
84:fc:92:8c:d3:78:ea:77:2d:cf:25:2f:71:ce:9c:05:0a:c5:
62:80:c6:65:69:8f:75:55:47:99:0a:02:af:49:32:58:0e:04:
8e:3f:b9:2a:fa:62:ed:75:65:10:60:67:ed:70:c5:33:b4:dc:
a3:7d:df:e5:6c:dc:3d:e7:ae:18:f7:f6:4a:05:7d:5a:f0:5a:
bc:76:1b:de
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDYzMDAx
MTkzNVoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRkNFMkI4MzA5RkQ3Q0M3
QTZCN0I3REE0MzNDNTFGOTZCMEJENjlFMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJNC+TVBpNdOzAv+TDThYpox6fXi5e6ahCMLAMcL6kp41ydvnQop
WNGlpQ4THw6OthmTYfnYr0Dx0vRNEuCQUpai1kjUDjeo5LXcuTNSlBzhwdSGGxZJ
Z0EIdrcEpJA5FTTlVcuYgJOPhXGqsbvB5GanSku2oMqGpF/UfI5LwasP1TsCO0Zx
AKSZMkmxauTmjU7dOqumqZWDIrY3Si1kUxvfbViOe9Jf9Wf0/grhRKg04Ief67Uw
d4FJliHArvpVnnCN3aAhHcWdkQvDo8SlIgvzaEM5pLxrVL8VlEObAWkxSUHD4FgC
Lwu4PRjsxrRbLA//DwxZwpUNGO4TJr7El/8CAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBT84rgwn9fMemt7faQzxR+WsL1p4TAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvX09LNE1KX1h6SHByZTMya004VWZsckM5YWVFLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAToEMA0GCSqGSIb3DQEBCwUAA4IBAQC3
H9azdfEKqpKe1jNXh1rNXosCL9IdbaOQKSSOQ4e5musQ+pwn7BE3KstMfNZEiPb2
OU5Wfil/8kF2Pp0DZQaKUapMpzkrD3l88cv+11y+CvLM8/fcQm4SjpZ1Me4M1IIJ
KkMMa1BRj+imipdcenHZShoPzI+vOd/z3Hp8FF7hm7+0Rqz7LO6zCSqwZNTgCOp4
eXoOyc9TXrOSh45/OSjc8agShDut8FpvG6F9eZoaM/Yg2nqE/JKM03jqdy3PJS9x
zpwFCsVigMZlaY91VUeZCgKvSTJYDgSOP7kq+mLtdWUQYGftcMUztNyjfd/lbNw9
564Y9/ZKBX1a8Fq8dhve
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:58 2026 by rpki-client