
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/dMBJuMGAm-IKPWi0KYuc-UULZkM.roa
File: dMBJuMGAm-IKPWi0KYuc-UULZkM.roa (raw, json)
Hash identifier: Eqss5c3Rrphpbsqy/dQaN5QijiTn/ePgK9bRJ0ehnnU=
Subject key identifier: 74:C0:49:B8:C1:80:9B:E2:0A:3D:68:B4:29:8B:9C:F9:45:0B:66:43
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: AD
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/dMBJuMGAm-IKPWi0KYuc-UULZkM.roa
Signing time: Wed 29 Jul 2026 07:01:50 +0000
ROA not before: Wed 29 Jul 2026 07:01:50 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2519
IP address blocks: 133.175.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 15:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jul 29 07:01:50 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=74C049B8C1809BE20A3D68B4298B9CF9450B6643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:06:85:7d:96:29:82:19:ad:e3:a4:54:0d:
7f:98:18:87:9b:92:f5:71:a9:ce:f1:02:16:b2:6a:
13:85:61:bc:8b:68:d3:d6:30:0a:ac:3a:22:b6:bb:
1c:2d:66:72:ca:1b:ec:a1:44:a8:a5:5b:d4:2b:a7:
a0:57:0b:80:dc:7c:76:0d:7b:a3:eb:77:e6:20:ea:
1f:8f:17:f2:bc:68:91:86:f7:f4:3c:e6:7c:10:5f:
b1:e5:e7:04:78:b9:47:44:e9:91:cd:cc:da:21:6e:
1f:52:df:70:6d:b1:f6:1e:08:9d:a0:91:bf:38:24:
76:2c:d8:87:bf:88:3b:b3:21:e3:e3:37:70:07:98:
d5:f6:9f:6a:dc:c3:03:57:b7:b5:22:c4:46:49:76:
83:08:ce:83:11:9b:d1:6d:6e:44:88:17:b8:3f:81:
30:4a:c4:ca:77:a6:19:02:a7:76:93:64:48:b0:72:
6f:eb:56:8c:92:ac:cb:28:8c:c3:ac:61:ea:bb:5a:
cf:b8:3b:0f:29:fc:c7:5d:6c:af:95:94:aa:55:58:
e9:7b:4b:20:e8:66:97:80:de:1c:01:a1:bd:0b:86:
d7:4c:5b:10:bc:4d:d3:c2:cd:d0:e1:81:ff:b3:83:
9f:42:a1:57:56:87:84:95:c7:bf:ad:78:f0:07:de:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C0:49:B8:C1:80:9B:E2:0A:3D:68:B4:29:8B:9C:F9:45:0B:66:43
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/dMBJuMGAm-IKPWi0KYuc-UULZkM.roa
sbgp-ipAddrBlock: critical
IPv4:
133.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d7:59:61:a9:8c:37:93:24:97:59:fd:8b:e2:71:75:fa:04:a2:
4f:d0:38:59:3a:c5:61:ea:84:24:5c:de:1f:4f:66:14:a8:9f:
24:3d:f0:73:9a:78:36:80:dc:a1:b8:4f:82:48:78:ab:3a:f7:
13:af:c5:e0:e6:7f:3c:28:bc:2f:e3:71:de:94:93:b7:73:da:
0b:56:3a:e2:d9:af:c6:f7:e4:fb:fd:55:54:98:c7:eb:50:f8:
c6:b3:78:1b:97:16:ef:a0:fc:86:ec:c2:15:4d:c3:e7:89:3d:
0b:0d:18:78:63:a6:a9:05:c1:00:77:df:f2:c6:8f:19:11:5b:
94:08:11:e0:e4:64:17:e1:2f:1b:19:c2:51:12:8d:e8:0c:37:
b5:7a:66:48:39:00:0c:ba:ca:eb:a4:8f:bd:26:44:c0:7e:01:
eb:cd:71:4a:06:be:51:43:ce:28:42:c3:0f:a3:8e:5c:db:16:
93:c5:ab:34:0c:ad:b8:8a:94:f2:a3:ef:38:60:c1:9a:78:fd:
3c:a2:f9:59:ba:11:89:60:be:8f:a8:79:18:af:2d:6a:85:48:
4c:d7:91:90:fb:55:ef:d0:9b:24:22:e2:89:e2:ea:04:93:4a:
4a:f2:6b:73:b7:3a:2b:00:b1:b8:2e:14:6f:34:76:c4:09:33:
59:bd:65:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:16 2026 by rpki-client