
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/gEPaq3JpcD2EZvAogDJlnjGhppQ.roa
File: gEPaq3JpcD2EZvAogDJlnjGhppQ.roa (raw, json)
Hash identifier: D5+ArTDSx+ITDNWPhDWXKMT6bSKCw+R9/t3tRiBO7XI=
Subject key identifier: 80:43:DA:AB:72:69:70:3D:84:66:F0:28:80:32:65:9E:31:A1:A6:94
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 63
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/gEPaq3JpcD2EZvAogDJlnjGhppQ.roa
Signing time: Wed 20 May 2026 07:16:21 +0000
ROA not before: Wed 20 May 2026 07:16:21 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 222.229.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 03:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 20 07:16:21 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=8043DAAB7269703D8466F0288032659E31A1A694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c7:0c:28:df:a5:e0:12:b4:b2:68:5b:18:e5:
49:29:29:8a:41:31:31:c2:86:f8:24:06:d3:9c:0b:
50:d8:b0:fa:cb:72:ae:38:10:6e:ca:4e:80:5e:ba:
5c:aa:80:7d:c6:1b:94:b1:ec:3f:66:dc:6a:25:c9:
88:7f:7e:f0:62:e7:65:d9:91:67:a9:9f:90:cc:3b:
93:52:59:b8:59:c7:56:6c:5e:2f:7d:33:3b:31:0e:
29:72:d1:df:65:a2:90:80:ce:d3:fd:67:e8:81:1c:
21:19:04:4c:e8:3e:29:ee:d4:e3:14:35:d1:de:c0:
af:47:f1:af:77:a1:f0:1b:58:15:94:04:84:97:c3:
13:9f:90:bf:d2:de:b5:d4:19:54:80:e3:76:3e:3c:
59:8c:95:bf:16:84:de:d6:35:92:bf:4f:bc:a6:5f:
42:5c:fa:37:db:ea:50:31:0b:9c:68:98:5a:bd:db:
92:88:6f:aa:5b:d6:63:3a:88:3f:24:ba:b1:0f:b6:
2e:14:91:49:cd:50:08:21:53:3a:be:f7:d2:6b:2a:
d7:68:fd:ba:bd:27:25:81:c6:45:bf:69:ec:29:ab:
68:0d:59:d5:82:5d:b7:38:66:3a:93:49:b7:4e:73:
7e:ee:ae:85:a8:24:0a:48:d6:34:1d:41:88:80:0c:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:DA:AB:72:69:70:3D:84:66:F0:28:80:32:65:9E:31:A1:A6:94
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/gEPaq3JpcD2EZvAogDJlnjGhppQ.roa
sbgp-ipAddrBlock: critical
IPv4:
222.229.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c5:a1:fe:22:4d:f9:30:99:e4:92:90:6d:ba:bd:28:b3:b4:ec:
07:3b:54:b6:ac:27:05:95:4d:f5:cb:78:4a:cc:18:1f:b7:6a:
cc:2d:64:59:a5:f2:dd:ee:52:1c:54:86:93:e5:ef:4c:d3:f7:
0e:6e:98:48:36:a7:d0:01:52:cb:fa:e6:d6:6a:73:be:f5:fb:
4c:2f:27:33:53:db:99:75:37:5b:33:66:7d:f0:13:ef:7b:11:
d4:44:d6:c5:3a:8d:dc:1c:3b:a8:75:a8:4d:ad:90:fe:ce:e5:
57:34:8b:d0:23:74:95:3b:11:34:cd:6b:9e:c4:a4:a6:12:e7:
2f:23:4f:37:f1:d4:33:a1:fc:b2:7c:2c:4d:8f:72:88:2c:94:
38:0d:b7:e3:55:4b:c9:f7:6c:32:d4:c7:02:98:8b:47:46:5a:
72:13:83:5c:a3:7f:0e:45:4a:25:7e:27:35:0d:d0:f6:86:55:
b7:cc:d9:34:e8:a7:a9:c4:c0:9c:86:f0:aa:c3:e6:f0:17:98:
ca:59:8e:9d:f1:57:d4:b8:50:33:a1:e1:15:a9:b3:84:b3:d6:
50:ae:46:e8:c9:0e:96:12:0f:52:41:a0:f1:91:68:d8:83:a9:
be:8b:b4:7c:20:f3:ff:74:65:13:77:e6:d7:c2:20:bd:a0:06:
c4:55:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:06 2026 by rpki-client