
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/hjXFYXyNp2AM24Th-EVydQ-_ltM.roa
File: hjXFYXyNp2AM24Th-EVydQ-_ltM.roa (raw, json)
Hash identifier: cA0NQNvrphD/avDmi/VC/Vb+wsGiRyJ9Fc0y8z/nU6w=
Subject key identifier: 86:35:C5:61:7C:8D:A7:60:0C:DB:84:E1:F8:45:72:75:0F:BF:96:D3
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 78
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/hjXFYXyNp2AM24Th-EVydQ-_ltM.roa
Signing time: Tue 30 Jun 2026 01:13:39 +0000
ROA not before: Tue 30 Jun 2026 01:13:39 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 2519
IP address blocks: 36.3.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 30 01:13:39 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=8635C5617C8DA7600CDB84E1F84572750FBF96D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:92:f7:ed:f2:b9:c5:4f:40:86:0d:8d:bd:
71:b4:f7:93:13:4e:dd:4f:83:fa:5c:bd:8b:2b:1c:
83:57:c3:93:80:61:09:ab:32:49:1a:bf:e4:3d:0b:
22:75:c5:af:57:a4:d9:51:d0:b2:9c:c4:47:4e:56:
7f:11:07:87:3b:a8:1a:f3:4e:58:e6:38:97:0f:67:
23:5a:07:60:74:ad:c6:09:97:9a:78:75:32:2a:b5:
7e:91:ef:18:a2:e5:6d:77:6c:79:08:d1:61:f8:a5:
bc:19:26:d5:63:99:0f:4b:f3:6c:56:5a:cc:78:db:
20:7f:b9:d5:84:50:e1:a2:26:28:bc:81:c4:b8:11:
21:b9:ff:dc:19:2b:71:63:19:31:84:e5:ee:cb:3a:
e7:7f:7c:fe:a9:13:20:ef:e9:32:12:9a:ec:d3:7b:
b2:e7:b3:d3:e6:93:cb:7e:1f:82:65:cb:dd:78:fe:
76:f3:b8:30:22:ba:3b:8c:f6:ea:5c:2a:69:1a:cf:
2e:9b:8c:e5:5c:1b:70:2c:3d:a9:73:f3:48:72:0c:
69:1b:20:17:b9:42:49:35:8c:27:53:14:1b:75:04:
4e:41:44:af:8f:82:29:1d:89:a5:95:f4:8f:81:1a:
12:dc:95:c9:0a:a1:b1:98:58:5d:79:f2:fe:cb:cf:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:35:C5:61:7C:8D:A7:60:0C:DB:84:E1:F8:45:72:75:0F:BF:96:D3
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/hjXFYXyNp2AM24Th-EVydQ-_ltM.roa
sbgp-ipAddrBlock: critical
IPv4:
36.3.0.0/18
Signature Algorithm: sha256WithRSAEncryption
bd:6b:40:fc:1d:48:a2:18:1d:e2:fc:23:8d:0c:14:30:2f:56:
20:ef:a5:75:ee:f9:da:a2:ac:93:f2:ba:d3:5f:0d:8a:02:8e:
4c:22:54:e2:64:5e:01:d7:d9:f7:80:8a:67:57:6b:6c:52:8e:
87:5e:cd:e3:6f:a1:3c:74:34:b1:47:08:ec:5d:2b:f7:81:86:
0f:fc:7d:89:01:a5:2a:c6:f4:5d:34:97:f2:de:61:08:9c:8d:
90:f5:92:e7:f3:33:40:91:45:11:87:11:90:99:9e:bd:1f:1b:
e9:9e:fb:92:7a:14:e8:2a:97:83:bd:aa:40:49:ca:ee:5d:cc:
10:38:9a:ce:55:18:89:e9:28:1b:d0:8d:d1:01:64:f0:23:94:
af:50:07:53:80:7f:57:eb:b9:d5:f7:98:d3:e5:68:80:a0:87:
fa:c4:a1:30:0b:46:9b:9c:a6:89:66:ad:89:3a:61:24:05:bf:
66:ea:b0:86:3e:c0:84:14:b4:64:87:81:1f:8e:cc:f5:14:af:
b2:53:ae:9f:62:4a:9e:01:9d:87:28:b5:a1:2a:52:25:d0:34:
ef:8c:72:0e:f3:ac:c9:f6:81:09:0b:4a:a7:bf:96:d0:b0:93:
60:df:35:fd:a2:43:ff:7f:37:e3:a5:21:ff:ce:87:3e:b5:3e:
01:9e:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:24 2026 by rpki-client