
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/iaE8B0W7dHFWxf-bi_ltKQMVKW4.roa
File: iaE8B0W7dHFWxf-bi_ltKQMVKW4.roa (raw, json)
Hash identifier: fazMAr5ejJfi3x94kNjGENSk5BQESh1buiW+KjSBPnw=
Subject key identifier: 89:A1:3C:07:45:BB:74:71:56:C5:FF:9B:8B:F9:6D:29:03:15:29:6E
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 3F
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/iaE8B0W7dHFWxf-bi_ltKQMVKW4.roa
Signing time: Tue 19 May 2026 02:15:34 +0000
ROA not before: Tue 19 May 2026 02:15:34 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 202.239.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 19 02:15:34 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=89A13C0745BB747156C5FF9B8BF96D290315296E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:91:83:95:dd:65:bf:c3:cf:ef:af:81:e0:b7:
f8:57:f7:58:0a:c6:5e:29:4a:36:7e:3d:72:23:a0:
28:23:8d:86:46:ec:40:da:bd:76:f1:42:fe:6b:68:
bd:b7:ef:35:7e:5f:66:e3:2c:fc:89:e5:9e:59:1d:
11:b6:5b:a5:16:91:f6:c1:d3:8f:b7:f4:3f:af:0f:
8f:f8:c0:bb:6b:f2:10:37:ed:2a:c5:b7:0b:ce:ad:
43:58:04:16:1a:51:fa:1e:69:df:55:55:80:55:47:
b6:08:22:c0:44:ff:76:f0:30:6c:d8:e4:31:b1:96:
f7:d3:a4:f7:f1:86:4c:61:5f:04:9a:93:cf:3d:0b:
cf:32:c2:8b:ce:62:4b:db:ba:c5:59:d5:5f:a0:88:
f4:c4:bc:be:00:ea:f5:e8:1f:85:e2:78:47:d2:5c:
03:56:07:24:54:4c:d5:b8:4f:6a:1c:42:02:a2:91:
37:9c:c7:f9:b2:76:cd:55:f3:88:43:96:ed:f5:30:
af:cc:28:7b:1d:51:f9:fa:b5:57:cf:a9:f4:84:36:
d1:ef:7c:80:21:8b:0c:7c:56:40:0f:0a:8b:5e:83:
e9:11:e0:92:91:16:d3:e0:71:35:c1:1f:ee:de:0e:
e3:a7:07:39:36:88:8e:e5:eb:1f:48:55:07:e5:b4:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A1:3C:07:45:BB:74:71:56:C5:FF:9B:8B:F9:6D:29:03:15:29:6E
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/iaE8B0W7dHFWxf-bi_ltKQMVKW4.roa
sbgp-ipAddrBlock: critical
IPv4:
202.239.192.0/18
Signature Algorithm: sha256WithRSAEncryption
04:bb:78:3c:44:26:a1:64:67:8d:b5:8a:78:43:ca:7a:25:ac:
d4:22:7f:70:30:86:99:67:ed:e9:5e:5f:ff:40:26:1b:c9:e3:
0b:56:cb:3b:d1:9e:b9:ba:24:2b:25:b6:83:fe:36:78:de:1c:
0b:8c:2d:34:d2:f7:cf:ff:54:3d:dc:2c:2a:e1:46:33:0f:ec:
ef:ea:ef:6d:b7:dc:4e:12:e3:68:ea:7b:3c:19:f0:34:39:f5:
bc:a5:34:82:58:33:fc:f5:87:9e:26:29:01:66:a8:6f:9c:a3:
2d:e3:6c:f0:99:e1:a9:fc:b6:a3:80:f8:88:4f:eb:e5:95:d3:
22:2f:be:09:69:a3:2a:0e:86:ec:36:9d:01:5b:ae:59:a4:97:
f5:3d:12:1d:04:4f:c3:38:6f:ea:ff:e2:a4:e0:39:9b:62:88:
0b:8d:ee:58:2b:15:5b:a2:0e:7b:f1:5a:19:87:78:bd:13:32:
fa:f0:e8:1a:39:41:ac:28:2c:1c:20:ce:df:1c:f5:c7:43:35:
88:f3:5c:a3:20:10:e4:f9:93:d3:26:7a:fe:ea:dd:46:be:f1:
6c:df:3a:ba:53:0a:be:77:cf:18:45:50:c6:45:70:a2:88:d0:
0a:5e:77:46:bf:03:65:cc:e9:74:b7:32:1e:77:f6:b8:3a:55:
dc:65:dc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:06 2026 by rpki-client