
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/kJb1YQnxHo3jURsSHmTMKl5pCBo.roa
File: kJb1YQnxHo3jURsSHmTMKl5pCBo.roa (raw, json)
Hash identifier: Y8Tkr47Liv/qRvjvO+c5hQUUDM6nlHrv2bVulrE6DXs=
Subject key identifier: 90:96:F5:61:09:F1:1E:8D:E3:51:1B:12:1E:64:CC:2A:5E:69:08:1A
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 4A
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/kJb1YQnxHo3jURsSHmTMKl5pCBo.roa
Signing time: Tue 19 May 2026 04:43:17 +0000
ROA not before: Tue 19 May 2026 04:43:17 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 17506
IP address blocks: 219.113.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 19 04:43:17 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=9096F56109F11E8DE3511B121E64CC2A5E69081A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:35:b9:4e:31:f5:7f:fd:8e:a1:e1:52:3e:
0b:de:7b:09:5e:b9:0e:63:c5:6e:b0:22:cc:5d:94:
6f:76:a0:ef:f5:ba:a3:25:ad:ca:4b:c4:a0:c9:fc:
94:4d:8c:61:c0:70:6b:4d:d7:79:ae:66:54:b2:02:
b9:09:69:8b:c9:99:e7:87:4b:23:97:0e:e8:6b:c4:
26:cf:4a:45:e8:7a:7b:b1:bb:25:11:73:6a:ee:be:
d2:5f:61:d1:5d:3c:b4:1f:37:da:1e:ce:8c:59:b2:
c2:e5:f3:13:e7:40:6d:32:e7:c9:3e:04:35:dc:5f:
f5:71:90:28:6c:06:08:27:37:f7:05:61:10:a8:dc:
69:1b:94:2b:18:e9:32:e6:a2:29:f5:36:54:bb:98:
63:ad:59:21:1d:ea:fe:3e:7d:8d:f9:bf:ae:de:89:
98:38:ed:2b:0b:cb:77:3c:ee:b5:e5:b1:82:10:bc:
fc:64:6c:39:21:b8:92:f2:71:e6:ef:0e:95:3d:3f:
89:86:86:92:af:f3:65:57:1c:93:a5:f8:2d:b4:ae:
16:16:5c:de:0b:3e:25:ba:25:4a:c4:00:96:63:7f:
a1:58:36:fa:a2:03:12:16:29:82:87:db:0c:05:da:
d7:ea:4a:1b:20:72:1c:2e:9e:d3:bf:27:31:97:ad:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:F5:61:09:F1:1E:8D:E3:51:1B:12:1E:64:CC:2A:5E:69:08:1A
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/kJb1YQnxHo3jURsSHmTMKl5pCBo.roa
sbgp-ipAddrBlock: critical
IPv4:
219.113.128.0/17
Signature Algorithm: sha256WithRSAEncryption
d0:2f:00:76:72:a4:61:5a:59:df:72:50:ae:a3:47:61:11:28:
a7:12:e1:b4:b1:6f:78:e2:80:1a:39:b8:e6:c7:9e:97:f7:de:
c2:1b:88:50:1d:30:ae:80:c5:4e:c3:73:34:36:bf:d7:7f:0f:
27:55:f6:1a:14:01:82:1b:05:5c:ed:5a:7f:bf:af:4a:42:7c:
5c:69:30:5c:3e:1b:70:26:92:8f:5b:6d:5d:d3:e1:9b:49:06:
25:e0:f6:2d:b9:dc:f8:da:a1:77:48:0c:38:f9:49:3e:b6:81:
f6:aa:9a:38:51:70:d0:a0:df:a2:fd:21:c5:8a:35:94:ff:f1:
b7:27:a9:1f:e9:ae:8c:e8:c9:9a:ab:16:b7:2f:b4:de:e8:4b:
48:b0:c0:b9:54:ef:8c:93:95:35:36:06:23:d6:69:94:81:60:
48:a8:a6:70:af:93:2a:0c:65:55:ed:62:41:8e:85:9c:b5:5f:
66:2f:73:e6:64:df:7b:38:be:09:55:66:9c:0a:e0:e7:96:a1:
38:45:d5:16:39:1c:a7:94:a8:58:16:2c:84:8d:26:76:53:fe:
14:c7:95:c5:90:55:2e:9b:c9:ba:e0:7d:d7:16:1f:fd:27:ff:
e1:22:30:46:ff:b4:d8:57:0a:d8:d4:6e:02:fc:e7:bf:15:42:
94:ad:e8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:03 2026 by rpki-client