
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/ks5zprVUvZi4SqIYZtMr1m6UdcA.roa
File: ks5zprVUvZi4SqIYZtMr1m6UdcA.roa (raw, json)
Hash identifier: uJVjfZBZBK0NKt2YlztaLlUc2ysBOWZJk9CYOVC1qWI=
Subject key identifier: 92:CE:73:A6:B5:54:BD:98:B8:4A:A2:18:66:D3:2B:D6:6E:94:75:C0
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 61
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/ks5zprVUvZi4SqIYZtMr1m6UdcA.roa
Signing time: Wed 20 May 2026 05:21:53 +0000
ROA not before: Wed 20 May 2026 05:21:53 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 222.229.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 03:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 20 05:21:53 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=92CE73A6B554BD98B84AA21866D32BD66E9475C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:ac:0b:5e:26:dc:a4:c2:bf:c9:f3:7a:64:
e1:18:c8:03:56:65:5b:df:f4:12:38:f9:9a:56:e2:
57:d5:d3:9b:55:fd:58:9f:c5:13:db:ac:4b:10:5a:
bd:ac:12:12:ea:67:d0:40:aa:f1:9c:9b:b6:2a:46:
b2:8d:b4:1a:3b:87:06:ce:c6:bd:77:59:0c:04:89:
6f:42:ba:b7:85:e5:09:49:96:5a:4b:ed:4d:83:f9:
8a:28:c8:d6:eb:e1:69:c8:32:f1:98:b6:09:e2:f3:
d3:fc:17:e6:33:dd:c1:63:34:82:66:cb:26:9b:48:
93:e0:2a:ae:cd:08:08:74:3e:44:eb:21:7e:a1:5d:
0a:d1:e8:d7:9b:e2:96:33:cc:da:f5:98:72:aa:f2:
fd:2d:f4:a3:c3:15:e7:d2:4e:dd:91:50:fc:06:67:
fd:f1:c0:ee:54:cf:21:05:2e:90:1b:e6:3a:c6:00:
cf:92:3c:27:d5:a0:4b:7c:c0:ed:a6:94:c2:c6:ee:
39:ed:d7:a4:0b:8e:b7:a2:56:a6:75:16:b7:a8:3f:
b7:5d:15:6f:cf:76:c0:08:13:e3:19:4e:fd:a7:b9:
94:c0:43:c9:1d:2e:1d:7c:16:2c:3a:da:c5:02:b0:
ba:59:2b:39:cf:ed:97:41:d2:5c:f5:42:df:81:ed:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CE:73:A6:B5:54:BD:98:B8:4A:A2:18:66:D3:2B:D6:6E:94:75:C0
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/ks5zprVUvZi4SqIYZtMr1m6UdcA.roa
sbgp-ipAddrBlock: critical
IPv4:
222.229.16.0/20
Signature Algorithm: sha256WithRSAEncryption
86:6a:21:05:44:e8:55:ac:be:82:b7:b0:cb:1a:b3:bc:86:cb:
b9:27:cd:6a:b4:0a:88:49:69:1c:36:dd:72:08:93:a5:ba:eb:
43:c3:e2:95:1a:a9:95:cb:8f:56:14:30:ba:9e:4a:4f:c9:3f:
11:ee:c9:29:d6:43:f8:59:31:f9:70:fa:42:7e:d8:e1:74:bf:
52:49:be:ce:6f:c1:4c:dc:c6:34:d1:44:97:17:52:9c:ef:8b:
2a:c9:34:37:fe:e1:d1:9a:71:f0:c2:fe:57:90:2f:01:26:68:
54:a0:93:81:c7:96:c6:1b:b3:f3:eb:61:f1:a6:2e:2b:0f:cc:
f3:b0:fa:63:11:1d:2a:06:67:14:1b:72:0a:dc:20:a8:da:9d:
88:0d:08:ba:b5:06:ad:49:a9:50:66:c1:a4:33:07:af:22:0e:
f7:91:13:7a:ea:b1:3e:8b:e0:8c:fa:df:c0:d3:f6:fb:6d:66:
47:54:54:df:d8:09:eb:5d:48:7e:21:c8:7c:3c:c7:a6:b6:53:
3f:11:39:49:9c:39:65:36:74:5c:8c:a2:be:c8:f5:85:f3:21:
ad:f0:ad:82:e3:0e:dc:b9:f2:c7:69:0c:b5:e8:39:74:b8:4f:
5b:42:29:92:c2:7d:91:84:c7:82:21:8a:f7:82:bf:22:b0:3d:
6e:17:7a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:01 2026 by rpki-client