
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/mgPTXoPgAFTo4gHFyC0fHpFK2Ts.roa
File: mgPTXoPgAFTo4gHFyC0fHpFK2Ts.roa (raw, json)
Hash identifier: sYbwhcAIaj0UDBmt3TqnIsp3GTODqGBu3dNoVmjEodo=
Subject key identifier: 9A:03:D3:5E:83:E0:00:54:E8:E2:01:C5:C8:2D:1F:1E:91:4A:D9:3B
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 6E
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/mgPTXoPgAFTo4gHFyC0fHpFK2Ts.roa
Signing time: Mon 29 Jun 2026 04:36:52 +0000
ROA not before: Mon 29 Jun 2026 04:36:52 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 2519
IP address blocks: 1.21.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 29 04:36:52 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=9A03D35E83E00054E8E201C5C82D1F1E914AD93B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:6c:cb:1b:30:86:75:f9:90:53:bc:3c:a2:
7c:2a:fa:2d:ca:ed:36:f7:d1:30:c3:03:d8:64:a7:
36:e8:c3:a5:e1:2d:15:16:6f:b7:e4:1b:36:2c:28:
8b:e6:57:dd:7b:23:6b:84:13:0a:9a:38:5e:44:24:
f2:42:52:16:4b:99:a2:a9:6e:83:17:77:a9:82:15:
81:52:e8:09:82:c3:b1:89:94:1f:83:95:7b:d8:3a:
66:85:83:7d:65:7d:5c:79:88:ca:75:f6:a2:2f:9c:
cd:6f:7b:b4:02:df:e2:f7:dc:44:b4:47:d1:64:98:
8c:e6:08:3c:ec:82:4b:14:f4:cc:a1:3e:b2:dd:ce:
eb:75:3b:62:23:1b:35:28:31:8a:54:95:d2:1b:d2:
e9:1e:15:fc:d2:02:f8:f9:fd:94:f5:22:ae:d8:e9:
a7:42:36:e5:3f:5e:e9:f6:43:01:a4:7b:a9:5f:f6:
84:70:e4:21:da:ff:a3:a0:fe:01:60:15:07:49:0a:
46:38:27:03:e9:c8:e3:f8:7e:f3:a3:7f:a5:83:67:
b3:fe:d8:73:06:74:e3:9b:72:76:cd:fb:2b:9a:6d:
b6:ca:bc:38:c6:00:bd:18:22:b8:de:e3:61:36:8b:
55:4a:b8:d3:5d:8b:16:c9:cb:11:03:4e:10:ff:e3:
e0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:03:D3:5E:83:E0:00:54:E8:E2:01:C5:C8:2D:1F:1E:91:4A:D9:3B
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/mgPTXoPgAFTo4gHFyC0fHpFK2Ts.roa
sbgp-ipAddrBlock: critical
IPv4:
1.21.64.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:38:30:09:48:d7:9b:fa:46:9e:99:31:73:5d:54:f7:a4:33:
1d:9e:f3:38:0c:bd:7b:d2:9e:ce:af:ff:bc:29:7e:06:af:11:
29:c7:7a:b1:d4:86:7a:62:f4:5e:f7:e5:68:a8:5c:bd:fd:3c:
ab:f5:21:31:c6:ac:b8:bf:02:d3:e6:ca:c4:be:fc:06:1a:69:
b2:7c:8f:20:64:0f:85:b7:42:87:a1:9b:54:d3:da:36:ad:6e:
ee:4a:27:57:e2:92:ba:99:4e:cf:00:63:07:a3:aa:d0:98:34:
88:8a:fd:2b:ea:65:c0:24:e0:ab:5d:dd:af:b1:a2:9d:49:5d:
6c:29:9a:d1:3c:a2:8c:d8:94:f0:cd:04:70:74:e6:dc:4c:bf:
4b:42:ca:a6:e5:d5:71:c7:f4:32:6b:12:c5:e3:76:89:68:60:
17:84:0e:cd:31:4f:88:d2:ec:dc:1b:88:8b:ed:c8:1a:20:24:
42:26:ea:a7:fa:c6:71:c9:77:60:dc:9d:6c:38:71:d2:60:14:
19:a4:3a:d6:56:ad:bf:1d:bd:9b:54:2a:d1:46:f8:00:a0:25:
fc:c7:18:b5:a9:86:40:05:1d:76:70:44:5b:6b:fd:ba:c7:67:
59:a7:7a:fa:81:6a:34:4c:cb:d9:c4:b3:7c:32:bc:4d:4a:b5:
65:15:b8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:13:45 2026 by rpki-client