
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/o8YOLO6KAlHqAGlycVXtFaAPPQE.roa
File: o8YOLO6KAlHqAGlycVXtFaAPPQE.roa (raw, json)
Hash identifier: xc49e3iWrs3WsQOEWnnflKTZP0jihf+qPCn3dpqj0qI=
Subject key identifier: A3:C6:0E:2C:EE:8A:02:51:EA:00:69:72:71:55:ED:15:A0:0F:3D:01
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 73
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/o8YOLO6KAlHqAGlycVXtFaAPPQE.roa
Signing time: Mon 29 Jun 2026 04:43:01 +0000
ROA not before: Mon 29 Jun 2026 04:43:01 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 2519
IP address blocks: 36.2.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 09:28:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 29 04:43:01 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=A3C60E2CEE8A0251EA0069727155ED15A00F3D01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:8d:18:c3:4a:b4:d1:3e:eb:e7:85:62:71:
08:d3:27:0e:68:58:4e:99:3c:5b:bc:3f:d0:9f:fe:
b7:4a:45:16:d4:46:2f:09:b0:f3:86:4a:fd:ff:0f:
97:05:0b:9b:ad:91:17:a3:ca:fb:86:47:8d:47:0b:
a5:8e:b2:90:ba:c9:99:25:30:61:53:67:79:a8:85:
b6:65:e0:db:4d:6c:6c:0d:a8:ed:bb:9c:95:a6:2f:
41:69:1c:2c:3c:e5:64:3d:b0:63:4c:a7:66:5b:4a:
98:ea:ab:6b:ac:a7:f0:1f:8c:82:81:38:68:c6:cd:
b4:ab:7a:e1:f5:dc:31:e9:ed:69:7e:dc:69:ca:cf:
ad:58:e7:c4:0b:2f:7e:b4:80:f5:ec:28:9b:fa:90:
a2:88:0e:53:67:fa:b9:2d:4e:04:3c:3e:4b:3e:04:
8f:bc:0a:d9:c5:59:68:d6:2b:af:86:45:65:ef:a5:
ab:3f:61:0c:d4:23:58:a6:04:78:a5:6b:5d:18:ee:
dd:06:81:18:13:3d:1f:05:81:cc:d5:71:23:dc:eb:
5b:bf:55:c1:82:60:19:34:76:86:86:22:84:fc:40:
52:7a:28:d7:09:96:08:53:32:94:c9:53:e2:74:7e:
02:12:ba:23:e7:bd:55:1f:f9:af:48:18:58:b7:87:
66:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C6:0E:2C:EE:8A:02:51:EA:00:69:72:71:55:ED:15:A0:0F:3D:01
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/o8YOLO6KAlHqAGlycVXtFaAPPQE.roa
sbgp-ipAddrBlock: critical
IPv4:
36.2.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:22:34:99:1f:81:13:f6:9d:f5:86:1f:71:de:f0:cc:6d:c3:
83:3f:99:3f:ae:32:f8:8a:f4:b8:d4:67:d0:c6:41:26:65:71:
0b:c8:0a:32:ac:78:53:e8:98:5f:c3:ed:e1:1c:cb:47:11:9a:
a1:8e:ae:61:a1:16:e3:0c:b4:dd:3d:be:4c:72:4f:a8:7d:f4:
ac:41:c3:62:f0:0c:6e:63:ea:7e:4d:d7:22:41:3a:0f:b2:f5:
71:f0:0b:dc:fc:10:e9:de:bc:45:1e:ec:94:80:12:75:03:cd:
41:20:0a:04:db:94:46:25:0d:ef:b0:5c:d2:8c:e0:9e:83:35:
8a:09:0c:b1:f9:9d:c9:45:21:2d:e9:21:28:89:ed:4a:41:da:
6e:f7:f5:16:a7:4c:55:00:40:d7:09:c2:e5:09:4e:2f:75:0b:
39:21:74:94:3e:c7:8b:00:1b:85:ac:9c:bb:1c:4d:26:3f:a3:
b9:36:77:dd:8b:02:6a:5e:0d:c6:0a:e9:0b:6e:d7:73:ef:13:
a0:11:d9:02:23:8c:9c:e3:d6:9f:3d:34:4b:f4:7c:4f:05:13:
62:22:98:bd:44:4e:15:9f:27:58:10:b8:cf:15:d9:c2:5e:7b:
6e:a8:91:26:97:eb:e0:24:b3:66:92:f0:fa:24:09:ac:a2:6a:
84:42:3a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 11:14:27 2026 by rpki-client