
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/pLFOmkWCMagPXk3h-I5xGLo2RZk.roa
File: pLFOmkWCMagPXk3h-I5xGLo2RZk.roa (raw, json)
Hash identifier: dj45TpmLlZaxo8D7KPdimjPv9/OwINhuo5347GEALRE=
Subject key identifier: A4:B1:4E:9A:45:82:31:A8:0F:5E:4D:E1:F8:8E:71:18:BA:36:45:99
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 80
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/pLFOmkWCMagPXk3h-I5xGLo2RZk.roa
Signing time: Tue 30 Jun 2026 02:01:42 +0000
ROA not before: Tue 30 Jun 2026 02:01:42 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 17506
IP address blocks: 59.87.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 30 02:01:42 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=A4B14E9A458231A80F5E4DE1F88E7118BA364599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:05:9e:cd:d4:24:ce:aa:99:8c:22:a6:01:
ca:45:a6:61:33:8d:d5:bf:3a:17:8c:3a:e2:26:8e:
06:d1:0d:0f:6f:88:36:4f:fd:7d:b3:8c:a8:dd:21:
1b:b2:d8:08:e1:bc:8c:cf:5f:a4:8e:31:75:04:89:
fe:5a:1e:3a:33:c8:04:35:0c:5f:50:b7:31:79:5b:
0a:0c:44:22:89:79:73:6e:6b:81:d3:d3:95:6e:41:
9a:1c:51:71:0f:cd:ed:da:30:9c:a7:b6:18:22:c5:
28:eb:a5:81:7c:b0:99:1f:48:e8:50:ab:93:52:2f:
32:c3:82:ce:ee:d1:49:db:31:3a:86:b3:52:3d:49:
82:12:07:28:87:85:e9:a9:af:11:2d:25:24:a0:70:
d5:fe:53:4b:d1:c8:ba:37:66:4b:7f:eb:6e:0b:ad:
4d:cf:d2:a4:45:5c:a9:4f:9e:ff:c9:51:50:10:ea:
8f:25:4b:aa:92:75:3a:06:bb:ce:22:70:6f:1b:f2:
a7:a9:ca:05:5e:2e:f3:3e:58:3a:5a:4f:ee:6b:29:
49:ff:17:a6:0e:76:23:0e:33:aa:0e:95:0f:12:e0:
88:3e:4a:cf:1d:0a:d8:a3:0c:cf:54:e8:3a:24:9b:
07:43:79:22:a7:31:cc:a6:8d:6d:e6:1f:d1:7a:b0:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B1:4E:9A:45:82:31:A8:0F:5E:4D:E1:F8:8E:71:18:BA:36:45:99
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/pLFOmkWCMagPXk3h-I5xGLo2RZk.roa
sbgp-ipAddrBlock: critical
IPv4:
59.87.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:ba:bf:ef:cd:d9:fa:52:91:8d:f2:07:d7:51:42:0e:e7:36:
c0:70:fd:3b:c6:04:c5:24:93:4c:3f:89:af:5b:9f:53:19:d1:
d7:fb:6e:6c:7d:f5:6d:02:4d:84:05:46:fb:b0:93:68:e8:e4:
1b:b6:78:2b:7f:2e:f1:40:1b:77:5a:11:5e:f1:60:d8:fa:08:
0f:ff:cc:a0:73:6b:66:8e:34:a9:24:9d:bb:94:32:60:ee:c3:
50:49:ad:bc:38:c8:a5:35:72:fe:65:7e:a5:ed:2f:d1:75:41:
8c:18:56:8b:99:e0:bb:48:f8:02:ca:58:f3:a8:1c:eb:6b:b4:
81:34:6b:2d:96:5c:ca:e3:28:c7:eb:c2:7b:2a:93:0f:2e:51:
9d:cf:d3:a7:b5:5b:a3:03:23:51:4a:48:5e:b5:20:49:51:cd:
3a:37:f6:d2:56:2e:fd:45:83:0c:73:62:91:3a:d0:7d:43:b9:
25:8e:21:d7:59:a3:fd:b1:8b:aa:bd:2a:e7:7b:b8:88:68:ba:
fc:65:ab:70:7b:0d:9d:7b:b7:71:11:bc:af:fd:c3:1f:79:fd:
7c:a5:28:cd:1e:8b:58:be:61:e9:93:27:dc:bf:54:89:af:e5:
38:ca:a4:bf:91:03:25:06:cd:45:85:ad:ba:51:77:91:71:86:
2e:8d:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:59 2026 by rpki-client