
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/sHOlp0w4BKKAw8XEdRG-_MhFPLs.roa
File: sHOlp0w4BKKAw8XEdRG-_MhFPLs.roa (raw, json)
Hash identifier: S1aYuo1Nxv05Xyt8ZzshE3xxD2xhebn1V1bzzs38Q9k=
Subject key identifier: B0:73:A5:A7:4C:38:04:A2:80:C3:C5:C4:75:11:BE:FC:C8:45:3C:BB
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 5F
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/sHOlp0w4BKKAw8XEdRG-_MhFPLs.roa
Signing time: Wed 20 May 2026 05:10:02 +0000
ROA not before: Wed 20 May 2026 05:10:02 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 222.228.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 04:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95 (0x5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: May 20 05:10:02 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=B073A5A74C3804A280C3C5C47511BEFCC8453CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:85:c2:a2:4e:8a:04:6a:e2:35:8a:e1:26:f6:
53:73:5f:81:d8:ac:c4:10:c4:61:5e:4f:55:3d:28:
c2:7c:8d:5e:bc:07:0a:e4:39:70:b5:68:39:41:68:
cb:0f:b5:32:aa:15:9d:b1:10:8a:9b:5c:94:cf:b8:
ca:41:ac:9b:34:62:ca:98:f7:8b:46:d2:a5:be:9f:
6e:4c:f0:9b:50:f6:aa:0e:f9:7b:8d:d9:00:1e:44:
b7:7c:de:f4:30:d9:df:95:be:02:41:0e:0b:62:99:
9c:b2:c7:b5:90:30:eb:30:a1:e8:21:3b:2c:68:a0:
c1:4b:b1:c2:ce:b0:00:12:78:19:2f:34:f9:1f:9c:
43:ed:f5:03:61:db:b5:06:5f:bc:52:3f:56:28:28:
86:52:38:bc:73:b3:f6:80:15:57:38:71:f2:a5:16:
e4:a9:dc:6c:01:02:cb:28:3c:e2:04:22:f6:a7:5b:
04:7d:bc:5d:36:84:a9:5c:47:08:63:c4:1b:c4:45:
8d:7c:2e:f6:4b:1c:85:cf:48:14:4e:e8:6d:c6:a8:
81:5c:cd:9b:b1:42:d0:e4:4c:d1:9b:62:17:39:fa:
67:40:4b:16:9c:bd:fb:8e:4c:42:06:ad:7e:15:f2:
df:03:0a:87:ea:3a:0d:1c:7b:71:52:7a:e0:e2:72:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:A5:A7:4C:38:04:A2:80:C3:C5:C4:75:11:BE:FC:C8:45:3C:BB
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/sHOlp0w4BKKAw8XEdRG-_MhFPLs.roa
sbgp-ipAddrBlock: critical
IPv4:
222.228.96.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:3f:b8:6e:20:96:6b:2b:bf:cd:72:bb:6d:b6:f6:41:b1:74:
a1:4a:14:92:f4:00:e0:cd:7a:ef:62:3b:77:f8:2a:44:66:7e:
1b:76:53:f0:c3:80:99:c2:87:17:32:60:5d:2d:22:f3:f2:27:
fc:98:cd:60:ce:a8:ae:9b:91:46:3b:97:cd:ec:8d:29:da:5e:
99:66:aa:79:24:7e:ea:80:8d:49:39:90:51:b2:7d:32:1d:bf:
1c:f9:c8:b6:28:7c:47:01:66:81:b7:3e:3b:3d:34:81:33:9f:
ac:31:8c:25:7f:71:46:fb:6a:54:c4:0c:d6:3f:6b:38:41:23:
c4:7a:ec:a9:3e:7e:9d:33:32:49:d1:a8:ba:7f:42:d2:19:64:
af:81:e8:07:0f:d0:10:72:df:5a:04:c3:9c:c5:a3:58:68:b4:
45:bd:81:50:66:53:09:db:16:39:8c:22:c6:ab:aa:ad:1c:ed:
2a:2d:83:1e:e3:c4:0e:6e:ce:92:26:56:e2:ac:db:d6:8d:ff:
5a:d9:16:89:1c:36:6b:fc:8d:7d:b9:e6:51:cf:c6:85:06:d9:
0a:2e:38:0d:6c:a0:dc:0b:8b:2f:82:f0:b6:f2:d6:3b:71:10:
7f:94:d6:7b:d7:e8:bd:6c:47:77:c6:1d:1f:89:5a:d3:11:1e:
5c:f1:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:48:13 2026 by rpki-client