
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/zQVNbzbWmQ3qpt28M-WVZDm8be4.roa
File: zQVNbzbWmQ3qpt28M-WVZDm8be4.roa (raw, json)
Hash identifier: Qa25nljk/5h+ZiUwfs77j85SDjgbbYjexCYQR8Dj3XE=
Subject key identifier: CD:05:4D:6F:36:D6:99:0D:EA:A6:DD:BC:33:E5:95:64:39:BC:6D:EE
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 86
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/zQVNbzbWmQ3qpt28M-WVZDm8be4.roa
Signing time: Tue 30 Jun 2026 02:07:43 +0000
ROA not before: Tue 30 Jun 2026 02:07:43 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 17506
IP address blocks: 115.125.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 30 02:07:43 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=CD054D6F36D6990DEAA6DDBC33E5956439BC6DEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:d9:c3:5b:fe:2d:2e:e2:d0:a5:50:3d:b8:
63:83:aa:a0:20:e6:bc:b1:f8:10:a2:9f:bb:32:f2:
0b:c9:29:af:a1:5b:2a:ce:0e:6b:4d:05:19:e8:8f:
31:92:8c:eb:87:1d:f5:9f:c6:1e:50:c8:be:72:86:
fd:09:74:55:09:b0:30:e0:13:02:4f:7f:80:39:56:
bb:af:a9:b2:31:f7:e5:aa:a4:82:f8:11:d4:f5:47:
72:8a:da:50:e1:d6:1d:8f:0f:e5:4f:ad:c0:cc:da:
9f:a4:bd:be:43:00:cf:df:68:3f:7d:03:8e:c2:ab:
45:d9:14:ae:69:84:4a:95:98:a7:f7:96:fc:af:44:
dc:d8:c9:ae:cc:34:e0:28:01:e8:48:4f:4d:9d:65:
b9:88:9f:1c:4d:17:21:ea:78:47:03:3a:3c:e8:ac:
3d:fc:8d:a1:41:d1:00:56:2f:b3:f9:ae:96:9a:79:
8a:25:5b:c3:a5:90:4f:db:30:8c:7b:61:61:10:d2:
9e:a6:07:2c:93:8b:9c:a1:e9:81:02:51:a0:3b:01:
5e:64:21:ab:fc:d2:d3:e6:de:c3:d1:8d:27:bc:f6:
f1:e0:ec:bd:d5:41:7c:5b:1a:df:00:a2:00:6f:c7:
7b:d8:97:9d:4b:32:f0:77:e4:44:1e:08:77:55:03:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:05:4D:6F:36:D6:99:0D:EA:A6:DD:BC:33:E5:95:64:39:BC:6D:EE
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/zQVNbzbWmQ3qpt28M-WVZDm8be4.roa
sbgp-ipAddrBlock: critical
IPv4:
115.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c2:46:a2:18:4e:21:3d:87:29:95:ba:b8:21:d9:4d:c4:db:a7:
f7:a7:f5:26:64:34:a7:5b:88:54:d5:cf:e4:6e:40:59:1a:3e:
4e:0e:41:97:c4:dd:a4:8e:52:4e:ad:69:68:f2:c9:b8:a0:be:
f1:95:39:dd:d2:e5:84:44:bb:f6:82:b5:7c:83:c5:cc:bf:ab:
fa:71:b5:d1:1a:28:f5:39:d3:1a:a1:62:e0:7f:7a:9c:ca:3e:
47:58:6f:43:e5:62:6c:8d:02:83:f6:c9:e3:ea:d5:4a:82:df:
f3:d2:c3:15:e6:a1:b3:ca:1f:d8:23:8a:79:1a:de:a2:ea:fb:
21:06:fb:75:6c:72:d4:9f:45:a4:3c:b7:e7:22:26:8f:46:87:
ab:46:dc:04:fe:44:3f:82:b8:56:43:48:70:47:b7:52:4c:91:
ed:3a:9f:27:0f:61:72:8e:3f:46:d0:3b:a9:c0:37:34:37:53:
66:4d:e3:bb:5b:a6:7f:00:88:f6:b7:3f:c1:cd:b3:c2:2e:3f:
0c:1f:18:a0:c9:63:9e:11:cf:2f:9f:e4:29:d5:30:cf:4f:a0:
c9:36:37:09:fb:fc:34:35:21:55:97:58:20:a9:23:4f:35:c4:
1b:3d:e2:a6:c2:99:c6:3a:83:fc:93:61:32:72:ef:68:42:64:
62:e9:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:43:56 2026 by rpki-client