
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/558/KIAx_whBNdBjUC8se5NT3OTZGBw.roa
File: KIAx_whBNdBjUC8se5NT3OTZGBw.roa (raw, json)
Hash identifier: AImjLd3Vyvt3rJgKkcUtwbARCZGERYjji/3xj+TQ78g=
Subject key identifier: 28:80:31:FF:08:41:35:D0:63:50:2F:2C:7B:93:53:DC:E4:D9:18:1C
Certificate issuer: /CN=8D2B19F5135BFDD9942FD372736661A19CC2CCDE
Certificate serial: 04
Authority key identifier: 8D:2B:19:F5:13:5B:FD:D9:94:2F:D3:72:73:66:61:A1:9C:C2:CC:DE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/KIAx_whBNdBjUC8se5NT3OTZGBw.roa
Signing time: Tue 09 Jun 2026 07:36:00 +0000
ROA not before: Tue 09 Jun 2026 07:36:00 +0000
ROA not after: Wed 09 Jun 2027 07:11:07 +0000
asID: 55383
IP address blocks: 103.17.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D2B19F5135BFDD9942FD372736661A19CC2CCDE
Validity
Not Before: Jun 9 07:36:00 2026 GMT
Not After : Jun 9 07:11:07 2027 GMT
Subject: CN=288031FF084135D063502F2C7B9353DCE4D9181C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:a9:b2:31:4b:9d:12:0d:2a:f9:c9:a8:22:
35:40:fc:f0:38:1a:f9:13:8f:8e:27:fa:e5:cd:a6:
2c:01:58:aa:a4:1e:61:49:68:99:14:2c:dc:6b:98:
90:a1:f1:d7:b9:4a:bb:99:2b:90:26:71:85:e7:ef:
e7:14:16:c0:22:6d:bb:e5:fe:e1:8c:64:e8:af:85:
c5:73:d4:d9:33:9a:46:07:37:d2:9e:b8:d0:70:8c:
51:06:16:e6:79:6e:91:70:0f:88:cd:60:e2:de:92:
2f:96:55:90:b1:4a:92:2c:c5:ad:7e:98:9f:58:cc:
a3:43:7a:46:c4:da:9f:10:9e:58:4d:b5:f7:71:27:
d5:a2:86:3b:07:f4:da:20:aa:28:21:d6:57:3c:0e:
47:b4:de:5d:a7:91:3a:01:21:69:fa:d7:0d:e5:ab:
5c:f0:78:5c:63:af:21:81:96:b5:a2:bb:31:2c:60:
df:be:2b:b1:d8:6a:0e:44:4b:df:de:89:8a:f5:08:
64:a9:90:33:01:4c:37:78:a5:0c:59:17:54:42:78:
aa:d7:98:72:35:f2:3a:e1:b5:57:1c:08:e3:2b:fa:
e4:c7:f6:b5:bb:8c:5b:2a:df:c7:63:82:d5:8f:bb:
18:83:30:3c:0b:91:16:e6:40:7c:0c:eb:76:44:ce:
0d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:31:FF:08:41:35:D0:63:50:2F:2C:7B:93:53:DC:E4:D9:18:1C
X509v3 Authority Key Identifier:
keyid:8D:2B:19:F5:13:5B:FD:D9:94:2F:D3:72:73:66:61:A1:9C:C2:CC:DE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/KIAx_whBNdBjUC8se5NT3OTZGBw.roa
sbgp-ipAddrBlock: critical
IPv4:
103.17.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:5d:fc:d9:73:53:40:c0:c2:ec:28:af:de:a5:f0:b0:fd:33:
f0:46:64:60:d6:fa:34:50:6f:7c:71:27:47:20:5a:c4:d0:17:
70:9d:ce:8c:62:05:5e:0a:32:d8:b4:87:b8:eb:03:e5:5d:d9:
2a:d3:98:02:b9:82:8a:15:8c:e1:60:4a:04:55:83:9e:d7:55:
51:5d:23:af:a6:f3:35:f6:fb:53:66:53:97:8c:22:41:c4:b9:
24:cf:94:38:6a:37:5e:f1:8e:e6:69:92:f9:9b:83:a5:6e:77:
a7:24:66:6a:be:a0:ad:83:9f:ee:2e:4e:3c:8b:57:52:71:a1:
b4:4b:a1:53:2c:87:28:92:81:04:c1:3b:eb:db:47:79:1b:87:
67:d8:9c:32:30:33:42:4d:ac:e5:54:90:b9:c6:6a:0f:a5:b8:
02:23:28:a5:ff:81:33:1a:dc:80:a3:09:19:0a:4f:7d:fd:50:
d6:e7:27:d0:ab:72:58:9f:7d:2d:e9:16:c8:70:6a:e7:71:a4:
bf:8e:8b:78:75:b7:ec:6c:ae:eb:23:00:f0:b8:ba:ec:4d:c7:
d0:e3:8f:ef:67:60:fe:2a:8f:f5:50:da:c9:4a:b7:82:6c:05:
81:88:de:b3:79:03:54:54:b2:cf:c1:d0:f0:62:bb:11:2b:e2:
7d:eb:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:53:46 2026 by rpki-client