
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/582/CUpeLBlmBYbdSPVtUIEPhUh0qYw.roa
File: CUpeLBlmBYbdSPVtUIEPhUh0qYw.roa (raw, json)
Hash identifier: c+VcgT/V8xX13G2JbnjhIov5aS7AQxWVhd2YaTHIsDI=
Subject key identifier: 09:4A:5E:2C:19:66:05:86:DD:48:F5:6D:50:81:0F:85:48:74:A9:8C
Certificate issuer: /CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Certificate serial: 02
Authority key identifier: A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/CUpeLBlmBYbdSPVtUIEPhUh0qYw.roa
Signing time: Tue 07 Jul 2026 06:40:43 +0000
ROA not before: Tue 07 Jul 2026 06:40:43 +0000
ROA not after: Wed 07 Jul 2027 01:18:23 +0000
asID: 59107
IP address blocks: 126.52.100.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5F1674D0C69D4274C3416D7F955BA4393693607
Validity
Not Before: Jul 7 06:40:43 2026 GMT
Not After : Jul 7 01:18:23 2027 GMT
Subject: CN=094A5E2C19660586DD48F56D50810F854874A98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:19:df:75:2d:1a:4d:f4:57:cc:3e:81:0f:
77:88:bb:56:e5:49:17:cc:f8:ea:8c:cf:1a:a2:44:
b5:10:bd:1b:6b:92:d8:fe:d5:45:59:32:89:58:57:
11:6f:2f:87:67:46:3c:ec:f0:83:5e:04:84:32:73:
72:e3:66:c2:2f:d3:5d:a1:65:9a:59:62:f7:e3:f8:
4f:2b:95:84:73:b0:3e:f5:26:df:af:4a:89:43:61:
44:0c:fe:05:61:54:27:ae:4f:b8:77:79:a0:cf:61:
c8:9c:fb:d0:90:0b:d3:e6:f2:83:07:a5:24:e1:9e:
85:0c:8f:6d:1d:48:e8:6c:78:02:44:a5:29:11:85:
60:85:76:af:64:cd:5b:2b:38:c9:c1:b7:5b:65:8f:
a9:a6:c9:6b:52:8b:bc:48:f2:eb:e9:25:89:17:48:
d2:b8:bb:c5:3f:7e:a7:83:d4:59:34:cb:43:8d:5d:
6b:18:05:fe:70:bd:42:89:d7:3d:2d:9c:4c:83:34:
d1:c6:94:fd:72:0c:08:0e:56:e5:bd:b6:49:4d:9b:
ea:10:fd:fb:87:88:b7:ce:d3:f2:9d:fa:04:ca:90:
d5:e6:d9:03:8c:8f:e7:08:1d:4a:14:5e:f5:ee:84:
b2:d4:6f:e3:4b:cf:34:00:e1:2a:78:58:e1:e8:dc:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:5E:2C:19:66:05:86:DD:48:F5:6D:50:81:0F:85:48:74:A9:8C
X509v3 Authority Key Identifier:
keyid:A5:F1:67:4D:0C:69:D4:27:4C:34:16:D7:F9:55:BA:43:93:69:36:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pfFnTQxp1CdMNBbX-VW6Q5NpNgc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/582/CUpeLBlmBYbdSPVtUIEPhUh0qYw.roa
sbgp-ipAddrBlock: critical
IPv4:
126.52.100.0/22
Signature Algorithm: sha256WithRSAEncryption
57:75:08:cb:f2:14:b0:8b:20:0a:40:ba:e2:69:66:6d:2f:b2:
3f:5d:29:a8:af:e5:4c:d5:11:33:0b:92:90:c9:10:71:16:a9:
6d:61:13:b7:c2:34:82:e5:c4:6e:51:01:c3:c7:82:1f:1e:53:
4e:5a:43:5c:f6:74:ba:68:98:5e:84:78:4a:2b:57:e2:02:39:
b0:36:ea:47:78:40:95:2a:f4:26:d3:9d:f6:0d:d9:95:e3:0a:
27:d5:b3:f0:78:ff:d1:72:73:65:13:b8:78:39:08:a7:5e:c8:
00:4f:13:b9:cd:73:e2:7a:0a:d7:dd:cb:09:05:53:69:db:7d:
75:cc:0b:32:c6:0f:ef:32:50:a4:e9:a5:d1:11:7e:7f:cf:22:
f6:bd:1e:cd:a4:bc:86:6c:8e:f9:4d:9d:a5:f4:93:48:06:75:
07:24:fe:f8:b9:ea:44:74:b3:19:0a:47:a3:9f:f6:c9:e9:40:
bf:d7:0d:2e:48:f0:d4:ea:4a:fc:37:54:bf:a7:36:8f:f5:3d:
9f:36:b5:5e:f9:d6:6b:9c:e6:d7:59:8c:ee:1f:87:d6:ba:b6:
cd:73:d5:e9:bb:75:ce:f0:3f:99:78:e8:54:c6:0e:5d:0e:5c:
32:c1:3f:26:19:e9:26:18:9d:20:1b:84:04:d9:03:1b:c9:ac:
6e:91:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:29:11 2026 by rpki-client