
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KzSVYlvdjAwLLYnu4zOoajrKPxk.roa
File: KzSVYlvdjAwLLYnu4zOoajrKPxk.roa (raw, json)
Hash identifier: mnz78yvWpWOeLCkskPLwk5rLzauCg+PG3XMrkzaPgxo=
Subject key identifier: 2B:34:95:62:5B:DD:8C:0C:0B:2D:89:EE:E3:33:A8:6A:3A:CA:3F:19
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 0181
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KzSVYlvdjAwLLYnu4zOoajrKPxk.roa
Signing time: Tue 05 May 2026 14:46:29 +0000
ROA not before: Tue 05 May 2026 14:46:29 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2914
IP address blocks: 120.88.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: May 5 14:46:29 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=2B3495625BDD8C0C0B2D89EEE333A86A3ACA3F19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:52:61:1e:e7:42:d2:6b:d8:b3:14:0a:5e:
9f:ac:1e:de:e3:f8:c7:90:0b:e0:cf:03:8f:54:01:
18:55:55:a9:da:4d:93:3e:4f:86:d8:38:86:62:78:
29:df:9c:7f:c8:d5:0b:54:fe:a6:42:2c:ee:9a:13:
ec:fd:01:f2:db:9f:42:33:31:d3:97:b0:36:87:7f:
ac:89:ca:35:4f:4c:70:28:35:46:ea:9e:18:d8:8f:
12:f9:8b:d5:0b:e9:c0:f1:e2:9d:ca:be:f1:05:2d:
6e:f1:4f:bc:57:e8:1d:1e:4e:de:a1:31:c2:a9:46:
4a:7b:5a:53:08:b3:d4:6a:90:9c:da:d4:18:39:d1:
b9:53:06:9a:86:73:0b:67:4e:25:f3:bf:76:53:4c:
40:0b:c4:78:d4:88:62:91:86:e1:bf:86:9c:f1:62:
94:5e:ca:11:26:53:bb:44:51:4c:4f:c4:8d:49:a9:
d3:f2:61:2d:f1:14:c9:ad:e5:72:2e:41:7a:25:c8:
7d:31:11:03:83:c7:bf:53:36:2e:7c:28:70:a4:db:
c3:a7:ab:9c:90:fb:15:aa:45:d7:94:80:a0:17:78:
a9:57:c7:20:5e:0f:20:f5:98:a7:58:fa:f9:47:02:
a5:9e:7a:d9:96:78:7f:9f:16:4e:93:05:28:cf:76:
d6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:95:62:5B:DD:8C:0C:0B:2D:89:EE:E3:33:A8:6A:3A:CA:3F:19
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/KzSVYlvdjAwLLYnu4zOoajrKPxk.roa
sbgp-ipAddrBlock: critical
IPv4:
120.88.56.0/23
Signature Algorithm: sha256WithRSAEncryption
41:52:88:d9:4c:ae:af:24:0d:c2:14:7b:08:09:b6:24:7b:c2:
05:48:69:e7:90:43:a8:c6:9a:c0:c8:9e:75:3e:a3:65:3f:f2:
65:84:58:09:9f:a2:e9:ec:71:20:ba:04:43:c5:1c:42:1d:ce:
22:dd:36:5f:16:ac:5f:6b:57:bf:4e:cf:01:d7:0b:b4:2d:54:
1f:41:5d:3d:88:9b:3c:d2:4c:17:ca:9b:84:b1:ab:06:d1:09:
c3:2b:97:f1:39:f6:5d:ee:90:16:65:a6:f3:fc:d2:b3:89:39:
4c:49:e5:0a:97:b8:6b:04:26:a8:a1:c8:aa:de:f4:60:a0:5d:
2a:bf:b4:c3:f5:00:e2:12:5c:47:10:23:ef:ac:2d:5e:a8:a5:
3a:93:49:3c:8f:1f:67:ff:f8:1e:00:08:78:0e:e3:fe:21:0f:
e9:6d:c1:da:bd:b0:45:83:7f:a0:48:bc:3f:0c:46:61:ff:1f:
2e:80:20:8b:0d:0e:8c:c2:82:8c:bc:0d:d1:45:85:7b:a1:f3:
a8:98:22:01:30:8b:7e:de:a8:82:1f:5d:23:f1:75:a1:72:94:
91:07:50:bc:2b:5d:f2:ad:59:3a:71:49:8b:d3:7a:09:7e:17:
70:ff:91:f5:2b:76:d4:45:82:9e:61:db:cf:d0:2b:79:a7:2b:
b5:8c:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:18 2026 by rpki-client