
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/0ggVqug6PDDZYCselTjPAhuWIKk.roa
File: 0ggVqug6PDDZYCselTjPAhuWIKk.roa (raw, json)
Hash identifier: mVp8Y4mNiyrEk5Wid99Et3EAEdh0Hz8q2ZerCcasNV8=
Subject key identifier: D2:08:15:AA:E8:3A:3C:30:D9:60:2B:1E:95:38:CF:02:1B:96:20:A9
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 26
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/0ggVqug6PDDZYCselTjPAhuWIKk.roa
Signing time: Wed 22 Apr 2026 05:30:33 +0000
ROA not before: Wed 22 Apr 2026 05:30:33 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2519
IP address blocks: 133.32.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Apr 22 05:30:33 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=D20815AAE83A3C30D9602B1E9538CF021B9620A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3f:6f:8c:90:c2:3e:3e:84:01:37:9e:42:df:
8c:91:c7:33:02:ea:63:69:10:22:0d:65:fe:9a:7b:
1e:02:20:27:20:53:d9:bf:23:da:b3:87:9d:69:43:
76:bc:73:a9:1b:c7:8a:29:06:84:14:d0:e9:1d:48:
62:36:89:b0:9f:ba:4b:23:01:f1:7f:0f:3b:87:03:
ee:71:4e:f7:aa:ba:bc:16:cd:8b:bf:b0:3a:3a:06:
45:d3:f3:60:13:eb:3c:7a:d4:7e:c7:88:5b:dd:0e:
e3:66:74:a4:2a:24:0e:d2:a2:3d:3f:43:1d:99:c8:
81:53:22:3c:0d:d5:18:92:e2:1d:28:68:f7:6b:e5:
b5:d3:03:a5:f9:2c:d1:42:fb:b4:5c:dd:6b:b2:5e:
b2:1f:76:27:9f:f2:da:54:36:88:35:81:2b:e4:61:
93:35:c6:d6:42:50:24:d9:52:2f:9d:a4:10:35:b4:
78:be:1b:82:62:ac:34:65:7b:05:91:70:54:35:a4:
75:17:84:1e:f3:65:3e:f1:0b:62:63:d3:25:60:af:
c0:e0:d8:55:44:a0:af:69:9e:8f:3e:fb:51:37:e0:
8f:b6:0d:37:7b:8a:4e:da:c5:15:99:28:6b:ea:2b:
27:c0:00:18:37:9e:7f:fd:81:e8:bf:90:00:5e:b2:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:08:15:AA:E8:3A:3C:30:D9:60:2B:1E:95:38:CF:02:1B:96:20:A9
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/0ggVqug6PDDZYCselTjPAhuWIKk.roa
sbgp-ipAddrBlock: critical
IPv4:
133.32.200.0/21
Signature Algorithm: sha256WithRSAEncryption
72:62:0e:ce:ea:ce:91:0f:ef:3e:e4:d6:a7:81:db:e3:80:78:
66:7c:f2:bc:86:66:bd:ac:d3:63:69:5e:58:14:18:84:53:e4:
34:f7:85:86:d4:87:c5:13:0e:93:6f:9e:55:7c:1c:78:98:be:
5c:ef:0f:db:b7:7e:2a:40:0b:52:d3:97:cd:e8:14:a8:b6:a7:
7a:f0:68:45:0a:0f:e1:12:2f:3d:0a:8b:d7:4b:62:02:bc:6d:
f1:5f:54:76:3e:17:84:df:28:57:57:52:f9:ac:2b:2e:8c:82:
62:64:c6:0f:31:42:98:c4:95:ef:5d:a0:38:95:10:cc:b1:d2:
29:68:34:a9:6d:36:5a:07:f5:d1:34:60:de:30:0e:e0:df:25:
eb:bb:7f:77:7f:d6:d2:b7:17:de:b9:ef:d6:31:83:ef:a3:26:
71:06:db:d0:51:9f:ec:17:d0:e4:b0:33:76:ff:3d:2c:6a:9b:
30:b7:74:68:98:d7:1d:3d:9e:d0:f9:91:39:56:22:d4:b8:e0:
dc:ea:6c:54:ad:50:34:09:ce:43:01:76:cb:45:5d:9f:fc:d3:
64:a1:d0:9f:96:30:23:14:39:d9:86:c0:03:31:86:e5:86:12:
d7:6d:b6:37:bc:b1:93:9b:01:e9:62:ef:31:bd:73:a5:cd:63:
ca:39:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:14 2026 by rpki-client