
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/CdFJI1Fmey7eJuaBsERxiOSfFuk.roa
File: CdFJI1Fmey7eJuaBsERxiOSfFuk.roa (raw, json)
Hash identifier: FRtJUz30oWLWn5eeRNXvitdKhxEfO+SQaMKwaInPjQA=
Subject key identifier: 09:D1:49:23:51:66:7B:2E:DE:26:E6:81:B0:44:71:88:E4:9F:16:E9
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 39
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CdFJI1Fmey7eJuaBsERxiOSfFuk.roa
Signing time: Thu 30 Apr 2026 07:18:36 +0000
ROA not before: Thu 30 Apr 2026 07:18:36 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2519
IP address blocks: 116.92.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Apr 30 07:18:36 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=09D1492351667B2EDE26E681B0447188E49F16E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:19:70:bf:dc:75:6c:c5:20:2d:a6:d6:62:
25:7d:4d:23:85:2c:ce:49:f6:8b:ed:ad:f6:44:7d:
bc:97:21:20:eb:5d:d3:7a:87:11:c5:6b:1e:e5:c9:
5e:cd:e3:8d:fb:77:7d:82:d5:0c:1a:25:e3:a7:58:
cb:de:81:6c:db:f7:24:c8:f7:f4:d0:a8:55:2d:01:
fe:1b:cd:f2:a9:fb:98:f6:9e:31:5c:3b:40:ef:ec:
35:1f:df:e8:16:82:9d:76:55:d3:bc:30:93:c4:35:
fd:64:5c:0c:82:81:8e:6f:5f:a7:4e:f6:0c:c8:ff:
18:10:5b:df:50:fc:a0:5f:bf:93:74:cd:40:ad:4d:
f3:80:d6:6b:b0:6f:69:58:3b:35:e5:24:9e:d5:6f:
ba:7b:fd:e6:45:55:58:2d:d4:ba:92:f9:e8:06:61:
a0:12:e7:1a:55:63:87:63:f4:8e:20:96:f7:e5:d5:
ef:b7:5b:42:0c:b5:5f:9d:c1:ec:e8:1b:cb:43:56:
8a:15:a8:78:60:7b:03:5c:7c:98:73:91:74:80:6b:
0a:ed:04:6f:9f:05:ef:06:43:f8:34:73:2c:76:15:
bf:20:53:be:4e:53:ec:ff:a6:00:12:5d:7e:23:be:
ed:cb:c3:b8:72:96:b8:6b:8c:42:6f:1f:a1:22:7c:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:49:23:51:66:7B:2E:DE:26:E6:81:B0:44:71:88:E4:9F:16:E9
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CdFJI1Fmey7eJuaBsERxiOSfFuk.roa
sbgp-ipAddrBlock: critical
IPv4:
116.92.160.0/20
Signature Algorithm: sha256WithRSAEncryption
53:b7:87:a9:c7:34:43:64:ac:ac:e2:ac:dd:32:4c:85:2a:7e:
7a:b3:c4:30:34:05:ea:ef:10:f2:16:64:d5:01:9e:29:69:c1:
e7:40:6b:ab:bd:ee:ed:07:d4:14:a3:be:f4:da:45:32:02:78:
e2:1f:16:88:da:8c:9f:f3:ce:14:fe:93:04:64:41:e6:65:d9:
33:6a:f2:cb:9a:6b:35:f3:aa:7b:13:8d:f9:b2:95:94:26:10:
0a:ed:37:b9:c0:e0:4d:8f:af:27:02:cb:06:d3:54:39:1f:a5:
94:1a:bf:7f:a2:63:c6:00:52:e4:52:01:ec:f8:19:3c:bf:0a:
66:dc:b6:b6:d3:f8:56:c6:4b:0b:12:9e:bf:15:1b:4f:e2:c9:
b4:e3:81:20:a9:ee:d8:12:35:f7:eb:ee:7a:66:cb:2c:9e:cc:
64:bc:51:45:8d:1e:03:2a:49:a5:f6:17:1f:20:1b:e8:54:03:
5f:6d:0d:41:96:f3:44:31:6b:b0:55:a6:72:ab:6d:52:1f:8b:
94:0e:75:bd:f9:23:13:99:c5:9f:23:dc:42:36:e4:5b:48:9d:
54:e5:c4:86:7c:1c:e1:ab:e1:45:89:2a:d2:6f:0a:ef:4e:7c:
fe:44:b7:eb:1e:c1:18:13:8c:60:29:81:51:62:ab:57:5a:6f:
18:6d:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:47 2026 by rpki-client