
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/UfB9-T2M0o8TrtCHEenKc315vZw.roa
File: UfB9-T2M0o8TrtCHEenKc315vZw.roa (raw, json)
Hash identifier: 1g+R7KoJBNTKUHnryZyjST/NETuat9NMxYer1HSlNzs=
Subject key identifier: 51:F0:7D:F9:3D:8C:D2:8F:13:AE:D0:87:11:E9:CA:73:7D:79:BD:9C
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 29
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/UfB9-T2M0o8TrtCHEenKc315vZw.roa
Signing time: Wed 22 Apr 2026 05:48:41 +0000
ROA not before: Wed 22 Apr 2026 05:48:41 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2519
IP address blocks: 202.64.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Apr 22 05:48:41 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=51F07DF93D8CD28F13AED08711E9CA737D79BD9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:27:bf:27:7f:4d:a4:df:dc:67:06:88:5d:c2:
ef:21:8e:f4:21:4e:0f:7d:e3:02:53:13:27:c6:06:
9b:c4:2b:0d:b0:9c:4e:a0:88:78:9e:3c:b0:03:14:
6e:30:71:59:9d:95:6c:fa:50:2d:b7:63:de:64:10:
9a:29:b4:8f:38:85:cd:6b:9c:5d:8d:64:03:6d:8d:
c5:f0:27:58:e8:cb:c5:f7:ed:15:30:e9:c4:db:73:
02:02:9a:e3:0a:bc:35:09:65:ee:5a:d9:56:01:a1:
d7:c0:8f:02:0e:23:60:74:d9:27:d5:e3:fe:96:39:
8f:89:e4:09:2b:fb:d7:ae:20:95:f6:61:96:ab:43:
92:60:77:a8:29:56:51:0f:69:ea:cf:0e:51:8d:dd:
62:93:32:60:be:bc:ed:6a:4d:59:43:e4:33:79:21:
52:c5:f1:0c:b6:f7:c3:ec:9c:a3:2b:48:d9:1a:82:
db:ce:93:bc:3b:be:04:59:de:b0:fa:4d:8b:78:7a:
ba:47:3c:69:e8:c7:c2:ec:65:76:7d:95:28:3b:13:
2b:04:19:40:1d:62:1b:ef:5c:fe:b6:19:c5:90:83:
4d:b5:b5:95:0e:06:d4:9b:0b:b7:38:63:e4:60:fa:
41:44:18:c6:ed:f8:8d:16:1e:88:c3:cf:e6:3f:85:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:7D:F9:3D:8C:D2:8F:13:AE:D0:87:11:E9:CA:73:7D:79:BD:9C
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/UfB9-T2M0o8TrtCHEenKc315vZw.roa
sbgp-ipAddrBlock: critical
IPv4:
202.64.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:8b:fa:d1:a8:aa:f8:9f:5a:d8:e4:f9:7c:aa:c2:58:bc:8d:
bd:76:d3:f5:b7:43:f5:c9:70:01:e6:e8:6c:c0:33:f0:e5:e9:
c1:8e:ae:75:59:9e:d5:b8:08:55:0a:0d:36:20:1d:ac:a5:53:
8e:56:7d:a2:54:39:e3:56:65:f4:40:54:84:f5:fd:08:cd:57:
ac:bb:42:5d:a9:39:9b:e8:6d:6b:89:62:a4:67:85:86:3d:9b:
66:f3:a7:07:af:42:5e:f1:98:27:8e:f2:ac:3b:3e:b5:24:05:
9e:14:fa:a4:ec:80:2d:8d:51:13:ff:3c:b9:67:04:cf:41:88:
3a:7e:93:34:56:5a:80:13:bf:f8:5a:8a:f7:bd:2a:19:8d:10:
28:82:e3:38:16:f9:25:b6:bf:68:60:84:62:eb:d8:fb:f8:58:
e6:28:73:2d:30:37:b5:4a:f1:d1:d9:44:39:cf:c9:02:d8:00:
75:58:9e:a5:97:b5:b8:da:4e:be:b6:c4:bb:f0:8d:2f:00:67:
09:7b:5f:52:14:00:7a:ac:7e:1d:cf:1b:9d:3c:34:78:ae:f5:
71:ba:9e:6a:da:b2:30:cb:70:1e:49:c3:08:69:5c:bd:68:41:
56:2e:bd:80:c4:ad:d3:e8:a5:4a:78:a2:ee:88:5b:67:78:6f:
de:80:12:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:40 2026 by rpki-client