
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/h45ut7sRyJh_uJQnotp3Bmz42vc.roa
File: h45ut7sRyJh_uJQnotp3Bmz42vc.roa (raw, json)
Hash identifier: TbJXP7ut7DMfA6lg2I7WDFbYoSX/ULkxg0sZiqNIUL8=
Subject key identifier: 87:8E:6E:B7:BB:11:C8:98:7F:B8:94:27:A2:DA:77:06:6C:F8:DA:F7
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 25
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/h45ut7sRyJh_uJQnotp3Bmz42vc.roa
Signing time: Wed 22 Apr 2026 05:24:43 +0000
ROA not before: Wed 22 Apr 2026 05:24:43 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2519
IP address blocks: 133.32.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Apr 22 05:24:43 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=878E6EB7BB11C8987FB89427A2DA77066CF8DAF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:80:7c:af:86:08:29:f8:d5:99:10:1c:71:
6e:a8:31:7e:ee:49:5b:44:c9:ce:23:78:19:f7:d0:
77:77:ee:f2:5a:0f:28:2e:7b:4d:f2:33:b1:c6:be:
08:8a:b1:c1:38:fa:04:f1:b7:72:52:9c:b7:e2:4a:
01:0c:de:5d:cf:8c:06:4d:b8:bf:2b:17:bc:a4:1a:
3c:01:c9:3a:96:e8:6c:d6:49:44:a6:22:4f:48:52:
56:85:14:0a:7e:80:4d:d3:b0:49:ef:96:16:4b:f6:
7d:ad:57:75:f5:56:36:22:03:66:ec:e7:b4:03:15:
1d:70:03:01:fd:55:4f:ac:cc:88:9d:2f:52:5b:07:
ef:07:2d:9d:97:b7:01:1e:35:49:0e:71:f4:91:6a:
51:07:9a:15:74:f7:c8:5f:40:33:37:5f:c8:73:b9:
19:39:92:0d:69:39:3f:d0:68:a9:d8:7f:29:fd:70:
d8:84:1f:f4:23:95:d9:58:4c:5c:6f:c7:23:00:37:
11:0f:97:2d:58:18:b9:02:92:ac:61:6d:4d:3f:b2:
bf:1c:8e:ed:3b:f6:89:ff:9e:fb:4c:80:27:d4:f6:
42:ba:47:a1:4b:15:78:c8:ef:d2:70:8a:10:30:c0:
cb:99:d4:07:87:db:76:18:90:57:78:72:c7:0b:09:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:6E:B7:BB:11:C8:98:7F:B8:94:27:A2:DA:77:06:6C:F8:DA:F7
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/h45ut7sRyJh_uJQnotp3Bmz42vc.roa
sbgp-ipAddrBlock: critical
IPv4:
133.32.110.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:1f:09:2e:17:c2:d8:c1:56:36:12:06:68:4b:4e:ab:4c:ae:
d2:c6:d1:c0:a4:02:e0:4b:d1:71:24:f2:69:37:73:f5:4a:e3:
6c:cb:cf:b7:2b:39:7e:e2:3d:3b:b5:1a:b5:e5:e7:f2:9f:24:
56:24:97:73:32:02:a6:10:9d:f3:34:62:16:5c:f1:05:56:96:
9c:a6:f0:d3:ae:9f:35:43:e0:7a:66:22:85:1e:d0:36:94:c4:
52:b4:77:e4:43:0f:ed:34:52:95:21:4a:f4:d3:8e:de:40:6d:
e1:e6:f1:39:a9:03:00:7c:d6:55:1a:a4:b5:7e:51:ab:c6:34:
7b:14:f3:3a:b8:78:2f:a9:b4:69:75:f5:8f:c7:15:ff:7b:c8:
d1:f1:a5:d2:94:18:1a:9c:8a:b5:a4:2c:a2:e5:c1:52:e8:ae:
a3:d7:40:b9:d6:fe:df:d5:a4:f2:88:d7:73:15:41:e4:90:de:
52:60:80:af:15:18:81:e8:3a:b8:20:2c:68:bf:0d:60:38:05:
66:bc:5a:40:76:64:9c:cc:ad:9f:b8:53:f3:28:b7:ba:7b:27:
36:7f:95:4e:ba:d2:92:31:18:97:25:89:1d:8c:b8:40:66:90:
e6:e0:5f:88:83:3d:16:1f:6b:10:00:24:37:26:51:67:dd:e1:
f5:c8:cd:b5
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjc4
OTFCOTRFRDlFNTU3RTc3OTc0NkJGQTIzRTAzRDFFRDIzNEVFMB4XDTI2MDQyMjA1
MjQ0M1oXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoODc4RTZFQjdCQjExQzg5
ODdGQjg5NDI3QTJEQTc3MDY2Q0Y4REFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMsmgHyvhggp+NWZEBxxbqgxfu5JW0TJziN4GffQd3fu8loPKC57
TfIzsca+CIqxwTj6BPG3clKct+JKAQzeXc+MBk24vysXvKQaPAHJOpbobNZJRKYi
T0hSVoUUCn6ATdOwSe+WFkv2fa1XdfVWNiIDZuzntAMVHXADAf1VT6zMiJ0vUlsH
7wctnZe3AR41SQ5x9JFqUQeaFXT3yF9AMzdfyHO5GTmSDWk5P9Boqdh/Kf1w2IQf
9COV2VhMXG/HIwA3EQ+XLVgYuQKSrGFtTT+yvxyO7Tv2if+e+0yAJ9T2QrpHoUsV
eMjv0nCKEDDAy5nUB4fbdhiQV3hyxwsJQSMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSHjm63uxHImH+4lCei2ncGbPja9zAfBgNVHSMEGDAWgBTWeJG5TtnlV+d5dGv6
I+A9HtI07jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDUyLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3U05PNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFuaVJ1VTdaNVZmbmVYUnItaVBnUFI3
U05PNC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NTIvaDQ1dXQ3c1J5SmhfdUpRbm90cDNCbXo0MnZjLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYUgbjANBgkqhkiG9w0BAQsFAAOCAQEA
Kx8JLhfC2MFWNhIGaEtOq0yu0sbRwKQC4EvRcSTyaTdz9UrjbMvPtys5fuI9O7Ua
teXn8p8kViSXczICphCd8zRiFlzxBVaWnKbw066fNUPgemYihR7QNpTEUrR35EMP
7TRSlSFK9NOO3kBt4ebxOakDAHzWVRqktX5Rq8Y0exTzOrh4L6m0aXX1j8cV/3vI
0fGl0pQYGpyKtaQsouXBUuiuo9dAudb+39Wk8ojXcxVB5JDeUmCArxUYgeg6uCAs
aL8NYDgFZrxaQHZknMytn7hT8yi3unsnNn+VTrrSkjEYlyWJHYy4QGaQ5uBfiIM9
Fh9rEAAkNyZRZ93h9cjNtQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:41:19 2026 by rpki-client