
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/oS-OWb5CVe5pMYeAJ2LwlyMSTxo.roa
File: oS-OWb5CVe5pMYeAJ2LwlyMSTxo.roa (raw, json)
Hash identifier: edxAurQemIcvM/UsXpwxDEdwa8T8VVeq4pPlxO2ImI0=
Subject key identifier: A1:2F:8E:59:BE:42:55:EE:69:31:87:80:27:62:F0:97:23:12:4F:1A
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 32
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/oS-OWb5CVe5pMYeAJ2LwlyMSTxo.roa
Signing time: Mon 27 Apr 2026 06:08:38 +0000
ROA not before: Mon 27 Apr 2026 06:08:38 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2519
IP address blocks: 116.92.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Apr 27 06:08:38 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=A12F8E59BE4255EE693187802762F09723124F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:ca:ad:2d:0a:d2:00:02:b6:8a:06:64:4b:
ed:fd:8e:fd:89:54:19:fc:32:76:99:ef:d2:e1:30:
0a:1b:98:e6:e8:9e:bd:e9:02:4c:61:ae:5e:79:9b:
89:ad:17:15:79:4c:a7:d6:77:b1:33:94:b2:d1:5c:
3c:fd:24:e9:b4:25:e4:f3:cf:63:70:ed:03:04:a7:
97:70:fc:3c:96:e9:1f:cd:3d:01:c1:6f:dc:7a:f2:
c8:29:00:4c:df:e0:c9:c8:b1:b4:34:15:81:98:29:
16:8b:dd:a3:8b:98:e8:3d:85:f2:fe:58:fb:5a:9e:
45:9f:80:01:eb:77:f9:10:07:49:22:ba:87:90:ed:
67:88:70:f4:e5:b2:80:9a:21:ea:bb:b4:d5:8d:ad:
7a:56:de:20:00:b7:db:fd:80:c8:40:11:27:b5:c0:
3f:b3:c3:63:25:29:f7:a6:38:eb:34:ca:f5:93:1f:
dd:c8:bb:34:69:87:0f:59:58:f5:d8:e6:ae:68:b9:
7c:05:d0:d6:4b:d2:70:74:93:3b:9a:d4:42:68:12:
80:f1:40:37:cb:63:86:6d:79:d0:41:83:80:1f:6d:
10:80:0e:51:42:ec:bd:e2:5b:52:5d:59:a5:47:f9:
8c:ba:73:bc:7e:fe:25:b9:e2:2e:73:e4:05:e5:33:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:8E:59:BE:42:55:EE:69:31:87:80:27:62:F0:97:23:12:4F:1A
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/oS-OWb5CVe5pMYeAJ2LwlyMSTxo.roa
sbgp-ipAddrBlock: critical
IPv4:
116.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
54:74:81:25:59:8d:03:34:5f:37:56:7d:7a:2d:64:73:79:bf:
10:b8:85:0c:44:ee:4e:bb:a8:7a:aa:76:c0:d8:73:fa:03:5e:
f8:07:db:de:a5:07:2c:c4:6b:59:3f:f5:d8:c5:9e:e1:3e:78:
80:8a:82:b5:a8:12:5e:5a:c3:d1:d9:95:16:e8:90:54:64:da:
66:fd:86:fb:9c:96:91:02:e0:06:0b:58:e9:d8:82:cb:ea:89:
8e:32:cb:3f:2a:39:ef:b0:3d:4c:b1:02:6c:23:8d:55:a2:38:
be:e1:2a:7f:42:f1:88:62:92:3b:69:43:16:c2:4b:43:c8:f3:
9f:a4:d0:e8:2e:ba:14:73:74:da:ec:00:3e:95:e2:52:34:95:
13:b1:59:ac:96:00:ae:4a:41:64:37:d9:d3:99:5b:3a:5a:26:
c2:7f:9c:5a:14:25:9e:61:33:fc:ab:c0:15:6e:f3:79:9c:86:
32:91:6a:49:7d:4c:42:b5:66:35:dc:fc:62:4d:27:7b:4f:0b:
85:a6:c1:b6:ce:a1:11:23:4c:b3:7b:c7:9c:5e:04:db:47:24:
7b:f3:4e:41:2d:7d:70:0b:31:4f:0c:36:6c:8a:0d:06:3c:d1:
3e:97:51:b0:54:6e:34:e3:fe:5d:fd:29:d4:e4:d9:5e:82:0b:
04:bc:7c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:58 2026 by rpki-client