
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/zfYhCrZA-lc0m7mvOdGlb-6CfY0.roa
File: zfYhCrZA-lc0m7mvOdGlb-6CfY0.roa (raw, json)
Hash identifier: FymwGzWdBO5fzzINqMzGn285tc31e/m7mQlg48YUSu0=
Subject key identifier: CD:F6:21:0A:B6:40:FA:57:34:9B:B9:AF:39:D1:A5:6F:EE:82:7D:8D
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 28
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/zfYhCrZA-lc0m7mvOdGlb-6CfY0.roa
Signing time: Wed 22 Apr 2026 05:42:45 +0000
ROA not before: Wed 22 Apr 2026 05:42:45 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 2519
IP address blocks: 202.21.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Apr 22 05:42:45 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=CDF6210AB640FA57349BB9AF39D1A56FEE827D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:50:55:73:7d:1b:f1:5c:f3:2e:93:2f:7b:
cc:25:df:1b:fd:1f:76:d5:f1:ef:24:99:5f:f3:e6:
23:da:6e:b8:2d:df:41:5c:e0:6e:89:2e:b5:07:13:
de:58:d0:0d:86:8b:29:40:ca:a6:ab:4a:fe:d9:97:
72:5c:e4:62:65:92:d3:5d:33:0f:77:d6:c8:7e:7d:
b6:7e:f9:39:62:ed:34:e2:d5:eb:e1:70:7d:a4:c8:
9b:d7:47:76:79:86:08:73:c4:3d:f7:7c:18:b4:b2:
e4:97:7c:2b:1e:05:5a:9a:bf:98:e4:f8:62:fd:99:
5a:04:1b:3f:44:e3:fe:1d:57:46:69:46:50:7c:42:
05:bc:8f:09:bd:8e:a3:68:50:fb:f3:88:83:4a:28:
70:15:91:77:fb:76:e5:3e:68:61:df:64:2f:be:2c:
76:f3:b4:ef:96:cf:6e:fd:18:9a:9e:61:92:4e:58:
19:ce:62:93:a2:9c:f9:20:73:60:98:4d:13:0c:6f:
56:55:df:86:47:c4:ae:a2:a0:f9:86:4e:de:4e:c4:
99:66:18:8c:81:bd:e0:34:f6:e0:1e:71:e3:d4:fe:
a2:03:6b:0b:d0:0d:1d:3e:23:d4:40:52:05:e5:9f:
a3:8a:c0:00:1e:45:40:6a:a0:0e:95:87:2a:1a:a2:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:21:0A:B6:40:FA:57:34:9B:B9:AF:39:D1:A5:6F:EE:82:7D:8D
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/zfYhCrZA-lc0m7mvOdGlb-6CfY0.roa
sbgp-ipAddrBlock: critical
IPv4:
202.21.146.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e4:87:ae:b0:ec:d3:39:62:48:23:68:7a:0b:7e:33:c6:79:
3f:0f:c2:8a:42:b7:ad:31:6e:ab:0a:cf:72:a7:b8:c7:a8:b5:
7a:99:96:d2:a4:6a:f2:47:33:16:8c:ec:30:bc:d3:59:48:41:
54:e8:4c:fe:8b:1c:41:8d:ca:33:2d:91:36:f7:59:63:b3:43:
4f:a6:e7:e1:4a:06:74:23:1b:02:27:7c:3d:5e:26:8a:fd:92:
7e:48:db:69:6d:9d:3d:1c:5d:5a:23:0d:b0:d6:63:ba:d0:83:
74:ca:7e:18:3e:ee:9a:b4:4c:92:a8:b9:a1:dd:39:ab:c0:d1:
4b:e7:80:ca:11:7e:8c:20:ee:ae:cc:0d:44:c6:b1:83:37:9a:
28:8c:af:89:b8:2e:82:02:d9:22:09:19:e4:a2:eb:23:1e:97:
41:ef:07:0e:f4:ee:86:a9:26:0c:52:d9:45:14:0b:9c:dd:58:
bb:d3:6b:18:0d:d8:d7:58:1a:2f:aa:f2:60:35:c8:99:4b:3c:
90:0a:e2:83:a8:55:20:40:75:0b:4f:21:ee:1f:8e:74:32:73:
f9:bc:77:4d:bc:ac:9d:f7:8e:74:33:25:1c:41:10:44:5b:5d:
3b:6f:43:13:47:aa:de:bf:89:94:f9:a4:58:ce:7e:fe:23:a6:
43:ed:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:50 2026 by rpki-client