
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/2jTHtulmwRf7JO_JvXgm5h9JzXY.roa
File: 2jTHtulmwRf7JO_JvXgm5h9JzXY.roa (raw, json)
Hash identifier: 4cwhsrCC6elWUxyu8AGs122A/3r5hn5X8ESf64eI3wU=
Subject key identifier: DA:34:C7:B6:E9:66:C1:17:FB:24:EF:C9:BD:78:26:E6:1F:49:CD:76
Certificate issuer: /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial: 59
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/2jTHtulmwRf7JO_JvXgm5h9JzXY.roa
Signing time: Tue 31 Mar 2026 07:52:17 +0000
ROA not before: Tue 31 Mar 2026 07:52:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131921
IP address blocks: 133.117.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Validity
Not Before: Mar 31 07:52:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DA34C7B6E966C117FB24EFC9BD7826E61F49CD76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:66:c1:68:c0:a8:1e:ee:9f:07:95:3c:a2:6e:
cd:63:db:b7:36:a5:08:6c:11:76:31:27:72:b1:a7:
58:14:88:cc:f7:10:c0:47:ae:2f:c7:44:39:cf:8e:
0e:02:c9:3b:01:25:09:32:0c:90:ca:2e:9c:79:11:
cd:07:22:bc:61:be:e0:a2:53:3a:c1:3e:4b:47:a6:
46:57:df:87:98:23:27:02:d7:ad:b1:85:db:42:bc:
3b:1a:b7:30:99:fa:b3:42:f5:fa:75:e9:8f:37:15:
1c:cb:c6:9a:94:8a:e0:5f:72:5b:75:21:33:46:6d:
f4:72:31:b3:d7:24:64:36:ef:f1:d2:3c:bd:17:6a:
bb:7c:85:2a:63:92:c5:11:91:84:c9:8a:fc:70:8b:
85:8c:68:a3:58:d6:30:55:8d:5d:b7:7e:d5:7c:3f:
4b:51:c9:34:8a:81:f1:15:e0:cb:f8:87:49:f5:9f:
a3:df:1a:44:24:83:eb:78:f3:55:ff:15:54:a2:29:
76:e7:1c:64:d5:be:f3:d7:a0:a0:82:d4:9e:4e:d9:
f6:96:38:f4:9e:b7:86:45:e7:e3:99:fa:8b:70:9c:
e2:f6:e1:bc:01:68:ed:18:f0:75:02:5b:8f:b3:a5:
07:a0:8e:97:a2:46:d2:fa:0e:c7:8c:53:ec:16:46:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:34:C7:B6:E9:66:C1:17:FB:24:EF:C9:BD:78:26:E6:1F:49:CD:76
X509v3 Authority Key Identifier:
keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/2jTHtulmwRf7JO_JvXgm5h9JzXY.roa
sbgp-ipAddrBlock: critical
IPv4:
133.117.152.0/21
Signature Algorithm: sha256WithRSAEncryption
29:00:99:ea:34:d8:19:95:77:62:7f:32:5c:8a:d1:de:13:7b:
db:c4:53:27:81:31:27:d5:dd:ec:d9:16:03:fe:1d:b0:d0:11:
79:d6:82:ae:df:99:69:b2:f5:8b:80:62:bb:b3:04:48:f8:51:
64:ef:e8:fa:45:55:d4:fe:fb:1e:16:d9:56:56:15:a3:87:8c:
fc:07:75:55:a6:0f:fe:f6:81:39:05:34:2c:97:45:23:af:ee:
33:a9:00:a7:11:b2:ff:65:77:de:c9:73:8d:ab:82:e9:37:30:
57:67:36:ef:3a:aa:5f:55:89:14:fb:3d:88:3f:03:76:a2:e3:
91:f0:9c:63:5e:85:6d:47:a2:c2:9d:9f:bb:3d:bb:fc:45:fe:
fc:20:d9:05:c1:13:78:b2:10:3f:da:17:c3:c9:a8:4a:c5:93:
d7:3f:a0:b9:d1:b6:e3:6c:37:48:a6:13:30:00:52:4f:8c:7f:
b3:d6:ad:bc:2f:06:3c:f1:74:c8:1c:be:e7:7f:22:41:95:5b:
a0:f6:d5:fb:14:a6:01:c0:3b:95:6b:49:91:e9:77:af:bd:7f:
1b:9c:bf:17:48:56:1e:d7:c7:7e:ad:c8:d8:e9:2e:fa:18:bd:
74:c1:2a:c6:5f:a9:8c:58:60:6e:a6:d3:3c:36:3c:e8:8b:69:
13:98:1e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:58 2026 by rpki-client