
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/jR4HFb2-sqJdkZXD84-VM4RpYbY.roa
File: jR4HFb2-sqJdkZXD84-VM4RpYbY.roa (raw, json)
Hash identifier: EYiIeMSQsba6QGQz9R9yx6TwsgDiGBK0ZvTVo1urt8M=
Subject key identifier: 8D:1E:07:15:BD:BE:B2:A2:5D:91:95:C3:F3:8F:95:33:84:69:61:B6
Certificate issuer: /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial: E2
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/jR4HFb2-sqJdkZXD84-VM4RpYbY.roa
Signing time: Wed 14 Oct 2026 09:11:22 +0000
ROA not before: Wed 14 Oct 2026 09:11:22 +0000
ROA not after: Wed 15 Sep 2027 01:30:02 +0000
asID: 7529
IP address blocks: 133.157.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 15:59:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Validity
Not Before: Oct 14 09:11:22 2026 GMT
Not After : Sep 15 01:30:02 2027 GMT
Subject: CN=8D1E0715BDBEB2A25D9195C3F38F9533846961B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:f2:dc:2e:3a:51:4d:61:19:94:af:c0:b3:
f8:ae:cf:6d:92:25:84:22:b4:12:8b:af:fb:a0:e5:
b2:de:b9:c3:97:b8:46:d2:ca:7a:e2:25:6b:47:a1:
1a:68:e8:ee:7c:21:b8:df:0e:0d:33:b0:fa:7f:ef:
8b:e8:e9:b6:b1:fe:a1:5c:8e:f0:c1:5f:58:ff:1f:
6d:82:49:22:d9:3a:15:4a:c0:7d:3b:30:1c:a0:d8:
4c:95:36:b1:dd:48:96:d0:eb:ca:f4:8b:36:1e:f9:
39:6b:69:98:6c:f9:a8:1f:10:45:c1:a6:c8:be:f0:
5a:9f:08:6d:4b:d2:42:e8:89:06:5a:64:85:85:c8:
55:fe:c5:e1:df:20:2d:b9:f8:a3:6e:6a:2f:b7:7e:
88:f3:a2:58:7f:7b:2a:1c:a7:d5:b7:10:0c:b0:d5:
8e:73:c2:de:19:4e:f0:e6:e6:27:07:79:dd:2b:ef:
24:3a:6c:ee:56:9f:35:5a:0e:01:fb:9a:f3:2b:9c:
35:97:91:2d:73:bd:76:60:9e:7a:5c:bb:8e:8a:03:
2e:05:51:66:97:93:7b:9f:bf:e1:fe:29:f7:3e:f1:
33:3d:ce:bd:bc:10:48:5b:8a:8a:fc:b4:1a:47:40:
72:57:fe:0b:33:d0:33:36:dc:36:82:40:ba:14:07:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1E:07:15:BD:BE:B2:A2:5D:91:95:C3:F3:8F:95:33:84:69:61:B6
X509v3 Authority Key Identifier:
keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/jR4HFb2-sqJdkZXD84-VM4RpYbY.roa
sbgp-ipAddrBlock: critical
IPv4:
133.157.124.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:90:00:0e:ff:fa:3c:3b:c9:6b:4b:95:ac:7d:62:99:b3:e1:
90:17:0d:91:a9:e4:83:9b:6b:04:2b:4e:4f:27:f8:e4:9a:ad:
3e:cd:c3:93:0a:94:c1:33:aa:c9:c3:4a:1e:39:a0:b4:3e:cc:
40:72:6b:8c:9f:40:b1:b3:48:d2:5b:5d:b5:9b:85:55:d0:c4:
84:ba:65:0a:15:f3:69:a9:b9:24:43:9c:99:af:16:db:4a:28:
fa:48:ac:8f:5b:07:57:27:28:38:44:9f:f4:18:16:62:cd:9b:
b3:be:26:cb:36:34:49:9c:48:a5:21:c7:ef:c5:e7:46:ac:b9:
07:f8:6a:1f:a7:ef:7b:c0:44:50:9b:4e:1b:93:96:62:7f:5c:
41:c6:48:8c:53:5d:dc:bd:c3:44:7d:ca:64:09:be:82:ab:ba:
ae:24:2b:5b:99:b0:01:2a:92:47:cc:21:c3:3e:93:95:85:29:
9d:aa:a5:4c:da:44:d7:7c:b6:23:e8:63:f5:3e:22:d1:4d:f5:
5b:d8:7f:f7:3a:20:e8:bc:88:d2:52:55:c3:05:7c:2d:a3:29:
54:6e:fe:00:ad:d1:23:19:81:60:db:d2:23:9d:04:97:45:40:
9b:cb:a0:3f:4f:25:50:c3:57:71:11:53:4c:f3:18:59:0b:e5:
29:bb:e1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:05:49 2026 by rpki-client