
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/CMBcN9Z_0zzWl2Y19-7HmbRXlcA.roa
File: CMBcN9Z_0zzWl2Y19-7HmbRXlcA.roa (raw, json)
Hash identifier: /HrCWpyfunrd4uk3DUC3lVYBY0Rml7PYI1yVAmjD8B4=
Subject key identifier: 08:C0:5C:37:D6:7F:D3:3C:D6:97:66:35:F7:EE:C7:99:B4:57:95:C0
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 69
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CMBcN9Z_0zzWl2Y19-7HmbRXlcA.roa
Signing time: Wed 03 Jun 2026 18:37:17 +0000
ROA not before: Wed 03 Jun 2026 18:37:17 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 2519
IP address blocks: 122.222.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jun 3 18:37:17 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=08C05C37D67FD33CD6976635F7EEC799B45795C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:57:fc:1d:50:ce:9f:80:68:2c:d4:fb:ad:
a6:99:70:17:af:16:4e:33:80:f9:82:cb:43:72:d6:
96:b5:63:07:7b:2b:a3:a4:f9:d1:91:5b:e9:51:66:
55:69:0d:8b:46:24:3c:2d:b2:19:ae:65:2e:20:50:
d4:1f:22:c6:10:e7:64:1e:80:2d:c1:2e:e6:12:12:
b4:c9:37:9b:cc:28:b7:99:2d:a2:1c:e9:08:14:35:
2e:8d:59:33:c6:6d:b4:73:61:75:a1:47:41:83:44:
cc:c3:74:80:7f:72:98:dc:cb:b0:fe:19:43:d5:42:
69:e0:dd:6c:e6:82:5a:1e:34:cd:d2:d5:a4:2c:e9:
7c:85:f3:f0:66:8f:d4:2a:72:d7:42:27:e1:7b:d9:
39:26:05:d0:c6:dd:01:78:1f:37:10:23:37:1a:f9:
3b:52:d2:2a:63:50:b0:d5:f2:da:6f:b0:e8:ff:f5:
ea:f2:c2:39:d1:b2:b3:66:0d:7f:04:95:e4:f8:b8:
8e:3b:2b:5b:b7:db:d0:4d:ea:79:8a:13:35:87:96:
fe:f4:ed:23:1d:fd:40:36:4e:63:f6:ba:17:ca:d7:
64:66:34:b7:a9:c7:75:ef:d7:7b:9b:93:c5:01:19:
50:34:a0:92:16:b2:3f:47:e2:4d:46:05:45:ab:ce:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:5C:37:D6:7F:D3:3C:D6:97:66:35:F7:EE:C7:99:B4:57:95:C0
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/CMBcN9Z_0zzWl2Y19-7HmbRXlcA.roa
sbgp-ipAddrBlock: critical
IPv4:
122.222.0.0/17
Signature Algorithm: sha256WithRSAEncryption
83:84:aa:f4:24:67:8f:29:ce:c1:81:7e:80:28:80:95:39:ba:
49:14:20:6d:1d:54:29:f8:24:ca:21:fd:e1:7c:a0:f3:33:69:
0e:45:da:4a:7e:a2:dd:de:2b:1d:fb:00:b6:92:6c:5d:6d:0b:
e6:9d:e8:9e:20:09:aa:57:c0:81:a2:e2:42:9b:ee:41:db:aa:
6b:9d:b4:2d:46:4e:d0:0b:09:54:92:36:2f:19:ba:ac:1d:a7:
28:f0:9b:9f:2f:ec:55:3c:52:a2:fa:13:8d:48:8d:2b:16:7d:
d5:ca:2f:ae:c2:79:b4:ef:6f:39:67:64:0f:07:07:12:a6:d4:
72:67:73:cf:ce:88:f3:f4:f0:5f:f0:6b:ac:53:cb:c0:88:d3:
24:27:99:fc:79:e0:0f:36:95:67:97:19:bc:06:45:58:a9:29:
1c:03:5a:07:a6:02:95:b8:f1:bc:34:b3:ce:13:60:be:45:d7:
57:e5:ce:69:66:3d:59:35:2e:3b:02:8f:20:26:bb:cd:e3:d0:
d6:e2:dc:2e:dd:15:f4:99:1b:22:17:cb:71:fd:84:91:f7:5c:
aa:4c:25:17:3f:5c:6e:d9:07:11:32:e6:c4:a7:12:ad:15:fb:
fd:fb:03:a9:6d:c3:9e:16:04:f0:e2:6e:b4:92:c0:d8:42:cd:
bd:10:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:25:28 2026 by rpki-client