
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/Hp5hgVn-L427Tty-H5kbNg-TtrQ.roa
File: Hp5hgVn-L427Tty-H5kbNg-TtrQ.roa (raw, json)
Hash identifier: z9FcuH6C4IJBBYgFvYSVry5EC2lcptU45rnUZ/KSSBI=
Subject key identifier: 1E:9E:61:81:59:FE:2F:8D:BB:4E:DC:BE:1F:99:1B:36:0F:93:B6:B4
Certificate issuer: /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial: 96
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Hp5hgVn-L427Tty-H5kbNg-TtrQ.roa
Signing time: Mon 27 Jul 2026 07:24:37 +0000
ROA not before: Mon 27 Jul 2026 07:24:37 +0000
ROA not after: Thu 15 Jul 2027 01:30:02 +0000
asID: 2519
IP address blocks: 122.223.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 08:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Validity
Not Before: Jul 27 07:24:37 2026 GMT
Not After : Jul 15 01:30:02 2027 GMT
Subject: CN=1E9E618159FE2F8DBB4EDCBE1F991B360F93B6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:1b:45:53:41:24:1e:76:72:38:0c:44:1a:
d6:67:aa:e7:5d:84:cc:92:ad:dd:d7:40:60:94:21:
b4:b9:e6:74:16:c1:e5:ef:39:82:66:8c:77:46:1f:
1b:6e:fa:c6:6f:aa:98:1e:05:8e:65:2e:0d:ef:44:
5a:ac:17:cd:9c:85:fe:a5:6f:ec:12:2a:35:76:9e:
00:02:7a:93:73:78:8a:52:9d:71:88:08:63:81:20:
a3:7a:53:7b:43:a8:5e:f2:79:87:eb:ae:46:52:54:
23:12:02:18:b5:b0:ca:bf:89:e4:a0:b5:dc:6f:90:
e1:0b:c3:13:21:aa:4f:cb:c6:4d:c3:99:29:60:93:
17:ab:64:ac:ae:3a:64:41:8d:fa:3c:90:49:12:0b:
e4:fa:d2:85:fd:42:f6:2e:d0:17:cf:55:4f:75:8f:
7e:ce:be:fa:75:bb:08:6a:e8:88:be:a8:06:20:b5:
1b:79:4b:2f:1c:e1:c5:b4:e8:0e:c1:8b:3f:5b:06:
2e:bc:ab:50:f1:77:aa:b1:42:b4:10:02:2b:a1:74:
9b:f3:ec:09:f4:e9:d6:88:89:83:0f:9b:3e:e8:6f:
7d:d1:3c:65:58:ad:4a:3b:90:8f:f0:86:6b:f0:9d:
5a:c0:0e:44:2d:3b:5a:e4:09:7a:ac:83:ad:a0:32:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9E:61:81:59:FE:2F:8D:BB:4E:DC:BE:1F:99:1B:36:0F:93:B6:B4
X509v3 Authority Key Identifier:
keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/Hp5hgVn-L427Tty-H5kbNg-TtrQ.roa
sbgp-ipAddrBlock: critical
IPv4:
122.223.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:28:dd:9d:74:71:d8:b6:01:ff:90:cb:ef:58:55:b8:e4:81:
bc:d6:5e:b0:d2:ad:75:e3:80:fd:f9:2f:8c:0e:ef:73:bf:8b:
99:1f:71:ff:65:3a:da:5d:e2:db:3d:b2:6c:3e:1a:bb:25:84:
df:88:8b:65:b2:37:2f:d4:4b:17:0e:d2:c5:8d:31:09:22:e7:
94:ac:83:29:0c:96:5c:1f:30:d2:55:86:a7:d5:d9:b2:bb:cf:
9c:d0:53:8b:dc:c2:a0:ac:29:1e:61:58:38:28:50:ed:1c:cf:
c8:62:bc:05:9c:c0:ba:cd:e5:b6:c6:79:c5:fd:8c:81:94:a7:
b9:0d:3d:1e:48:f3:ff:37:48:fb:87:4d:f6:7f:77:83:0b:9f:
50:16:87:ab:bf:56:0d:24:da:3c:b4:69:f1:a5:38:4e:56:55:
25:c1:4d:40:10:e6:f1:0a:e4:29:57:7e:7c:93:69:20:b0:1f:
35:00:cb:96:15:ca:8a:d2:db:67:fb:bf:8c:12:62:8a:25:1c:
0d:e6:87:91:8b:bc:c3:4f:64:fb:32:ab:a0:91:6e:70:f8:8c:
53:0d:a0:24:85:55:ad:47:cc:5c:82:9b:94:30:e3:19:03:12:
41:84:c9:3b:07:38:fa:33:c3:17:98:f8:f7:ab:fd:1e:6b:70:
3b:f6:f7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:21:44 2026 by rpki-client