
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/Riq8n_CQdFWWu8W1czs0EHozPbw.roa
File: Riq8n_CQdFWWu8W1czs0EHozPbw.roa (raw, json)
Hash identifier: 7m37JBD7ex2T3daphwcCzdej+sht4aK9U2D5omdf+NI=
Subject key identifier: 46:2A:BC:9F:F0:90:74:55:96:BB:C5:B5:73:3B:34:10:7A:33:3D:BC
Certificate issuer: /CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Certificate serial: 6B
Authority key identifier: D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Riq8n_CQdFWWu8W1czs0EHozPbw.roa
Signing time: Wed 10 Jun 2026 01:16:55 +0000
ROA not before: Wed 10 Jun 2026 01:16:55 +0000
ROA not after: Sat 15 May 2027 01:30:02 +0000
asID: 55900
IP address blocks: 172.97.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 12:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Validity
Not Before: Jun 10 01:16:55 2026 GMT
Not After : May 15 01:30:02 2027 GMT
Subject: CN=462ABC9FF090745596BBC5B5733B34107A333DBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:d5:02:97:a9:ee:41:b0:a4:0c:8c:10:e7:
3e:31:bd:06:ae:47:ad:04:d3:98:8e:4c:ad:bb:d9:
f2:d3:e1:03:2c:d0:da:e3:54:9f:db:80:44:53:ce:
57:84:12:e3:31:45:97:06:8a:1a:6b:51:58:e0:f5:
7e:bb:17:a8:fe:0f:a5:d4:e1:b9:21:ad:c3:aa:de:
cd:4b:f7:71:ad:ce:4e:1e:b8:7c:88:f1:3d:57:3d:
06:b6:6f:48:34:ae:e4:ee:c6:f9:cb:5d:e5:b4:0d:
24:15:b0:52:81:d8:11:89:ff:8e:2e:e6:6b:bf:7d:
52:dd:49:cb:bb:13:cc:6f:88:33:55:8e:37:d8:6e:
68:87:de:ad:2b:cc:83:b1:93:09:02:a1:1b:80:ab:
6a:7a:c6:2a:db:5c:04:42:4d:2d:6c:ca:4b:be:bf:
a0:e4:92:72:e2:c9:f1:9a:d6:33:0e:a9:ef:26:80:
02:c7:69:ce:96:dc:8a:dc:6a:0e:17:e1:f0:6e:bf:
6c:f8:b1:89:25:f4:b4:07:b1:e5:f6:bf:18:7b:1b:
b4:34:b1:af:a2:fe:dd:88:9c:b3:e7:3a:17:78:56:
d8:7a:37:94:30:cd:4e:77:ee:ee:48:d8:ae:f1:db:
96:4e:09:74:da:07:03:d6:d5:f7:08:a0:cd:0b:48:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2A:BC:9F:F0:90:74:55:96:BB:C5:B5:73:3B:34:10:7A:33:3D:BC
X509v3 Authority Key Identifier:
keyid:D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Riq8n_CQdFWWu8W1czs0EHozPbw.roa
sbgp-ipAddrBlock: critical
IPv4:
172.97.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:b1:f9:ae:18:70:8e:e4:59:df:00:00:1d:e4:df:e7:01:16:
72:18:fb:c6:7a:78:b1:42:8e:72:51:39:d0:45:f0:99:df:91:
67:45:22:d5:ca:7d:5c:b4:61:14:c9:9f:d0:75:94:1e:25:30:
17:51:ed:5d:9f:ca:49:4b:a0:c6:08:28:55:c4:78:f6:54:de:
36:f3:eb:99:0e:a4:c1:69:b8:cf:4d:4e:e5:c5:84:8f:08:1c:
fd:8a:fd:78:bd:3e:ca:63:40:e6:67:25:40:89:14:e1:55:88:
73:97:06:c0:e1:1a:50:a5:18:bc:27:53:27:68:c9:6e:d0:f7:
ce:5c:fa:1a:66:b8:68:12:8d:e2:b3:94:ed:7c:b3:79:6e:52:
05:91:cc:c1:30:ad:aa:47:91:1a:54:71:2c:4a:6c:72:47:cf:
86:3d:0a:d8:8d:0a:c4:1d:2e:dd:0b:6e:1a:7a:0a:17:47:07:
3d:4a:40:e3:dc:66:48:1a:f7:e7:54:c7:25:d9:e5:f4:94:7c:
08:7e:99:72:4e:61:07:c5:a3:54:81:0e:39:8e:87:bb:72:6b:
d1:14:6e:0c:8b:d5:4f:6f:61:2f:07:81:00:52:68:ca:f9:0f:
ca:73:ee:3f:c5:e2:33:83:14:ce:0c:53:d5:e7:ea:04:d9:6f:
d8:ac:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:32 2026 by rpki-client