
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/2mJcrtDyAxLhoYkfh_7tGuJqEYw.roa
File: 2mJcrtDyAxLhoYkfh_7tGuJqEYw.roa (raw, json)
Hash identifier: xrtWwv9sFWR96w5dAwUvApy8lWMC2g0WCRbvAD+zoKc=
Subject key identifier: DA:62:5C:AE:D0:F2:03:12:E1:A1:89:1F:87:FE:ED:1A:E2:6A:11:8C
Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial: 53
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/2mJcrtDyAxLhoYkfh_7tGuJqEYw.roa
Signing time: Tue 31 Mar 2026 08:33:48 +0000
ROA not before: Tue 31 Mar 2026 08:33:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24259
IP address blocks: 133.88.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Validity
Not Before: Mar 31 08:33:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DA625CAED0F20312E1A1891F87FEED1AE26A118C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b6:11:6d:49:9e:d0:da:2b:98:97:08:ab:d0:
ac:af:61:e7:ba:6a:4c:06:a3:a6:c0:16:91:e0:25:
34:b0:fb:52:96:53:67:0c:1a:6c:b4:b7:14:03:f4:
47:23:0c:f7:89:b1:fe:85:ec:34:4c:dd:01:7d:06:
33:02:e1:3b:9c:b1:23:8c:eb:fe:ec:3b:23:79:92:
d9:8e:f0:ff:a6:7d:1c:81:cb:38:86:1a:4e:04:73:
e3:e1:5b:e5:4d:2e:8c:94:e8:1d:ca:b4:88:ab:e2:
51:a2:6a:31:8e:3b:a4:61:20:d1:a3:43:39:f9:9e:
f5:bc:c4:23:1d:9c:10:fb:91:92:f5:ca:9c:47:05:
47:98:ec:f0:15:6e:31:fe:29:af:37:a3:26:bf:05:
69:72:89:80:01:ba:5c:6d:28:44:8f:6f:33:7c:f3:
ae:1a:5d:78:9b:4e:7a:3f:77:07:1e:d7:81:a0:9b:
3c:27:3c:bb:7b:8b:fd:9a:07:c5:b7:90:61:04:b5:
89:7b:6f:e6:86:61:f7:a2:7f:e6:01:87:de:25:33:
eb:a9:66:97:10:5f:d5:33:85:96:b0:ea:26:8c:12:
60:fe:9f:4b:2b:fb:a2:b5:b1:b5:de:27:2f:37:0f:
15:0f:03:a5:08:9f:af:3c:92:79:58:f2:5b:4d:85:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:62:5C:AE:D0:F2:03:12:E1:A1:89:1F:87:FE:ED:1A:E2:6A:11:8C
X509v3 Authority Key Identifier:
keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/2mJcrtDyAxLhoYkfh_7tGuJqEYw.roa
sbgp-ipAddrBlock: critical
IPv4:
133.88.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:cc:a8:a9:fb:ca:9f:76:cf:99:fd:15:01:ca:c1:58:2a:20:
c2:3f:ca:f7:e0:ce:d7:73:3b:5f:70:52:46:77:5a:35:25:d5:
be:7c:07:c2:b3:7c:d9:33:a5:05:5f:68:77:68:ab:9a:5c:8b:
4f:28:8f:3d:3b:75:48:73:b3:e7:51:69:6a:98:37:e6:44:5f:
5b:35:fa:dc:f3:a7:a6:7d:5d:f2:6c:2e:2d:7e:a8:49:b3:89:
0c:7e:ea:8e:74:e1:9b:27:32:e8:85:b3:8f:7e:5a:8c:01:87:
f9:e9:e7:f9:7e:b1:48:b2:f2:4f:4f:a4:b8:63:f9:0b:64:9e:
5d:3c:c8:4b:5f:0c:dd:66:10:0e:35:0f:a6:0a:98:93:86:24:
f5:5a:3f:e9:ee:ce:77:63:52:4b:d8:ec:56:ff:45:c1:d4:ae:
7e:dd:0e:bc:40:1d:e6:0b:bc:bf:ab:ad:cb:b4:4a:95:34:26:
64:84:01:e8:28:48:46:21:44:d7:0b:4b:99:8c:ac:e4:b7:a1:
76:d6:0f:b0:ab:d9:76:ff:43:89:3b:48:74:77:21:1b:2a:79:
b2:fc:4b:29:7a:5f:93:84:fc:57:ce:ae:82:9c:3f:03:a4:9b:
3c:4c:b0:b8:7c:e9:74:bb:d9:84:26:a3:97:cd:42:7e:ce:13:
f9:29:71:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:19 2026 by rpki-client