
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/FwDwTkMoxVV6mbPFER_XalSjhBg.roa
File: FwDwTkMoxVV6mbPFER_XalSjhBg.roa (raw, json)
Hash identifier: 2SyHAwzjRce9F70Gk9lgzaXIqqGBkUIR0N/8uz7vvzQ=
Subject key identifier: 17:00:F0:4E:43:28:C5:55:7A:99:B3:C5:11:1F:D7:6A:54:A3:84:18
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 0294
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/FwDwTkMoxVV6mbPFER_XalSjhBg.roa
Signing time: Tue 31 Mar 2026 07:33:43 +0000
ROA not before: Tue 31 Mar 2026 07:33:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4713
IP address blocks: 203.139.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 31 07:33:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1700F04E4328C5557A99B3C5111FD76A54A38418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:66:d7:8f:f9:d6:11:c7:01:f7:8d:df:d6:0d:
bd:9a:38:3f:04:98:e5:04:d8:5d:77:42:e1:d3:98:
53:58:28:e8:80:64:8e:80:0e:6a:49:74:33:85:1f:
ad:36:84:13:a5:18:b3:a0:ab:28:18:60:5f:24:54:
7f:83:83:d4:14:10:d2:be:26:2f:0a:8d:71:54:fc:
83:b1:c7:72:d6:6e:6a:3c:f5:21:63:4a:89:0a:ab:
09:aa:eb:2b:9b:62:5a:48:1b:91:6e:75:7f:05:d8:
03:b8:a6:12:c8:e3:30:ff:e5:42:11:1f:cb:6c:02:
45:ba:48:54:15:e9:c8:3f:33:8a:67:62:09:54:89:
41:e3:7e:be:ce:5e:92:94:c4:ee:1a:16:0b:04:63:
98:54:71:f4:ab:2a:0c:86:8c:ee:57:e8:57:d6:6b:
93:44:af:2b:a1:14:88:ce:5c:15:69:6c:96:99:0a:
27:de:f8:d2:6c:89:ce:8e:47:26:c2:fa:c7:9c:a1:
49:dc:2c:e6:b0:45:32:f1:95:15:b5:9e:52:ec:c5:
2e:d7:1e:34:ac:e4:c5:6d:00:d3:31:ce:28:d6:26:
cb:fa:4a:11:6d:c0:e3:48:b3:07:65:69:db:33:5d:
6e:04:dc:3e:56:22:9d:de:b4:5f:a9:00:77:8c:1a:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:F0:4E:43:28:C5:55:7A:99:B3:C5:11:1F:D7:6A:54:A3:84:18
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/FwDwTkMoxVV6mbPFER_XalSjhBg.roa
sbgp-ipAddrBlock: critical
IPv4:
203.139.160.0/19
Signature Algorithm: sha256WithRSAEncryption
21:c1:1e:9b:6e:b5:e0:b3:02:04:05:9c:47:2c:1a:fd:1a:67:
5e:ef:3a:64:3e:99:5d:75:e3:5e:18:db:9c:15:0d:12:31:ea:
9b:40:90:6a:61:7f:bc:f1:0f:3c:8a:3f:b7:34:21:c8:22:46:
60:5f:08:67:74:61:95:5a:49:1e:5d:e1:9c:0c:e5:14:15:fc:
19:a7:35:9d:e9:fd:48:9a:5b:b4:62:1b:da:d9:de:53:aa:fc:
01:82:12:24:06:bb:10:b1:83:42:9c:1d:6b:9d:bc:99:65:91:
f2:52:1f:ee:08:3b:2b:67:e3:15:c7:27:d2:04:a4:e0:62:37:
89:12:3d:63:f5:07:47:f4:20:a3:c4:22:e8:75:88:8d:40:8c:
ee:cc:fc:f2:03:f6:ce:ae:35:5b:b2:2f:ae:cf:b6:fe:df:db:
44:00:d2:39:c7:a9:32:d4:ca:60:c1:81:42:16:70:91:16:ce:
8f:f2:bc:c6:93:ae:39:c4:8a:dc:ed:bf:54:48:35:9f:94:2c:
ef:0c:a8:d4:1f:e2:b8:b4:85:b3:cb:3b:b2:2b:12:13:a9:6f:
de:83:79:c0:9b:d4:9a:c9:d2:3b:5c:95:24:f4:63:1f:82:c8:
9f:8e:fc:8b:6f:aa:5f:fe:0c:42:e1:b1:8f:0c:f5:2e:89:a5:
8e:c7:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:02 2026 by rpki-client