
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/yVJKt96XKwJhD3bLaDzPyh4Sf6E.roa
File: yVJKt96XKwJhD3bLaDzPyh4Sf6E.roa (raw, json)
Hash identifier: wXjrqnKjv/ANx1hti+6zzcRRKqMVKhDztcc/013GpEo=
Subject key identifier: C9:52:4A:B7:DE:97:2B:02:61:0F:76:CB:68:3C:CF:CA:1E:12:7F:A1
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 29
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/yVJKt96XKwJhD3bLaDzPyh4Sf6E.roa
Signing time: Tue 31 Mar 2026 08:49:15 +0000
ROA not before: Tue 31 Mar 2026 08:49:15 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 58.70.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 31 08:49:15 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=C9524AB7DE972B02610F76CB683CCFCA1E127FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:27:49:ab:53:75:7f:ea:f9:e4:91:41:bb:
cb:e2:42:9f:54:04:bd:ba:34:1e:69:ed:da:59:c1:
12:50:fc:53:0d:e1:90:95:00:d4:12:20:13:e3:c6:
37:26:f5:29:8b:df:98:95:8c:7d:f0:3b:07:c8:0e:
62:25:f2:25:99:a7:e8:05:a0:f7:e0:cc:48:97:5b:
2e:49:fb:e1:b6:6b:41:7f:52:a7:86:1f:fd:e6:d0:
45:2f:62:2b:8b:d2:ad:e7:c9:fa:d5:ed:38:eb:6e:
92:05:4e:74:c6:c4:f4:70:fd:e9:d1:dd:72:f4:ac:
22:85:43:38:25:a9:f3:6a:03:50:8a:4f:f9:26:00:
38:18:df:a1:0b:50:6f:12:c3:6b:53:1c:f4:28:d5:
d6:c6:e9:7f:a9:dc:6f:66:d9:0d:2a:2e:b8:51:d7:
f6:27:ef:21:03:fb:0c:1a:42:6c:9a:db:35:c8:12:
38:26:8f:6c:0b:08:e5:2d:7f:d0:fb:b5:36:70:5e:
71:a4:95:ff:a3:59:44:a2:7b:2d:de:61:91:be:22:
12:d3:2c:11:44:4c:cd:ae:96:fb:52:e2:7c:4e:8a:
dd:57:a5:a4:c7:87:4c:2c:70:7f:d5:e8:a8:55:39:
0e:22:e1:70:e3:e0:94:51:df:23:ae:9a:1c:c7:be:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:52:4A:B7:DE:97:2B:02:61:0F:76:CB:68:3C:CF:CA:1E:12:7F:A1
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/yVJKt96XKwJhD3bLaDzPyh4Sf6E.roa
sbgp-ipAddrBlock: critical
IPv4:
58.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:41:ab:33:bc:5c:f2:84:ff:eb:47:df:a3:b3:9d:81:53:68:
c1:d1:08:cd:e1:a1:bc:e7:9d:2a:dc:66:4f:a2:57:c3:f4:e6:
42:76:b7:16:f1:16:98:ba:f7:e4:66:15:6f:1b:36:a9:7c:09:
bb:58:12:d8:eb:82:64:66:a1:ec:7b:65:3c:1e:f5:be:fe:cf:
e6:82:39:db:e1:41:6f:98:60:fd:96:19:fe:96:23:5e:c3:c4:
17:9b:e9:e5:8a:af:df:23:38:5e:d4:f8:fa:ea:37:7e:66:dc:
63:07:d0:14:65:46:82:4f:ce:77:37:1c:d9:30:6f:fa:75:d1:
c9:a2:b3:1e:e7:14:01:ea:7b:82:33:2a:a7:03:d8:61:86:8e:
26:8f:9c:ae:ee:af:31:c4:04:54:06:0e:25:a6:5f:50:4f:0d:
21:fe:37:1a:ea:49:ef:be:2d:2a:22:69:71:6c:56:6b:22:3d:
3e:c9:a6:f2:92:7c:9b:a8:03:f7:bd:1b:af:d0:b7:6c:67:19:
63:37:68:81:0d:19:a6:99:2b:1d:26:35:ef:b5:6f:a3:bf:7e:
b1:97:50:0e:82:9a:16:3c:8f:b5:5a:2b:19:f8:e9:48:96:e5:
cc:69:b0:1f:dc:4d:87:b5:66:3c:ed:5e:bf:67:8c:93:8d:f3:
b8:fa:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:44:40 2026 by rpki-client