
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/87DWUfAtdvvLdMbrvROXNL8LAG8.roa
File: 87DWUfAtdvvLdMbrvROXNL8LAG8.roa (raw, json)
Hash identifier: 5PnIPJpT48LRlxOEoDPf3hdOUpA1pY9bshxNFdL4PK4=
Subject key identifier: F3:B0:D6:51:F0:2D:76:FB:CB:74:C6:EB:BD:13:97:34:BF:0B:00:6F
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 023C
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/87DWUfAtdvvLdMbrvROXNL8LAG8.roa
Signing time: Tue 31 Mar 2026 07:35:59 +0000
ROA not before: Tue 31 Mar 2026 07:35:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 32787
IP address blocks: 210.130.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 572 (0x23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F3B0D651F02D76FBCB74C6EBBD139734BF0B006F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1c:d3:5c:16:31:b1:3d:56:53:6d:71:28:ff:
ab:ee:c2:28:e9:7b:f5:7c:31:90:32:da:4a:05:cb:
fb:cc:12:c8:b3:79:dc:a5:43:f1:1b:12:b0:d1:90:
91:0b:c5:4e:ee:10:81:5a:64:2d:e0:2d:f5:62:c1:
36:8a:82:fa:e4:96:22:9b:62:bf:bd:69:75:45:57:
a1:f2:01:c1:d4:6b:e5:0a:6e:41:a4:34:b3:54:2e:
38:47:2a:51:ec:2c:5a:54:a4:c3:3f:74:10:7d:5f:
2f:77:a2:2e:57:48:9c:92:ac:fe:c3:ea:fe:3e:c4:
51:fc:87:f3:65:09:6e:60:75:fa:d8:e7:72:ae:2c:
58:2c:83:1c:d4:0f:bf:48:4e:df:a1:17:33:35:cd:
f2:c2:5c:f5:7e:3c:a1:32:f9:8b:db:f1:0d:16:fd:
42:7f:7d:2c:17:09:21:cc:e0:05:52:e6:ba:a3:3d:
5d:72:40:d0:3b:2f:2e:e1:74:89:c0:14:26:ce:aa:
d6:86:7b:da:f8:3d:36:04:2d:05:ad:49:17:26:63:
55:d2:59:37:5a:74:0a:82:15:e0:ed:72:8b:f8:a8:
da:1e:23:04:42:be:76:e9:28:cd:ff:48:44:b1:4f:
ce:1a:eb:3d:19:48:98:4e:0a:d0:b9:e9:56:83:9a:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:D6:51:F0:2D:76:FB:CB:74:C6:EB:BD:13:97:34:BF:0B:00:6F
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/87DWUfAtdvvLdMbrvROXNL8LAG8.roa
sbgp-ipAddrBlock: critical
IPv4:
210.130.224.0/24
Signature Algorithm: sha256WithRSAEncryption
65:bc:73:a1:e7:b4:f2:6e:b4:e6:4f:c5:65:f5:4e:1a:d8:f9:
7e:9b:6b:e7:b6:73:85:3d:7e:fd:6c:15:b3:dc:9a:ee:97:c9:
ea:8b:30:27:81:6c:99:87:7a:5e:8b:ab:b9:fa:1d:c5:fa:6d:
f8:c2:ed:2c:ba:bf:a4:bc:8f:08:6a:95:73:e3:3c:a0:31:7b:
f6:5b:02:ea:b8:2d:4a:ee:60:ac:ab:23:03:5d:b5:0a:3e:21:
d6:f0:69:a5:a0:ca:7a:a6:dd:0f:aa:a2:27:b5:ff:5e:ab:b1:
ce:fc:8e:be:af:11:26:5a:9e:b0:bc:6c:4d:9a:f6:81:2f:d0:
9e:ec:95:03:96:74:fd:b1:92:0b:23:5a:b1:2a:82:9f:e4:9e:
a7:06:42:cb:28:2b:c3:4b:e2:63:aa:74:74:52:93:ed:52:7c:
6d:a0:74:25:3b:f8:84:98:ed:ea:43:be:c5:41:7d:fb:e1:51:
71:af:a6:1f:57:f0:c9:4c:fe:cc:77:1d:86:d1:19:fe:89:30:
68:00:2d:be:1d:b0:9b:f8:a1:a0:31:53:b9:32:b1:9c:45:8a:
af:a2:be:ad:ef:fa:71:04:a8:ad:51:be:5f:99:eb:62:34:09:
aa:98:3e:45:75:99:7d:62:56:77:f6:bd:9d:c5:2f:f4:ae:79:
12:d4:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:05 2026 by rpki-client