
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/9aD1jW35zwFM2bJPp0FceP1M_FY.roa
File: 9aD1jW35zwFM2bJPp0FceP1M_FY.roa (raw, json)
Hash identifier: BMh5tgHtc22cbLH4qg/YN7/PfXLkl6lF96M0aqXBRR0=
Subject key identifier: F5:A0:F5:8D:6D:F9:CF:01:4C:D9:B2:4F:A7:41:5C:78:FD:4C:FC:56
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0219
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/9aD1jW35zwFM2bJPp0FceP1M_FY.roa
Signing time: Tue 31 Mar 2026 07:35:42 +0000
ROA not before: Tue 31 Mar 2026 07:35:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 220.100.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F5A0F58D6DF9CF014CD9B24FA7415C78FD4CFC56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:cd:7f:ec:7e:87:24:ce:6c:55:7f:a5:bf:
2b:7e:7a:81:cc:54:e2:b7:22:ca:00:87:f8:1f:fa:
4f:0d:1f:31:99:87:28:2e:41:f7:35:c9:6e:a3:a8:
7b:d2:a3:f2:3b:5e:fc:a4:8c:81:9c:27:2f:b2:dd:
4d:91:ab:6f:85:eb:f8:24:12:95:53:d6:f4:8d:6a:
8a:7d:7a:39:d2:b9:e8:6e:85:d7:e9:53:b9:8c:a7:
60:d9:44:52:7e:bf:50:77:ca:77:38:72:92:ec:f2:
70:51:0b:49:0c:36:7a:5f:1a:5c:27:73:1f:02:e1:
f4:f9:8d:9f:09:ac:16:89:79:91:a1:c1:15:5d:95:
3b:cd:d7:60:6e:06:af:98:8f:d6:e0:48:eb:0a:cf:
c7:ab:f2:9e:6d:99:53:51:fc:0e:ba:6c:3b:85:e5:
64:55:43:0e:7c:46:41:70:e2:c7:1b:22:2f:1d:14:
58:a7:2c:4e:07:00:93:b1:f3:d4:4c:d5:b2:91:07:
35:9a:0a:b5:cc:8b:49:e2:99:68:0a:c1:2f:ce:93:
cc:89:fa:2c:34:65:bb:93:9c:74:ca:7b:54:c6:e1:
d5:b9:58:99:68:05:ed:60:a2:45:14:f7:55:45:4d:
d6:a9:3f:f0:9b:fc:44:79:2f:b2:ae:9d:3c:35:c4:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:F5:8D:6D:F9:CF:01:4C:D9:B2:4F:A7:41:5C:78:FD:4C:FC:56
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/9aD1jW35zwFM2bJPp0FceP1M_FY.roa
sbgp-ipAddrBlock: critical
IPv4:
220.100.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a7:2a:4c:70:56:0c:be:d8:ca:4e:b4:1a:57:1b:4e:55:ff:10:
e7:6b:d8:23:af:e4:d5:4d:ed:11:bd:8a:3b:dd:72:be:e6:fe:
7c:14:94:64:4c:0d:b5:0c:c9:02:8f:ef:15:33:9a:7c:01:aa:
33:b2:7d:1c:4c:76:07:ce:2e:ef:d0:c1:65:1a:8b:84:bf:37:
17:e7:e2:2d:85:1c:0a:70:fb:e6:01:92:6c:07:c6:d1:74:2e:
af:7f:48:75:0e:1e:1f:c4:b6:8c:51:b0:26:32:f5:f6:2e:bc:
a9:90:b4:58:ea:48:4b:3a:61:3e:4b:df:58:59:ae:1e:3f:e2:
65:f1:4c:36:0f:e6:97:8f:87:14:df:29:82:08:51:b9:d7:09:
03:6d:c6:3e:4e:50:17:80:5e:16:ac:fd:85:07:a3:8a:6a:99:
c6:e9:3a:60:7a:67:c7:cf:46:56:6c:fe:fe:da:34:99:ed:f3:
d3:08:fb:d3:17:cb:fa:12:40:22:0c:bf:5e:a9:fe:40:1e:f1:
49:96:d6:c6:5f:24:87:50:6e:24:4c:2c:5b:51:ac:47:49:17:
09:21:95:cf:81:17:d7:a2:8a:13:fa:e2:1a:8e:19:c1:d4:96:
23:bc:7e:c7:e7:ea:e2:08:21:f4:2b:ea:09:c5:9a:ce:a6:89:
c3:b9:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:05 2026 by rpki-client