
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/gy-Wf1YbwvstWA8Qs7YZg0E-i7Y.roa
File: gy-Wf1YbwvstWA8Qs7YZg0E-i7Y.roa (raw, json)
Hash identifier: aShxywQWerQOavWLiPw737ivhKkaYrOz9iva5QnkhWE=
Subject key identifier: 83:2F:96:7F:56:1B:C2:FB:2D:58:0F:10:B3:B6:19:83:41:3E:8B:B6
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0246
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gy-Wf1YbwvstWA8Qs7YZg0E-i7Y.roa
Signing time: Tue 31 Mar 2026 07:36:04 +0000
ROA not before: Tue 31 Mar 2026 07:36:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 133.238.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:36:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=832F967F561BC2FB2D580F10B3B61983413E8BB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:23:ab:d0:d0:b5:1b:d8:39:d5:be:bf:96:
d7:61:92:e0:39:f0:c6:98:93:da:79:af:39:86:f4:
3b:28:dc:1c:dc:94:0a:69:84:14:7d:5d:29:db:24:
87:53:4f:85:21:63:eb:5b:aa:88:59:d6:c0:6f:15:
bd:c1:b8:a3:fb:df:56:40:8d:ba:64:75:5b:58:02:
0c:cd:3b:df:0d:25:18:f2:b1:ee:a8:63:35:80:3e:
05:7b:36:b7:e1:d9:0e:d0:59:6d:e5:56:4e:6a:c9:
1d:62:89:85:ef:cd:cb:e2:04:5e:39:fa:40:d8:ae:
fd:72:4a:f9:db:fc:cf:15:af:a9:5b:c2:e0:91:75:
a1:2d:84:81:8c:f5:44:d1:bd:24:d4:2a:16:4a:69:
de:a1:1f:81:e5:df:76:59:a1:29:9b:ee:cf:e4:4a:
68:f0:1b:dc:d2:94:ed:7c:db:77:14:85:8a:56:44:
02:24:e5:8d:52:c9:3e:33:34:e4:38:d9:c4:5d:49:
fe:ad:0e:78:70:20:a4:e9:97:76:c2:5b:ae:44:97:
03:e2:d9:bb:fb:fb:47:24:25:ae:39:44:6d:16:24:
f8:50:9f:69:ac:4b:0a:64:a4:8a:8b:31:14:8d:7a:
44:dd:2a:2a:08:c9:98:da:a8:f8:b0:60:71:f9:9c:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2F:96:7F:56:1B:C2:FB:2D:58:0F:10:B3:B6:19:83:41:3E:8B:B6
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/gy-Wf1YbwvstWA8Qs7YZg0E-i7Y.roa
sbgp-ipAddrBlock: critical
IPv4:
133.238.8.0/21
Signature Algorithm: sha256WithRSAEncryption
53:c7:d5:15:a3:25:19:5e:74:f4:8e:5d:53:aa:65:1e:2e:06:
e8:83:29:00:d5:f4:10:61:d5:aa:bc:33:6d:fb:08:7d:32:b8:
a9:65:0b:a1:2e:a6:50:c0:76:70:81:72:c2:a8:88:90:26:49:
e5:21:11:d8:31:1c:2d:5e:d7:82:55:a5:57:8b:9e:e8:ac:9b:
38:f8:41:47:05:b4:03:9f:f8:4a:f9:52:d4:05:5a:0e:6b:38:
40:cb:0f:53:f8:1a:d3:91:6e:77:0f:8b:f3:5a:2e:8f:fa:2a:
b4:f6:e8:a3:a3:0c:b3:51:5f:e5:a8:a5:f6:de:51:51:3f:d6:
6c:7e:1d:28:23:fa:9d:1f:70:85:5e:64:71:93:e3:66:64:78:
5a:6b:02:e7:4d:14:cb:4e:08:89:2d:36:d1:23:7c:de:ba:c6:
e2:5f:e6:e4:ee:05:eb:00:37:01:b6:0e:c7:be:10:88:9e:e2:
21:86:75:cc:40:2a:09:0f:4a:61:1e:39:c5:f0:aa:8c:1d:95:
69:75:a8:47:fe:e6:37:2c:17:27:d2:17:10:e4:20:e4:d4:f8:
ae:b8:c6:e9:3c:af:a4:b8:4c:24:0b:e1:43:a2:85:4f:fa:f0:
7f:f7:59:cd:d2:f3:95:34:ef:41:d1:7f:52:68:99:36:6e:7e:
b3:c1:ad:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:12 2026 by rpki-client