
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/hJ75YrL5OaMKJOY_NBAso7Mrvfw.roa
File: hJ75YrL5OaMKJOY_NBAso7Mrvfw.roa (raw, json)
Hash identifier: X1jo0PMdZcWpG8RIM9JKbAzaaLgNv06f+Qb16z9qgIA=
Subject key identifier: 84:9E:F9:62:B2:F9:39:A3:0A:24:E6:3F:34:10:2C:A3:B3:2B:BD:FC
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 020A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hJ75YrL5OaMKJOY_NBAso7Mrvfw.roa
Signing time: Tue 31 Mar 2026 07:35:36 +0000
ROA not before: Tue 31 Mar 2026 07:35:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 219.119.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Mar 31 07:35:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=849EF962B2F939A30A24E63F34102CA3B32BBDFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:3c:cb:c5:ff:65:98:45:7a:fe:27:1a:c9:
55:fa:0d:4c:31:99:35:73:de:76:5d:a1:6c:b6:51:
e1:08:d7:aa:f0:ee:42:fa:d5:2e:54:29:62:1c:91:
3e:cf:b9:25:09:f3:b6:c7:63:94:83:b7:06:d4:59:
f9:3c:bc:5b:2e:fa:7a:5a:8c:17:6d:b5:ea:f4:76:
5e:de:a3:1c:c0:db:58:18:aa:ec:f9:eb:cc:76:3b:
71:11:8c:d5:aa:d4:c4:1f:c4:cb:fa:b8:24:72:16:
2c:10:4f:d6:5a:76:c1:1c:dd:3a:ae:f1:fe:7d:6d:
a6:9f:9e:95:85:65:38:2f:46:91:45:50:98:ed:e2:
6c:4e:60:b6:b2:d4:78:c1:4a:cf:a1:f8:93:63:7e:
1d:22:5a:6a:41:83:62:61:6f:b5:2c:4d:62:09:24:
7c:fc:fc:55:e9:fc:4e:ab:80:f2:f7:e4:da:8a:61:
17:80:46:b5:1f:14:d1:11:6c:8b:27:17:84:a2:17:
e4:2a:16:bd:48:4d:2f:74:45:98:93:d9:fc:8d:fd:
84:aa:45:59:66:f2:b4:5a:9e:a8:e5:ad:cb:d8:03:
64:a0:ca:8f:d9:00:13:d3:46:3a:33:23:3a:6f:2f:
c7:1b:9d:f7:0d:0b:77:e8:f8:e8:2a:9a:32:b6:0c:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:F9:62:B2:F9:39:A3:0A:24:E6:3F:34:10:2C:A3:B3:2B:BD:FC
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hJ75YrL5OaMKJOY_NBAso7Mrvfw.roa
sbgp-ipAddrBlock: critical
IPv4:
219.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:86:57:2f:56:4a:fc:d8:5d:cd:59:56:e2:d8:61:eb:90:c3:
e1:81:36:80:6c:2a:77:cd:e2:53:99:d0:55:95:de:f6:5a:31:
08:d6:c0:52:78:23:68:74:72:d3:94:a9:13:79:fb:8e:7d:1d:
33:74:3e:1e:3a:3b:c0:c1:ee:1b:56:d3:ea:3b:d3:39:79:6b:
54:cd:0f:e4:58:d7:82:c2:3e:ae:cc:ea:f0:d6:b8:0f:02:63:
2e:fa:d0:2b:3f:22:2f:84:17:13:ce:a7:14:6f:2e:b3:ea:64:
e7:1a:f2:dc:e5:18:23:b1:fd:14:13:75:db:10:4d:0d:3c:34:
4a:58:96:a7:47:9d:f6:d5:5c:47:e4:a8:6a:27:17:6e:05:f2:
38:41:43:a4:82:d8:49:bd:cc:81:a6:63:9d:ce:12:f0:a3:8b:
4b:5b:e0:da:31:00:dd:00:56:96:26:43:2d:87:b7:aa:23:4a:
89:a6:9a:3c:c7:6a:e9:a0:8c:10:2f:98:ef:b0:32:df:ba:b4:
22:51:0a:e4:2a:02:95:49:a4:5d:92:95:60:74:f2:d6:cc:c3:
7d:30:69:02:21:fb:f7:1e:cf:b3:ef:8d:d3:4d:9b:b5:34:6c:
0b:dd:4e:01:f2:95:5d:0f:07:3c:26:41:cd:92:4c:13:bb:4f:
d0:78:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:58 2026 by rpki-client