
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/fBtNYB2_IzOOUwRuUaEsvAVaSJM.roa
File: fBtNYB2_IzOOUwRuUaEsvAVaSJM.roa (raw, json)
Hash identifier: x7UyrdIVm+iySSNjFHDWtCOFzYFZmg7a/KkYxWcgTSU=
Subject key identifier: 7C:1B:4D:60:1D:BF:23:33:8E:53:04:6E:51:A1:2C:BC:05:5A:48:93
Certificate issuer: /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial: 59
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/fBtNYB2_IzOOUwRuUaEsvAVaSJM.roa
Signing time: Tue 31 Mar 2026 08:23:58 +0000
ROA not before: Tue 31 Mar 2026 08:23:58 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18274
IP address blocks: 219.97.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Validity
Not Before: Mar 31 08:23:58 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7C1B4D601DBF23338E53046E51A12CBC055A4893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:4d:36:eb:90:1c:a9:4e:4e:e9:83:a8:8d:
ba:10:6b:fe:a7:8c:41:7d:ab:0c:ad:c2:03:2c:8e:
54:87:aa:62:18:c7:d1:cc:a8:ed:fe:98:f8:b9:26:
6a:5a:3f:78:61:4e:59:be:0d:34:00:d2:10:7a:d3:
b7:cd:d4:ff:c7:c5:6b:bf:19:29:23:f6:9f:ac:cc:
ab:7c:7e:44:d6:d7:f4:23:3f:96:93:f6:ce:b0:e5:
a1:6c:3e:21:bd:c4:49:81:4c:d8:9e:fa:30:f0:8e:
2b:13:a1:c0:94:67:8f:fc:1a:f7:4a:60:02:82:63:
43:81:be:a8:d9:5c:d1:55:95:81:95:3b:dc:ca:86:
78:12:72:86:27:90:08:f8:d0:fc:e0:cb:f6:0b:ff:
75:c5:e2:ab:c9:57:a0:89:8b:27:5b:c7:8e:2c:ed:
69:39:b4:06:36:02:fe:1d:7e:ef:78:64:1d:98:fc:
9e:d0:91:7a:41:6f:68:d4:9e:06:de:a8:1f:87:d9:
25:93:a6:d5:8e:80:8a:99:36:5a:79:09:50:8e:9d:
8e:cf:41:ea:e7:eb:d8:45:ff:d2:3e:74:4d:e0:ff:
bc:fe:65:c4:6b:d4:58:55:49:99:05:0d:fa:37:bc:
75:d7:2b:1f:a9:47:4f:b2:b2:4d:3c:ba:9d:bb:c7:
c0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1B:4D:60:1D:BF:23:33:8E:53:04:6E:51:A1:2C:BC:05:5A:48:93
X509v3 Authority Key Identifier:
keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/fBtNYB2_IzOOUwRuUaEsvAVaSJM.roa
sbgp-ipAddrBlock: critical
IPv4:
219.97.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:8b:75:b1:8c:f5:a5:f0:bd:b3:d8:3d:30:7d:03:85:51:45:
bc:48:6c:7b:80:ee:8f:02:bf:89:76:42:77:cb:22:30:05:a1:
2b:ec:a1:e4:e8:34:be:ed:f5:cd:94:3f:4e:6e:1d:53:03:9f:
d0:76:f2:c3:f6:9d:51:e4:08:cf:0b:0f:48:5f:c2:b2:59:c4:
76:5d:70:b8:99:24:60:ac:34:40:2a:64:b0:71:98:2f:64:30:
8a:4d:21:13:8d:3e:38:a9:c3:1b:3c:6e:19:41:09:74:7a:0b:
54:8a:5a:a6:88:d7:92:ee:8b:55:cf:03:6e:b5:1d:2b:61:80:
fc:03:d4:50:73:39:30:02:6f:56:f0:36:e2:10:da:76:0b:2d:
29:77:32:8c:53:59:f1:16:c3:0e:dd:6e:18:be:14:04:66:70:
37:fa:2b:65:3f:58:61:29:bc:fd:5b:bb:f1:35:db:51:2a:77:
96:b3:fe:2e:8b:ee:33:3b:7e:e6:a6:19:f0:6f:3b:31:ee:94:
53:73:11:61:38:b0:17:19:e9:e8:a6:77:b6:bd:28:01:30:5b:
b0:43:0e:97:0a:a6:b1:b7:c2:4f:d6:1e:49:6a:61:c5:0a:53:
cf:3d:06:b2:ce:1a:7a:70:31:8e:7f:76:5e:5c:29:fa:e5:9c:
2f:bf:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:52 2026 by rpki-client