
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/KyoZNClKNQQ2kGEwF0mYbX5zXDE.roa
File: KyoZNClKNQQ2kGEwF0mYbX5zXDE.roa (raw, json)
Hash identifier: WQybv+1YJpAfkm2u67ASmWGSDMXEHc289bKZ/V7EST8=
Subject key identifier: 2B:2A:19:34:29:4A:35:04:36:90:61:30:17:49:98:6D:7E:73:5C:31
Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial: AA
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/KyoZNClKNQQ2kGEwF0mYbX5zXDE.roa
Signing time: Tue 31 Mar 2026 07:37:36 +0000
ROA not before: Tue 31 Mar 2026 07:37:36 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17675
IP address blocks: 61.211.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 03:17:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Validity
Not Before: Mar 31 07:37:36 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2B2A1934294A3504369061301749986D7E735C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ab:5c:74:45:38:62:35:82:3a:db:dd:75:f5:
b3:69:cd:0c:3d:4a:03:69:60:50:6f:3a:07:87:1e:
83:3f:ee:b5:89:e5:02:f4:68:29:a2:9e:34:1c:cc:
10:d9:49:12:55:49:cd:e7:dd:07:e2:9c:f0:c0:95:
db:c6:65:8d:b6:af:08:87:5f:56:7b:59:3d:b2:47:
fe:f2:7a:f6:68:0b:0d:52:61:fa:83:66:be:fa:c4:
39:c7:01:36:bc:53:0f:2a:d8:88:97:f3:39:be:9d:
e5:0f:3a:6f:bc:e2:30:90:ed:2f:34:e1:0f:18:b0:
e8:25:26:36:54:0a:7b:8e:57:c3:31:ee:2a:c8:20:
d3:94:13:74:74:2e:c9:fc:70:0d:1b:cd:03:28:2e:
d9:7f:ca:ab:bc:7c:e3:26:2a:1c:cd:e6:48:07:a2:
3a:b6:a6:4f:75:e6:89:e6:a6:59:34:f1:b4:37:10:
5c:e3:4f:24:dd:fc:7c:7f:04:9d:7b:21:43:24:02:
9f:c8:fc:21:41:43:23:68:6a:1f:22:7a:c7:89:4b:
fd:ac:7d:f9:63:2e:c2:a1:61:05:b2:8b:35:f9:06:
c0:22:85:ec:15:08:43:d2:04:9d:a5:73:2c:5d:4b:
f9:e6:34:da:44:61:73:20:91:67:f1:dd:11:27:ab:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2A:19:34:29:4A:35:04:36:90:61:30:17:49:98:6D:7E:73:5C:31
X509v3 Authority Key Identifier:
keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/KyoZNClKNQQ2kGEwF0mYbX5zXDE.roa
sbgp-ipAddrBlock: critical
IPv4:
61.211.165.0/24
Signature Algorithm: sha256WithRSAEncryption
13:53:4d:7f:df:25:a6:06:6c:64:69:2e:7b:74:2e:64:a8:de:
61:da:41:64:ed:32:ed:22:61:01:98:b1:9d:58:27:60:61:3e:
49:28:ef:11:69:16:8c:fb:cf:7c:ff:e4:b0:09:ce:cb:58:0a:
c3:f7:6c:8f:af:5e:e4:fe:c9:a8:41:67:ea:6d:a9:e4:aa:d6:
48:d1:db:ae:13:37:22:ea:ce:53:b8:e0:c1:ae:58:7d:c3:29:
51:59:74:91:70:02:53:43:7c:a0:12:10:d9:8f:b6:8d:f7:ed:
d1:e7:6c:05:8c:77:52:ef:b6:f6:b3:b6:dd:d7:34:d8:30:d0:
58:12:7c:e1:47:dc:3b:b4:df:8e:21:95:24:c1:0b:ae:d4:fe:
e5:f1:06:13:c0:03:3a:50:e0:27:c8:01:8f:75:66:20:0d:71:
4d:f1:90:ab:63:e0:a6:b4:6d:9f:28:b4:5c:ab:c5:c0:9e:f4:
6c:5b:a1:5e:cf:c3:35:87:d7:7c:d6:57:fe:34:37:1d:0c:0a:
27:da:95:9d:cd:9b:77:4c:a7:61:dd:48:14:bc:f3:6e:7f:21:
e2:35:1e:98:a6:01:fa:77:55:9b:77:e1:8a:f8:fa:ce:b5:67:
ce:44:c1:42:f9:a8:3a:35:db:09:0f:21:3b:3a:a0:92:e4:de:
6e:26:89:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 05:10:56 2026 by rpki-client