
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SpsQcFB2mOO-OGgccEyKQ1jc5o.roa
File: 1SpsQcFB2mOO-OGgccEyKQ1jc5o.roa (raw, json)
Hash identifier: kBrEBw36e2U4pYgWfkltZqdycUHf4HGRQKfRcURiK4w=
Subject key identifier: D5:2A:6C:41:C1:41:DA:63:8E:F8:E1:A0:71:C1:32:29:0D:63:73:9A
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0408
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SpsQcFB2mOO-OGgccEyKQ1jc5o.roa
Signing time: Tue 31 Mar 2026 08:11:39 +0000
ROA not before: Tue 31 Mar 2026 08:11:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18134
IP address blocks: 111.125.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032 (0x408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D52A6C41C141DA638EF8E1A071C132290D63739A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:e7:a8:bc:b8:33:67:ff:cd:16:ba:87:85:
b5:56:08:b7:ac:48:e1:50:1c:b1:40:00:06:58:be:
df:b2:26:13:6d:77:7a:4c:af:0b:53:0f:2b:6f:f6:
97:51:7a:6c:d8:42:05:58:a7:ba:a6:cc:09:59:95:
4b:82:6f:93:d0:38:23:9b:71:f0:09:8a:0c:df:68:
ff:90:f9:f7:b8:57:29:29:ba:66:1a:c5:eb:c1:e5:
0c:95:09:f2:ee:05:5c:7e:f7:14:70:ff:00:61:ee:
75:47:30:25:ca:1e:29:6c:ce:37:2b:07:1c:cd:a9:
d0:a6:fe:96:c6:56:da:a7:bd:1c:4f:d2:d6:07:83:
2d:c4:38:33:fd:a4:40:6e:1c:21:ae:e2:93:8f:5f:
f1:fe:91:b4:f8:b6:4c:9c:cc:5f:da:ba:46:b9:01:
14:90:7d:4b:9a:f1:ff:ca:68:dd:c0:56:40:b0:8c:
5c:29:51:0a:54:e5:9d:06:ae:8b:56:14:c0:21:78:
06:01:65:1f:c0:47:f1:07:6a:b8:5b:11:7f:d1:03:
04:e5:6d:35:c1:bf:b3:24:b6:85:9b:cb:1d:f1:fe:
5a:86:b3:c7:84:11:0d:bc:a8:6f:12:5b:2c:6e:c8:
54:42:79:8f:a2:56:e9:94:b9:16:4d:a9:6b:ec:3b:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:6C:41:C1:41:DA:63:8E:F8:E1:A0:71:C1:32:29:0D:63:73:9A
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/1SpsQcFB2mOO-OGgccEyKQ1jc5o.roa
sbgp-ipAddrBlock: critical
IPv4:
111.125.144.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:ef:54:9f:46:57:09:b7:26:3c:d2:47:b2:92:99:05:27:ba:
4d:69:9a:0f:6e:c6:1c:a3:36:9c:1d:9d:d1:fb:22:bb:53:19:
b1:a4:02:ee:3f:d2:22:c6:1e:c6:8e:08:c8:3c:50:26:90:86:
7a:f3:d8:26:64:24:b6:c4:27:d1:45:fd:95:0a:fd:bf:dd:7f:
31:a0:32:d9:2d:e1:d0:83:12:73:2c:c1:8e:8e:6d:2f:f8:cb:
f2:98:3e:2c:fd:c4:49:81:7c:47:fe:dc:1b:39:8f:cf:f2:64:
7a:ff:e9:4d:20:b8:bb:7d:b8:63:6c:3c:1a:54:4e:6d:65:d5:
96:00:81:0c:db:54:6b:0a:2b:64:52:be:82:3b:e2:73:d5:3e:
72:36:68:bf:ac:dc:53:62:3d:da:ef:a6:a5:6c:8a:99:7c:e6:
9b:cb:14:46:2a:85:03:ec:34:1f:31:e4:83:99:6b:eb:13:a3:
36:3e:52:e1:68:81:2a:13:80:92:7e:b1:69:8d:0c:00:35:b6:
4d:56:7c:bf:8b:17:a5:cd:d0:31:38:ee:21:92:94:1d:82:b3:
d0:05:0e:e8:b7:00:01:62:71:79:5b:70:41:92:ae:be:c3:88:
08:66:40:5a:4a:9c:a8:8c:3a:d5:9d:e5:cf:9e:c3:e4:2b:57:
3d:e4:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:46 2026 by rpki-client