
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/3tUF-sgizES6K9MMFcX41Cdr-Z0.roa
File: 3tUF-sgizES6K9MMFcX41Cdr-Z0.roa (raw, json)
Hash identifier: ziNEBKKi2gpfzrcp466FczZYUiuscB5ER/cjq7ua5i0=
Subject key identifier: DE:D5:05:FA:C8:22:CC:44:BA:2B:D3:0C:15:C5:F8:D4:27:6B:F9:9D
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0497
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3tUF-sgizES6K9MMFcX41Cdr-Z0.roa
Signing time: Tue 31 Mar 2026 08:12:50 +0000
ROA not before: Tue 31 Mar 2026 08:12:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 219.113.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DED505FAC822CC44BA2BD30C15C5F8D4276BF99D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:5a:43:ea:82:83:bc:60:9f:fa:7c:78:90:
f9:0f:d8:04:ad:c6:0c:84:a5:ad:80:05:16:f7:3f:
c1:8b:4f:db:b0:d3:60:80:0e:10:69:41:72:b0:ff:
9a:4a:40:10:10:6f:b9:c2:21:3a:51:d7:fb:3d:97:
01:c4:ee:6e:db:f7:15:59:76:c3:2c:85:4e:6e:2d:
15:06:e2:cc:ba:40:ab:37:81:eb:06:b8:0f:94:d4:
2f:01:71:27:6a:0c:0c:fe:79:74:4a:4b:40:3e:f2:
95:c6:e7:0b:0f:3d:1f:b6:24:f4:1a:6f:78:ef:0d:
c5:d0:f9:e0:7a:b1:e1:fa:49:6f:89:1c:17:3e:3d:
ce:31:2c:10:40:85:29:b2:cf:b0:a6:9d:30:41:7d:
56:0d:2c:c0:ae:ba:c9:31:10:da:ba:66:11:92:83:
48:b0:3d:01:29:b3:65:7b:b7:d8:ef:8f:a7:aa:7e:
87:cc:0b:7e:07:91:4a:39:ab:80:9c:e4:5b:02:2e:
75:25:f8:84:71:42:03:da:10:4d:93:2c:13:2d:03:
37:02:04:e5:6a:49:55:8a:67:82:b1:a8:af:f7:2e:
e3:7a:9b:9c:ce:dd:fa:3e:64:5c:ae:d6:bf:12:4a:
63:16:74:9c:09:56:cb:a7:b7:1b:4d:d0:4b:a2:6e:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:05:FA:C8:22:CC:44:BA:2B:D3:0C:15:C5:F8:D4:27:6B:F9:9D
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/3tUF-sgizES6K9MMFcX41Cdr-Z0.roa
sbgp-ipAddrBlock: critical
IPv4:
219.113.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:b8:e4:ca:3d:6d:6a:a3:68:3b:4d:ea:26:02:bc:f2:68:21:
4d:d5:b8:24:c6:ac:16:9c:1a:79:4f:a9:da:61:f1:38:15:8c:
84:d2:72:1a:bc:ad:81:5f:d1:b8:43:78:02:38:7b:d4:6a:7f:
b9:59:17:ca:32:e2:66:a6:4e:21:49:fd:3c:98:58:72:3b:01:
e7:55:4e:1e:a4:8f:70:ab:0b:67:cd:39:ff:d1:f0:66:63:59:
52:29:db:7d:83:28:4a:5d:9d:06:e5:b7:af:98:ba:2a:83:c9:
09:5f:71:a1:ad:bc:6e:19:00:49:f1:bd:12:3b:1a:38:b6:d0:
56:3f:dd:59:01:27:d8:45:3e:58:a1:9f:e9:4c:4d:41:50:e9:
53:0a:9e:26:b3:80:b4:ac:a6:aa:08:45:53:27:8e:f6:30:c8:
26:57:0d:3c:00:28:7a:33:cb:c2:92:3a:20:ef:7f:c6:6c:f2:
ff:96:d7:9a:0a:89:a2:44:51:71:56:b0:6a:4d:d8:10:09:a6:
b5:ae:46:86:04:4b:91:ca:57:1d:8c:5e:5d:ff:4c:b7:6a:27:
ba:d4:e6:66:c7:92:63:e8:19:bf:26:8c:b3:38:49:82:a6:6d:
63:04:5d:b7:fc:54:17:c0:d0:65:b7:c1:46:4b:ff:22:d6:44:
86:dc:a2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:44 2026 by rpki-client