
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/7qFiK45fXFdzOkI-Ca2kfHjvRCA.roa
File: 7qFiK45fXFdzOkI-Ca2kfHjvRCA.roa (raw, json)
Hash identifier: ChCxXvEe4ykPmfyLeGxMDIYLOwDlcZJqhaziEX/8KSg=
Subject key identifier: EE:A1:62:2B:8E:5F:5C:57:73:3A:42:3E:09:AD:A4:7C:78:EF:44:20
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04A8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7qFiK45fXFdzOkI-Ca2kfHjvRCA.roa
Signing time: Tue 31 Mar 2026 08:12:57 +0000
ROA not before: Tue 31 Mar 2026 08:12:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9617
IP address blocks: 61.46.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1192 (0x4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=EEA1622B8E5F5C57733A423E09ADA47C78EF4420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:9f:e3:8e:07:9a:48:bb:b9:0a:ce:d8:72:
d8:ed:ca:ba:83:10:84:f9:d5:7d:85:20:99:38:55:
bf:57:d6:ad:a2:15:84:d7:6c:1d:75:92:d8:9d:40:
53:c6:2e:b9:21:0c:00:68:4a:b9:ec:75:06:f1:c8:
a1:c3:dc:7b:0d:5e:02:c5:fc:1c:a2:05:84:86:a8:
b5:05:47:98:00:16:84:be:cd:6f:43:c5:68:16:3b:
1d:f1:c9:3a:32:6d:36:60:cb:3e:1a:14:6e:e5:79:
61:d7:1d:67:5c:b0:a0:ee:08:ab:0b:28:f2:5e:9a:
e2:61:db:40:3b:1e:d4:90:c0:af:8f:69:3b:fa:68:
dc:24:4e:06:36:f4:00:3c:cf:6e:35:28:8e:a6:9b:
90:ff:58:3f:f5:6d:e0:36:41:0a:bc:a0:f3:44:f7:
7c:f9:cf:9e:42:11:9b:fb:46:6f:9b:3d:a3:51:52:
1f:68:80:30:ac:b9:d1:6e:4a:5a:8f:8c:54:bc:7c:
e7:c2:7c:30:c1:2a:e7:cd:37:51:e9:9b:3d:eb:6f:
39:75:55:6a:c4:bc:aa:49:32:ea:80:14:37:b9:93:
0f:13:f9:7a:9c:84:ae:76:ad:6d:cc:84:40:50:fc:
8d:a7:89:51:44:34:73:58:91:fc:f1:e7:e7:67:6f:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:62:2B:8E:5F:5C:57:73:3A:42:3E:09:AD:A4:7C:78:EF:44:20
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/7qFiK45fXFdzOkI-Ca2kfHjvRCA.roa
sbgp-ipAddrBlock: critical
IPv4:
61.46.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:e2:2f:89:1d:74:27:a9:96:76:01:b0:f7:16:fc:e2:12:56:
e4:08:93:73:7e:d8:14:8e:c4:31:25:65:07:0f:ca:a9:f6:3e:
2f:6a:fc:ac:81:1a:20:69:7f:6b:c9:0f:e3:33:09:b7:72:a6:
43:90:a4:b0:08:8f:52:cc:e7:fa:ce:09:91:0d:d8:f3:e6:ca:
60:d5:d8:07:f7:62:0b:e6:e2:75:c7:a3:c0:50:eb:7c:83:e2:
4a:14:7c:f7:64:c0:ca:d5:76:70:e2:a0:f2:76:96:ed:23:fc:
8a:ff:a8:69:80:dd:f9:88:7c:0c:64:2d:33:f3:46:0b:33:e3:
3b:8a:9b:ce:3b:6f:25:56:89:b3:36:58:99:c2:33:99:0a:57:
80:6b:e4:fb:5b:43:f1:d8:01:89:87:a3:b5:fe:ce:8f:89:30:
b1:3a:fc:15:a6:de:3e:80:ea:73:28:8a:cd:c0:8d:12:c0:d4:
97:c1:b1:8e:b9:54:3e:79:96:b0:f2:38:2b:88:aa:11:eb:d1:
d5:a9:1c:ea:5b:eb:71:70:41:7b:21:f5:a1:9b:b7:57:f2:c6:
43:3c:75:16:ac:60:7d:7b:2f:f5:f5:12:16:3e:e3:43:eb:7d:
a4:50:3e:07:26:66:b1:82:35:de:9a:86:6c:1a:56:11:4f:8b:
17:4d:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:48 2026 by rpki-client