
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9ZdRYxFq42RwHVpXrha3vShBM8I.roa
File: 9ZdRYxFq42RwHVpXrha3vShBM8I.roa (raw, json)
Hash identifier: BJOGrow593ffHArpBRMZ0+EZVMuPgMAs7ylkJ7lo1Po=
Subject key identifier: F5:97:51:63:11:6A:E3:64:70:1D:5A:57:AE:16:B7:BD:28:41:33:C2
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04D3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9ZdRYxFq42RwHVpXrha3vShBM8I.roa
Signing time: Tue 31 Mar 2026 08:13:19 +0000
ROA not before: Tue 31 Mar 2026 08:13:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 221.132.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:13:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F5975163116AE364701D5A57AE16B7BD284133C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:f0:28:8f:c6:58:c6:21:4e:18:c9:00:da:
51:6d:c9:3e:cf:17:a4:74:2e:79:ff:2b:02:46:48:
68:d0:6c:a7:bb:5e:a1:fd:f9:5f:c7:e9:be:dd:5d:
f5:ca:69:9f:3d:70:33:45:63:1e:75:58:a6:7b:df:
e9:b9:69:56:7e:4b:fa:69:24:18:7d:f0:cc:26:db:
06:c2:17:12:1d:34:05:ca:da:00:90:d9:99:09:93:
9e:a6:0a:03:ef:4e:41:30:fa:82:9b:5d:ea:f5:ef:
00:cc:f6:67:56:9e:6f:a4:1b:b4:12:9e:d4:8d:bd:
d3:0f:f5:da:1e:4c:c8:ab:9d:34:d3:da:af:db:ae:
86:2b:4e:8b:64:19:56:ef:8b:9e:44:0a:86:9b:05:
22:cd:58:a2:dd:10:0b:e7:94:a8:6a:ec:1a:22:1f:
17:64:c9:91:b4:b7:6b:a2:50:05:ca:8f:df:c2:62:
0a:9f:8f:ff:5f:ef:67:45:9b:68:d9:29:0c:d3:84:
eb:95:c9:a8:79:e2:03:9e:70:c7:74:3b:0b:a7:aa:
58:5a:32:73:b4:0b:2c:c0:bf:d4:37:93:8b:ae:36:
3b:c0:59:e2:7c:5c:3b:fd:3d:d8:7b:b9:26:ca:50:
1c:cf:53:c2:12:37:33:6f:8b:23:06:71:bc:c0:85:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:97:51:63:11:6A:E3:64:70:1D:5A:57:AE:16:B7:BD:28:41:33:C2
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9ZdRYxFq42RwHVpXrha3vShBM8I.roa
sbgp-ipAddrBlock: critical
IPv4:
221.132.128.0/18
Signature Algorithm: sha256WithRSAEncryption
ed:4f:dc:c6:ef:90:f8:f9:e3:cf:6f:fa:2e:7f:b0:be:24:9d:
7a:26:81:59:3e:50:42:0e:a4:56:fb:3a:e0:14:38:4e:6b:54:
16:89:af:e2:4f:a6:e8:a2:f9:d7:11:a7:24:0e:d3:28:ea:44:
77:4b:c3:a8:e3:36:fa:0d:f5:33:ae:8f:88:81:90:bc:91:e2:
98:ba:c5:5a:9d:e3:21:9e:27:66:94:09:f0:e1:5b:c7:dd:48:
55:cc:14:78:9b:f7:3d:14:e3:d6:0f:a7:e7:ea:c1:71:ce:b8:
85:ff:bb:33:86:cc:ad:20:89:69:89:66:b4:64:90:43:3c:2f:
da:ba:75:49:72:9b:43:a3:e2:35:ee:e6:46:8d:a3:22:30:08:
04:6f:11:aa:17:12:b9:9b:7f:7e:6c:80:90:95:06:b5:9a:ee:
d2:e0:ab:a8:c3:a8:d7:76:a7:ed:e4:c2:cd:ef:83:2b:f4:bd:
c3:3c:fb:7b:d2:06:4b:0d:fb:0c:e9:92:6c:2a:2e:0f:f5:95:
5a:f3:96:7a:02:6a:85:7b:07:1b:5e:27:ab:79:29:08:fb:2a:
38:be:be:df:60:c8:b9:e9:d9:43:99:91:61:18:5e:35:3b:c5:
a3:09:f7:b4:92:ce:ba:8c:07:b0:f9:e3:68:ed:69:79:ce:fd:
b1:d9:4e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:04 2026 by rpki-client