
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9jyfbkh-HMNzN-ZNA-CsD46fYC4.roa
File: 9jyfbkh-HMNzN-ZNA-CsD46fYC4.roa (raw, json)
Hash identifier: zOIcgr9irXc5H2HNYT4SHZ1ATfVmwlsaLLyGHe3xzPg=
Subject key identifier: F6:3C:9F:6E:48:7E:1C:C3:73:37:E6:4D:03:E0:AC:0F:8E:9F:60:2E
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04A1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9jyfbkh-HMNzN-ZNA-CsD46fYC4.roa
Signing time: Tue 31 Mar 2026 08:12:54 +0000
ROA not before: Tue 31 Mar 2026 08:12:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 223.165.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1185 (0x4a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F63C9F6E487E1CC37337E64D03E0AC0F8E9F602E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a4:3a:ea:a8:54:65:b9:cb:67:17:36:de:0a:
73:00:a1:f9:ec:e6:5f:d3:8b:07:e8:61:3c:b6:30:
e1:b0:81:65:8c:56:81:66:ab:c0:49:91:2d:b3:87:
9f:51:42:13:00:df:02:67:1f:8d:33:42:1f:e2:a2:
d3:16:68:24:d1:a2:6f:d9:08:5a:96:2f:dc:c6:fd:
e1:92:82:1e:fd:53:cf:01:30:86:f9:e7:b7:9c:73:
42:cf:69:cd:66:61:f2:e5:46:ea:83:6f:3c:28:6c:
43:1a:ba:01:ff:82:fb:4e:06:08:ba:60:2c:cf:70:
07:9f:91:29:3b:5d:b2:2a:65:3d:f8:9d:b8:93:f5:
4e:fa:a7:80:90:8a:48:b1:51:ea:ad:d3:59:9a:47:
9b:56:5a:6c:5a:3b:17:2f:58:16:12:df:6f:df:04:
7c:d2:7e:a4:0b:23:21:f4:40:99:ac:57:8f:94:fe:
19:f9:74:b7:63:79:2d:38:02:5d:f4:22:c2:0a:27:
5f:17:d7:30:7d:91:03:cc:95:a3:f8:fd:2c:fc:a3:
d5:98:21:18:67:a3:20:5e:84:4a:dc:dd:d4:e9:4a:
39:c1:90:35:96:d1:2b:0f:e9:3d:d6:77:f3:55:2d:
92:00:27:ac:1d:ba:cf:c1:a0:e2:2f:0e:87:c2:bd:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:9F:6E:48:7E:1C:C3:73:37:E6:4D:03:E0:AC:0F:8E:9F:60:2E
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9jyfbkh-HMNzN-ZNA-CsD46fYC4.roa
sbgp-ipAddrBlock: critical
IPv4:
223.165.32.0/19
Signature Algorithm: sha256WithRSAEncryption
76:42:33:9b:60:6f:fe:29:b1:65:15:fa:37:0b:f8:e5:cb:08:
28:7e:37:b8:90:a4:74:1e:91:15:88:7e:f8:ea:60:5d:81:50:
1d:cf:06:30:63:9c:38:67:18:2d:fe:b8:ca:cd:5b:db:1a:f0:
2b:a3:90:bb:c3:c6:fb:3e:6d:43:d3:80:5a:11:6d:34:d9:d0:
b1:ba:16:a0:38:87:76:ba:67:35:b9:2f:26:39:eb:f4:f6:fc:
f4:03:4a:fd:71:64:3b:89:25:60:e9:ec:59:ff:df:70:ba:eb:
a4:af:0e:9e:7f:39:95:54:f1:50:1c:ff:e0:8e:a3:f9:59:f6:
1d:ab:16:52:2a:da:75:f0:59:ba:ea:b9:a7:8b:ec:3e:75:2e:
f7:99:97:15:75:fd:ea:4d:01:c7:16:77:62:e7:5c:f0:23:11:
a7:25:07:4f:97:26:28:3e:12:45:8b:c6:99:8c:b5:80:eb:b0:
9a:b3:8c:96:ac:37:49:96:09:c3:0e:80:e3:f0:df:53:13:04:
5f:d9:57:89:ba:15:9e:99:43:93:e5:65:79:97:97:b6:88:85:
2c:ed:e3:8a:06:be:84:29:92:24:53:c2:41:0a:19:ea:4f:a2:
f8:f2:4b:2d:0e:95:49:0f:6a:95:2d:60:8b:1b:85:71:da:a1:
04:f0:7d:f7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyNTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2M0M5RjZFNDg3RTFD
QzM3MzM3RTY0RDAzRTBBQzBGOEU5RjYwMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4pDrqqFRluctnFzbeCnMAofns5l/TiwfoYTy2MOGwgWWMVoFm
q8BJkS2zh59RQhMA3wJnH40zQh/iotMWaCTRom/ZCFqWL9zG/eGSgh79U88BMIb5
57ecc0LPac1mYfLlRuqDbzwobEMaugH/gvtOBgi6YCzPcAefkSk7XbIqZT34nbiT
9U76p4CQikixUeqt01maR5tWWmxaOxcvWBYS32/fBHzSfqQLIyH0QJmsV4+U/hn5
dLdjeS04Al30IsIKJ18X1zB9kQPMlaP4/Sz8o9WYIRhnoyBehErc3dTpSjnBkDWW
0SsP6T3Wd/NVLZIAJ6wdus/BoOIvDofCvRHTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU9jyfbkh+HMNzN+ZNA+CsD46fYC4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxLzlqeWZia2gtSE1Oek4tWk5BLUNzRDQ2ZllDNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXfpSAwDQYJKoZIhvcNAQELBQADggEB
AHZCM5tgb/4psWUV+jcL+OXLCCh+N7iQpHQekRWIfvjqYF2BUB3PBjBjnDhnGC3+
uMrNW9sa8CujkLvDxvs+bUPTgFoRbTTZ0LG6FqA4h3a6ZzW5LyY56/T2/PQDSv1x
ZDuJJWDp7Fn/33C666SvDp5/OZVU8VAc/+COo/lZ9h2rFlIq2nXwWbrquaeL7D51
LveZlxV1/epNAccWd2LnXPAjEaclB0+XJig+EkWLxpmMtYDrsJqzjJasN0mWCcMO
gOPw31MTBF/ZV4m6FZ6ZQ5PlZXmXl7aIhSzt44oGvoQpkiRTwkEKGepPovjySy0O
lUkPapUtYIsbhXHaoQTwffc=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:35 2026 by rpki-client