
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CI2lCn6UGEIrOTtNFxB_rg9TTmU.roa
File: CI2lCn6UGEIrOTtNFxB_rg9TTmU.roa (raw, json)
Hash identifier: P9tFW9Uk8DMue7JVHB4AusJYxn3QmsKR6lcAZKPqJJY=
Subject key identifier: 08:8D:A5:0A:7E:94:18:42:2B:39:3B:4D:17:10:7F:AE:0F:53:4E:65
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0461
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CI2lCn6UGEIrOTtNFxB_rg9TTmU.roa
Signing time: Tue 31 Mar 2026 08:12:24 +0000
ROA not before: Tue 31 Mar 2026 08:12:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 110.173.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1121 (0x461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=088DA50A7E9418422B393B4D17107FAE0F534E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:5d:09:cc:75:70:b0:77:2d:60:f7:40:fb:
0f:79:66:53:61:ed:b3:1d:a8:9b:2d:32:6b:f3:14:
c8:61:9d:3c:b6:b7:9d:e2:6a:30:8f:d6:c9:bf:68:
7b:c0:69:ce:11:c3:9f:c9:1d:29:71:e1:61:23:d2:
f7:12:b6:c3:69:be:b3:0e:62:f5:58:fd:ab:0c:28:
8d:7d:67:17:81:bd:34:4e:2a:d3:d3:90:39:59:96:
52:49:dc:2e:68:77:54:6e:55:12:8e:96:7a:30:98:
fc:fc:97:8b:10:1e:c9:f3:e8:c4:23:89:e2:80:7f:
9d:22:82:60:a0:3f:7a:a2:0d:9c:f4:ad:83:80:00:
7d:e0:44:de:63:4d:fd:e5:8e:4c:b1:08:e0:6b:6e:
df:11:14:a5:a6:c5:04:59:96:28:9e:14:84:5d:f2:
aa:a0:a3:1e:db:18:1f:ea:b2:88:4b:ad:00:89:9f:
c8:47:16:14:2d:bf:e2:19:06:96:6b:96:9e:db:7a:
6d:40:24:a2:b2:d9:92:97:28:07:1b:3c:6d:f7:fb:
2a:fd:41:a1:c6:18:c3:66:01:73:f9:a7:de:50:dc:
b5:1d:0b:f2:ce:dc:08:92:54:25:dc:72:07:d8:97:
d9:ac:00:40:a4:76:a7:3e:cf:6e:69:93:6f:c8:bb:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8D:A5:0A:7E:94:18:42:2B:39:3B:4D:17:10:7F:AE:0F:53:4E:65
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CI2lCn6UGEIrOTtNFxB_rg9TTmU.roa
sbgp-ipAddrBlock: critical
IPv4:
110.173.240.0/20
Signature Algorithm: sha256WithRSAEncryption
26:da:9d:45:99:be:f1:b9:9b:34:99:71:1e:d3:3c:f5:8b:35:
cc:99:6c:8d:d6:df:13:0f:99:af:07:79:15:1b:89:3f:2b:31:
6d:18:d3:5f:ca:2c:52:4b:ba:e2:6c:80:c8:85:5b:80:fc:77:
5c:05:00:29:c5:3e:af:51:06:10:2e:8a:c8:52:b3:83:dd:be:
51:16:c6:16:eb:41:00:2e:c2:4e:8e:3b:e0:47:30:32:44:f6:
1e:dc:ee:be:90:00:9a:86:0b:8a:09:31:29:97:dd:36:e0:f7:
77:52:48:1a:43:26:1b:d6:cb:73:97:d2:0d:7b:e9:ca:a2:e1:
ca:88:2f:5a:a9:5f:18:57:6b:47:86:3b:e9:5b:0c:c8:01:ba:
69:36:2c:4e:36:f1:25:bd:0d:72:ba:24:3a:80:52:9b:6b:ec:
20:c4:55:48:54:81:06:53:9e:da:60:f6:ba:9e:9d:56:09:3d:
6b:7c:e8:47:91:89:01:11:50:b7:cb:d7:59:be:75:50:b9:11:
b7:e1:47:a8:7b:ff:e1:f4:b8:1d:7e:0a:ed:54:11:c4:74:03:
36:ef:35:3c:fd:12:16:22:b7:14:29:50:58:69:6c:55:28:16:
2e:29:20:8e:bc:67:0f:ce:e6:a5:77:98:6f:25:02:79:f8:9b:
e6:8c:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:36 2026 by rpki-client