
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/IMnMbqhu8kTfnxLZoet7lZobGjs.roa
File: IMnMbqhu8kTfnxLZoet7lZobGjs.roa (raw, json)
Hash identifier: YNPlllRt2KtqxGO0Bg28TdRBgZZdHNPzwKhbWMQ/wiQ=
Subject key identifier: 20:C9:CC:6E:A8:6E:F2:44:DF:9F:12:D9:A1:EB:7B:95:9A:1B:1A:3B
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0444
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/IMnMbqhu8kTfnxLZoet7lZobGjs.roa
Signing time: Tue 31 Mar 2026 08:12:10 +0000
ROA not before: Tue 31 Mar 2026 08:12:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23788
IP address blocks: 119.82.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092 (0x444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=20C9CC6EA86EF244DF9F12D9A1EB7B959A1B1A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:7c:ad:7f:98:a2:0b:77:14:9c:96:42:63:
aa:4d:17:bb:44:43:7c:fe:50:5b:d6:ee:7b:dc:2b:
a8:ca:75:18:3f:64:2c:ca:db:67:cd:96:ab:48:d9:
35:ea:ad:e2:8a:1b:57:b0:bf:c3:42:40:89:70:a8:
ca:ca:91:d8:2d:92:2c:eb:ab:66:ac:11:5d:5c:3a:
39:43:e5:59:4b:d0:12:80:b3:7d:a4:29:05:14:a5:
79:01:89:7b:80:b5:13:fc:f2:59:1e:94:40:ca:85:
76:3a:b6:78:34:3d:56:ae:29:c1:fe:b6:ae:6d:3d:
2d:ca:74:dd:f4:fe:bc:3b:69:57:b1:4c:19:10:85:
2d:ea:55:8d:4d:0a:fb:50:96:24:82:c2:6b:f0:5d:
4e:e3:0a:9a:72:8b:60:f2:7f:64:ef:16:2d:ae:13:
28:97:58:82:70:91:42:86:97:56:14:30:05:97:2e:
54:13:3e:89:43:99:5d:3e:50:e1:2a:14:0b:f1:ca:
4e:b4:7f:5e:ed:87:cb:06:a8:35:80:9e:b2:8d:8a:
e6:66:d7:14:07:f5:ad:bb:d5:fc:e9:56:f5:22:a8:
e6:d6:ac:93:8e:b8:b5:1d:fd:c8:eb:13:bb:2a:00:
6e:57:4e:78:66:d0:a2:22:c7:a8:e7:92:21:a0:81:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:CC:6E:A8:6E:F2:44:DF:9F:12:D9:A1:EB:7B:95:9A:1B:1A:3B
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/IMnMbqhu8kTfnxLZoet7lZobGjs.roa
sbgp-ipAddrBlock: critical
IPv4:
119.82.192.0/20
Signature Algorithm: sha256WithRSAEncryption
36:80:1b:99:d6:12:07:06:15:ed:fb:5f:86:21:63:01:b0:26:
02:50:6f:3c:94:25:c2:16:42:7b:da:c0:b6:25:7d:18:b2:e3:
55:62:c4:6e:c6:67:dd:34:70:18:10:1b:7a:91:e4:9c:22:db:
e0:11:d9:4b:e6:0a:2f:d1:58:eb:7f:10:78:d5:f9:92:e2:24:
1f:3b:a4:73:b8:8c:46:0d:d8:41:f0:33:f8:0f:91:7e:69:72:
71:d3:92:88:34:25:2b:43:c5:18:5f:7a:ff:9e:ca:5c:e4:04:
b0:10:3c:03:33:73:3e:13:75:57:c7:75:7d:d7:65:29:ec:77:
4f:1c:21:85:40:f0:71:c8:d1:96:53:55:d4:38:b3:a6:6c:9b:
19:a3:74:da:92:d9:f4:95:ff:0e:b6:fe:c9:17:64:60:83:3b:
f9:dd:da:5a:19:79:a1:3a:ca:bb:38:50:1f:cc:ba:c1:60:54:
7f:5c:55:7b:10:d6:cc:0c:48:96:13:e8:92:83:5f:28:aa:2b:
15:0e:3b:15:af:63:79:b8:80:46:72:44:94:0f:15:e3:1f:2b:
b3:f4:2b:2c:3a:62:66:0f:33:09:27:2c:50:08:cb:98:3e:ca:
91:aa:be:36:ca:06:60:35:e6:1e:4a:53:83:cf:33:1a:16:92:
ad:8d:1b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:54 2026 by rpki-client