
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/PCWYUx8TGK0QgYMeRxP3wT1hTSo.roa
File: PCWYUx8TGK0QgYMeRxP3wT1hTSo.roa (raw, json)
Hash identifier: X+8Gj2rYbs+rCgevnbI7wIlLDKoUQHhXclHoPIIvGmY=
Subject key identifier: 3C:25:98:53:1F:13:18:AD:10:81:83:1E:47:13:F7:C1:3D:61:4D:2A
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0435
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PCWYUx8TGK0QgYMeRxP3wT1hTSo.roa
Signing time: Tue 31 Mar 2026 08:12:00 +0000
ROA not before: Tue 31 Mar 2026 08:12:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 219.112.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1077 (0x435)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3C2598531F1318AD1081831E4713F7C13D614D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:d9:68:b2:ca:cb:4a:83:77:4c:07:17:f5:
25:6d:56:ca:99:17:be:86:d3:90:c2:31:75:19:3f:
91:35:bb:e5:87:b7:27:92:39:42:a6:25:86:fa:57:
de:3e:42:7a:be:c5:b8:2e:58:93:94:f2:99:c1:39:
ba:86:26:97:61:7a:ad:83:b7:23:a1:34:e1:4c:3e:
11:d9:b1:fd:fa:f0:d6:ba:63:71:d6:34:cf:c6:16:
8b:e4:75:d9:3b:c4:70:45:22:3b:64:3a:90:6a:5e:
a0:3b:d1:b6:72:e9:b1:54:2d:26:18:b7:fc:4f:69:
ee:53:43:a4:2a:e8:0b:6c:d8:37:75:80:04:af:0a:
ee:0c:3b:4c:76:12:bc:47:3d:4a:e0:7b:2a:b2:a2:
53:95:0c:a1:9c:f6:0a:08:e1:0e:a3:df:23:4f:ba:
6b:39:77:5a:15:1d:af:b7:63:0b:2a:ef:47:7f:ab:
d3:7e:b3:f0:4a:d6:9c:ff:4c:67:76:65:29:8f:8c:
e0:75:35:95:91:73:ce:8c:72:f7:d3:09:51:8f:7f:
b1:00:c5:c7:75:43:e3:23:4b:4a:4f:82:c7:0d:6d:
49:02:ca:77:3f:33:ce:48:2b:04:64:52:38:9b:3c:
94:12:f3:78:55:d9:ca:c6:bb:db:81:e6:cb:ac:8c:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:25:98:53:1F:13:18:AD:10:81:83:1E:47:13:F7:C1:3D:61:4D:2A
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PCWYUx8TGK0QgYMeRxP3wT1hTSo.roa
sbgp-ipAddrBlock: critical
IPv4:
219.112.128.0/19
Signature Algorithm: sha256WithRSAEncryption
64:6f:17:64:02:39:0c:6d:fc:cd:9d:fe:09:b4:eb:14:63:37:
ad:e3:1f:5d:6b:c3:73:20:1d:ba:27:83:73:d6:4b:0a:41:20:
9f:50:4d:82:6f:2f:09:e8:b6:4b:62:4e:ce:30:cb:45:bf:4a:
b7:24:3a:ce:ad:18:6c:c4:9c:fe:9a:9d:56:90:d2:e5:28:9c:
2a:39:8c:1e:4b:2b:85:86:2e:0c:a8:50:fc:6c:d7:f6:4a:30:
bf:37:8a:cf:6f:a0:d8:f0:a2:5d:b9:8d:f9:72:e5:17:e2:41:
57:2f:5c:c4:b0:1b:e2:93:eb:69:0a:35:a8:88:19:4d:b9:c4:
4f:f3:db:40:86:82:43:36:c9:7a:14:c8:4b:48:83:5c:91:8e:
c3:20:e7:2b:40:ae:62:08:3c:04:c2:85:b7:5d:f3:e7:c7:c6:
79:60:32:f7:3b:92:c7:50:e5:ed:08:24:01:77:8e:94:19:c6:
2c:1d:14:94:f5:e0:a4:91:eb:55:a7:f6:dc:7e:d9:5f:e1:b0:
4b:66:e5:fb:a0:ea:67:b4:f0:8e:63:df:79:99:54:54:fb:10:
0b:d9:de:f8:c5:37:e7:fc:56:82:11:29:d2:85:ce:95:4e:d2:
8d:7e:5e:36:2f:b9:0d:b3:b0:77:01:4d:3c:5d:27:f3:41:c3:
46:c3:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:57 2026 by rpki-client