
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/PYTKwdvouwDXqWhstw3g3vqMCB4.roa
File: PYTKwdvouwDXqWhstw3g3vqMCB4.roa (raw, json)
Hash identifier: VUkvUunXVZoimSNrrXsrw26WurlvoYxtt62i3bbEbqU=
Subject key identifier: 3D:84:CA:C1:DB:E8:BB:00:D7:A9:68:6C:B7:0D:E0:DE:FA:8C:08:1E
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0491
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PYTKwdvouwDXqWhstw3g3vqMCB4.roa
Signing time: Tue 31 Mar 2026 08:12:48 +0000
ROA not before: Tue 31 Mar 2026 08:12:48 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 211.19.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1169 (0x491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:48 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3D84CAC1DBE8BB00D7A9686CB70DE0DEFA8C081E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:3b:81:fa:98:28:27:eb:bd:59:31:8c:2f:
54:b2:9f:f3:ee:68:0b:32:84:ec:8a:0d:b3:00:ae:
b1:9f:b9:8c:8e:a3:96:72:10:13:57:52:02:4d:85:
f6:fc:ca:c9:65:9c:16:52:4c:2f:84:d2:19:62:42:
72:99:a7:fa:32:6c:19:57:13:67:56:f9:1a:57:d6:
ea:7a:01:b3:12:e1:0b:3e:e7:2a:14:20:89:21:d9:
8b:1c:29:8d:e5:a9:9b:eb:4b:9b:4f:fa:ca:2e:9d:
de:3c:25:6f:37:68:d4:57:26:51:6e:ff:93:68:80:
da:87:07:62:93:fe:35:df:77:fc:05:27:a6:6d:d0:
7d:04:be:ec:08:07:0d:6e:75:09:d8:af:8d:69:e1:
3b:c6:dc:2f:dd:e5:25:13:e7:f8:29:be:71:89:7b:
77:67:95:85:a9:bf:40:b3:04:b7:a3:0f:26:1d:b1:
7d:13:ec:18:3f:b4:3a:a1:cc:66:7a:ce:b5:22:ef:
90:0c:86:7a:79:29:df:27:90:96:89:62:70:60:30:
56:cb:e1:b3:69:4f:0e:51:f9:11:be:2d:97:79:5b:
d2:3d:d5:82:77:a8:d1:74:ce:65:f9:3e:a7:59:ff:
50:a2:b9:0d:29:a0:ae:03:22:fa:bd:80:0a:44:eb:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:84:CA:C1:DB:E8:BB:00:D7:A9:68:6C:B7:0D:E0:DE:FA:8C:08:1E
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PYTKwdvouwDXqWhstw3g3vqMCB4.roa
sbgp-ipAddrBlock: critical
IPv4:
211.19.208.0/20
Signature Algorithm: sha256WithRSAEncryption
96:87:de:d8:a9:89:60:d8:f9:6c:50:24:e4:23:33:04:0b:aa:
81:6a:43:e7:16:4f:ea:46:99:10:6f:40:c9:92:5a:e5:b2:13:
2f:63:4f:63:06:eb:97:13:e9:97:00:f7:98:a4:75:4a:14:bc:
61:2d:03:ba:50:d8:73:5a:8a:5d:b1:25:a7:7f:42:e5:14:0d:
28:17:dd:b5:0a:6d:7e:2c:0c:59:4c:e6:e4:cc:9c:3a:6b:dc:
55:a5:73:79:6b:37:39:b7:67:07:53:c2:50:ce:db:c7:ae:fd:
39:1b:0e:9b:d5:aa:ba:8c:a1:2e:f8:4e:28:55:48:1b:c7:ab:
81:c3:a1:ff:72:48:ba:4c:48:db:dd:08:3e:66:90:2f:08:37:
62:20:5e:14:26:a7:93:e9:37:5d:2d:4c:4c:32:4f:84:19:37:
79:d7:2e:ec:a7:da:a7:6a:d3:62:a0:86:0c:eb:b7:52:ad:16:
77:b1:ca:10:14:25:c1:a5:43:28:ab:02:54:79:72:a8:7a:5d:
42:68:d4:c1:e7:ab:aa:48:15:e9:d8:7c:a0:cf:d3:4a:81:63:
39:db:25:40:f6:36:28:ca:4a:9c:be:1d:a3:4a:b7:9e:8d:96:
90:c2:9f:c8:23:67:11:a5:66:a5:9c:d8:83:bb:1c:72:28:3e:
10:86:47:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:46 2026 by rpki-client