
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YW2824DWkrGQyv7s8qbAf20SWAI.roa
File: YW2824DWkrGQyv7s8qbAf20SWAI.roa (raw, json)
Hash identifier: CMDxkEp0zzF6cdC/BbNNLdh+tmeLsCF1MQfEe251LPI=
Subject key identifier: 61:6D:BC:DB:80:D6:92:B1:90:CA:FE:EC:F2:A6:C0:7F:6D:12:58:02
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04D2
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YW2824DWkrGQyv7s8qbAf20SWAI.roa
Signing time: Tue 31 Mar 2026 08:13:19 +0000
ROA not before: Tue 31 Mar 2026 08:13:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4721
IP address blocks: 221.132.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:13:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=616DBCDB80D692B190CAFEECF2A6C07F6D125802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:a6:9f:62:71:c2:b4:3f:6d:3f:91:f9:eb:
ba:8f:62:3b:2e:a8:dc:a8:d1:34:ae:34:68:2d:58:
39:74:02:0d:4e:fa:28:f9:86:9c:dd:2a:2e:92:39:
4c:99:08:52:46:a9:a0:89:b9:98:ce:90:04:d7:89:
79:f5:40:e6:c1:be:47:5b:4d:01:b7:e4:43:8d:c8:
ce:b7:ea:11:06:7c:4e:03:b2:80:5c:74:15:34:e6:
50:b6:5c:33:4e:e9:4f:e8:4a:b7:b8:32:3b:cb:8f:
52:8a:82:d0:1d:95:d2:9d:50:85:62:52:9a:53:57:
e8:aa:43:bf:2b:0b:99:46:3d:63:45:bf:76:ee:af:
3c:9f:14:38:cb:94:03:ba:a5:19:6f:f9:f5:a2:4e:
11:65:19:30:1c:1f:12:c0:33:fa:ef:4c:26:86:f6:
9d:7c:f6:3c:1d:3f:fe:58:3d:42:75:f1:86:08:14:
61:59:c7:36:9d:3b:55:f7:bd:d0:d0:1e:08:5f:57:
3f:f7:0d:8f:f1:dd:8c:15:b6:e2:d8:02:c2:5e:81:
64:24:8e:49:14:1f:09:ab:1b:dc:21:8d:c5:06:ea:
10:77:fa:e8:a2:46:7c:b3:06:19:81:04:d8:aa:23:
86:60:f8:6a:b2:34:ef:ce:3b:98:eb:68:ef:3f:4e:
40:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6D:BC:DB:80:D6:92:B1:90:CA:FE:EC:F2:A6:C0:7F:6D:12:58:02
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YW2824DWkrGQyv7s8qbAf20SWAI.roa
sbgp-ipAddrBlock: critical
IPv4:
221.132.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5f:86:ac:eb:f8:32:f3:86:43:31:59:be:ca:9f:de:ee:ca:bd:
6d:cb:ea:45:28:bd:a9:69:bd:ce:80:3b:5b:a0:ab:01:89:8f:
50:df:28:10:09:31:bd:01:93:77:b5:1b:51:bc:73:53:a5:ea:
78:ec:4f:c4:20:45:60:8f:63:c0:e6:2b:3e:f3:92:30:ec:e8:
d0:73:7b:03:51:af:1e:f3:4e:69:ee:94:d4:20:b6:22:f4:c8:
9d:8d:c7:32:7d:0c:9b:1f:d4:f6:40:39:83:85:db:16:c0:4c:
14:e2:98:46:2d:6d:44:21:b1:c0:f8:60:ad:84:f4:12:c3:55:
60:cf:f8:61:72:b9:ba:be:c3:08:49:61:99:08:3d:7c:eb:dc:
ff:e8:d4:79:60:cf:47:16:e9:2c:c4:fd:ca:05:ce:5c:eb:e8:
ca:8f:12:c1:b6:4b:f1:ee:b2:8c:fe:c8:b5:af:08:ff:d2:2f:
56:26:41:b5:c0:1e:0b:4b:78:80:ae:85:b2:16:4b:bf:bd:6a:
af:d3:dc:1c:80:26:15:a2:6b:38:6a:90:84:09:36:ec:81:a7:
1f:dd:43:a5:1a:ce:71:50:e1:1f:b9:2f:7b:a6:ff:5f:87:f8:
24:3e:d5:e4:30:45:53:0e:aa:cb:2e:b0:a8:92:e2:1e:81:4e:
94:10:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:51 2026 by rpki-client