
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z8rdcgwONAxHq2mxtJ5T24ywvmY.roa
File: Z8rdcgwONAxHq2mxtJ5T24ywvmY.roa (raw, json)
Hash identifier: I8SB/wu6YPXgYMx31ouAIIwWSq0R5D9hxSh8eJQEITk=
Subject key identifier: 67:CA:DD:72:0C:0E:34:0C:47:AB:69:B1:B4:9E:53:DB:8C:B0:BE:66
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04BA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z8rdcgwONAxHq2mxtJ5T24ywvmY.roa
Signing time: Tue 31 Mar 2026 08:13:07 +0000
ROA not before: Tue 31 Mar 2026 08:13:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9617
IP address blocks: 211.124.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1210 (0x4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:13:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=67CADD720C0E340C47AB69B1B49E53DB8CB0BE66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:a1:a2:20:83:1b:f1:33:a0:2e:ba:f2:dc:
f3:cb:5e:c5:c4:af:fa:bc:f9:25:95:0d:d1:5a:56:
51:38:d9:5e:97:f0:33:0a:ad:f0:ba:d4:b7:f4:8a:
92:20:b8:ab:74:cd:df:a7:6d:cd:0a:3e:68:e0:dd:
cb:e2:60:63:80:68:5e:b0:cb:26:79:84:95:50:6c:
17:39:c3:a2:9e:4f:ef:d3:d7:33:18:35:b8:30:c5:
27:7c:5c:f6:6a:41:0d:3e:05:f1:4d:80:2b:d9:5b:
6d:8a:0b:f7:db:15:f4:b3:1a:b4:f4:f6:47:81:c1:
c2:ae:b5:e9:42:1b:0f:e4:16:98:a7:d3:3d:05:ab:
37:0e:65:93:9f:8f:f6:19:78:e3:dd:b1:bf:34:e0:
d4:dc:e2:9c:b5:de:b3:4e:8f:86:f4:7e:4c:05:3a:
56:57:50:25:15:3e:0b:66:54:28:9b:3b:99:26:20:
0e:a1:6b:e2:6a:66:e1:63:37:06:4d:8a:82:04:b0:
04:08:e5:12:c5:f0:ba:45:cc:01:28:60:13:f2:0d:
00:f7:a9:51:73:1f:ec:2d:b6:b3:5f:eb:49:94:9b:
76:09:55:72:bd:78:37:fb:80:90:29:92:da:63:69:
fc:af:b1:fc:0a:4a:e8:13:b4:f5:1f:fe:c5:f3:24:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:DD:72:0C:0E:34:0C:47:AB:69:B1:B4:9E:53:DB:8C:B0:BE:66
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Z8rdcgwONAxHq2mxtJ5T24ywvmY.roa
sbgp-ipAddrBlock: critical
IPv4:
211.124.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ec:d4:0c:a3:74:c8:f3:2d:b7:e0:64:5d:f7:d1:9f:b5:98:2c:
ce:10:9a:74:63:2d:b4:7c:0b:e2:be:a2:c6:f6:97:79:71:7d:
b7:5b:46:d4:1f:05:79:b2:4c:6e:38:48:4b:64:89:d9:71:9d:
4f:11:f2:b0:22:64:29:5c:9a:d3:99:b7:b9:38:1b:6a:93:54:
f0:f0:42:38:70:76:56:65:bf:26:9e:dc:f6:12:68:38:63:ee:
00:04:56:c8:10:f1:67:ac:10:e9:9f:0b:90:27:b9:92:01:c1:
17:30:d3:4c:6c:c0:cd:c0:09:f2:cd:e8:08:a2:fd:53:f9:4e:
89:14:38:b4:2e:34:6b:c4:7e:d8:25:b6:bd:32:ef:ae:36:95:
1f:e4:6b:c9:b1:e0:1d:3d:49:eb:2d:4c:95:14:ef:1f:9a:61:
65:09:ad:49:26:fb:80:37:91:7f:52:2f:03:e9:7e:c0:3d:ce:
4e:0a:b3:f1:f5:cb:eb:2d:8a:b4:a3:2d:78:37:64:97:ad:9a:
ec:56:56:ae:1e:a3:a3:76:de:ec:30:86:74:03:54:17:39:4b:
c3:4b:0a:fd:3d:a4:0b:8f:fd:1f:1d:b5:dd:b4:69:4c:16:aa:
08:0b:3c:ee:b5:ad:70:e0:a3:88:50:14:97:ef:09:0b:ac:10:
08:2a:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:48 2026 by rpki-client