
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/_Nuh_J1Y6iYgfjMBcsWfeARDUYc.roa
File: _Nuh_J1Y6iYgfjMBcsWfeARDUYc.roa (raw, json)
Hash identifier: GXPKXSmjLkQrX+4G0trul5XUv/o3dCmnbl21lztToZ0=
Subject key identifier: FC:DB:A1:FC:9D:58:EA:26:20:7E:33:01:72:C5:9F:78:04:43:51:87
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04CA
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_Nuh_J1Y6iYgfjMBcsWfeARDUYc.roa
Signing time: Tue 31 Mar 2026 08:13:15 +0000
ROA not before: Tue 31 Mar 2026 08:13:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4721
IP address blocks: 116.70.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226 (0x4ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:13:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FCDBA1FC9D58EA26207E330172C59F7804435187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:db:58:ef:cc:f1:9d:f5:f3:a2:80:20:eb:
82:8b:51:53:41:8d:1d:11:96:70:5f:0b:06:b0:ae:
5f:90:8e:3f:0c:37:c2:d9:5f:10:37:73:f8:fe:d6:
cb:4d:71:8c:17:f0:81:8b:de:54:77:0c:0e:0c:49:
4a:b2:63:e6:79:b9:d8:bd:37:db:0f:eb:dc:ae:ee:
ac:6f:b4:75:b0:a8:cc:f8:eb:d9:ad:0d:07:bc:c3:
50:47:9b:0c:36:ca:3d:d4:e1:1d:b3:9a:6f:3a:4a:
b9:79:4c:a0:0c:c0:0b:fb:a6:c5:a8:03:88:17:98:
52:26:c8:45:67:3a:c9:2b:f4:0f:c0:0e:c3:86:ed:
8f:01:55:97:d2:93:f8:1d:27:59:54:95:19:b5:e2:
8b:b5:97:08:af:7d:78:b4:9a:3a:73:d9:e3:a2:7c:
2b:1c:4c:fb:37:29:f8:18:ad:04:a8:72:ea:61:f1:
6a:5f:05:4b:df:c6:fd:0a:bb:49:c3:ac:b5:7c:83:
a9:e2:99:5d:6a:3a:90:eb:9c:ba:f4:3e:44:44:f9:
e8:64:10:7e:f2:f9:c3:b3:78:de:19:55:51:8d:27:
05:51:8f:1f:61:35:31:bf:81:2d:48:25:3d:2f:c3:
ce:1d:11:1c:06:ab:b2:f7:32:72:1c:a5:d9:08:e1:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:A1:FC:9D:58:EA:26:20:7E:33:01:72:C5:9F:78:04:43:51:87
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/_Nuh_J1Y6iYgfjMBcsWfeARDUYc.roa
sbgp-ipAddrBlock: critical
IPv4:
116.70.128.0/18
Signature Algorithm: sha256WithRSAEncryption
21:8d:bb:d7:0b:10:af:4d:36:b0:68:6c:b6:65:c4:30:58:08:
5b:5d:40:c8:df:6c:10:9e:5c:04:78:16:9d:cf:64:95:b8:d2:
34:96:61:3f:d5:4c:2c:8a:e0:f9:b6:e0:29:f4:89:a6:50:ea:
62:c9:da:ff:cc:0c:64:94:a4:d4:da:3e:64:72:6c:25:91:a3:
e4:24:5a:eb:eb:32:55:db:e9:95:2d:01:73:56:b4:b0:9f:56:
2c:e2:bc:83:de:8a:2c:01:83:fe:e8:ad:e8:bc:f1:74:b6:66:
8f:bf:a6:fa:a8:45:d0:29:35:63:f3:76:4c:6f:27:75:cd:48:
db:ed:ed:a1:8d:85:d6:1a:f5:e0:18:d1:94:8a:bc:36:54:40:
40:43:d7:67:d4:69:ae:1a:0a:53:9b:36:19:f1:bf:06:d8:ee:
3f:7c:4d:b1:bf:15:f2:25:ea:ae:24:97:0a:af:00:8f:e6:4c:
f3:71:d7:8d:b0:e9:fd:43:59:64:60:98:44:d8:29:18:18:52:
9b:5c:68:43:31:a8:2a:64:31:87:83:e6:0c:a2:6a:05:7a:84:
e9:7a:a1:1e:93:f6:c0:f9:d7:c0:5b:45:b7:70:aa:96:15:01:
00:1e:1b:5f:d8:9a:e0:11:25:e1:73:d3:7e:5a:7b:e6:87:02:
e7:16:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:39:38 2026 by rpki-client