
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/aZAv7jagJqf7u1oINsZnO20wMEc.roa
File: aZAv7jagJqf7u1oINsZnO20wMEc.roa (raw, json)
Hash identifier: igXgu8g4/B1ppBwYPBwGAuMGDQcXQ/x6hzC3ZIsTAus=
Subject key identifier: 69:90:2F:EE:36:A0:26:A7:FB:BB:5A:08:36:C6:67:3B:6D:30:30:47
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0422
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/aZAv7jagJqf7u1oINsZnO20wMEc.roa
Signing time: Tue 31 Mar 2026 08:11:51 +0000
ROA not before: Tue 31 Mar 2026 08:11:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9378
IP address blocks: 124.195.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1058 (0x422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=69902FEE36A026A7FBBB5A0836C6673B6D303047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:dc:97:c0:46:59:a4:46:7e:38:15:8a:e2:
ff:a7:9c:f4:1a:7d:77:eb:f6:e2:b1:cf:22:66:39:
ee:f6:49:17:01:af:a7:dd:e4:a0:b6:0c:6c:35:9a:
b8:5a:55:89:8e:26:61:17:69:65:4b:2f:c2:dc:e0:
2a:ad:75:e5:1f:24:4b:e7:d3:0a:2c:57:f2:c3:fa:
1f:ac:b5:79:f4:c0:b8:4d:b9:81:e4:7a:04:0d:a6:
6a:1c:92:f2:99:c5:60:c3:60:fd:48:59:3d:9f:13:
9d:ca:8d:e2:0d:7e:16:7b:af:47:54:28:69:49:de:
49:de:3c:17:e6:b9:86:41:99:3c:c2:3d:f3:3f:46:
47:55:d0:31:84:55:d0:ab:d4:1e:17:0e:fd:08:b0:
c7:46:55:67:82:32:83:ba:85:d6:3f:66:77:28:71:
b5:5a:d0:7d:4c:df:3d:12:f3:9b:4c:8d:79:91:5a:
e6:f7:08:86:3e:12:95:3d:22:6c:0e:8c:d0:58:6f:
39:19:ea:ad:39:83:3f:6e:4d:b7:5c:f8:68:65:e1:
83:15:21:ee:37:e5:73:88:b0:23:14:25:a6:cd:bb:
31:ca:a7:56:45:6f:ed:9f:b7:9d:ff:57:04:b7:8a:
f8:dd:16:f3:40:4a:55:9f:00:f6:9e:97:21:2f:7a:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:90:2F:EE:36:A0:26:A7:FB:BB:5A:08:36:C6:67:3B:6D:30:30:47
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/aZAv7jagJqf7u1oINsZnO20wMEc.roa
sbgp-ipAddrBlock: critical
IPv4:
124.195.144.0/20
Signature Algorithm: sha256WithRSAEncryption
d3:6a:75:d4:92:24:3e:f2:23:3d:83:96:cb:4c:51:f4:88:7e:
8b:05:5e:a4:c3:83:a7:1e:56:81:2e:61:c1:9e:fa:9e:f8:6b:
8a:a6:36:35:f9:02:b5:67:4b:c9:d8:26:c3:5d:6c:0d:63:29:
2d:5d:e3:4d:13:85:3e:67:f3:c0:46:b6:f6:6a:28:c2:5d:21:
00:50:bc:b1:0a:70:bd:ae:8c:74:f8:4c:2e:69:82:7f:09:2f:
6f:60:dc:83:d2:77:b2:60:a5:08:b8:2d:11:76:bd:d9:f1:72:
aa:61:fd:bc:48:ae:8f:e1:c1:16:e3:5b:83:51:65:1f:4e:85:
0b:64:b2:b6:b9:35:fe:16:20:ff:7d:b0:8c:8c:eb:a3:1c:56:
d9:6b:3f:b3:63:6c:32:7f:6e:2e:5b:c9:65:8b:75:dd:59:66:
38:62:63:24:43:36:31:1d:5d:3f:3f:b6:e1:7c:d3:aa:99:42:
02:cd:b8:e1:f8:a5:d7:36:3b:a1:2b:a3:ec:37:bc:b1:de:af:
6c:55:52:1f:69:42:c8:95:3a:bb:6b:76:17:eb:70:5a:5a:01:
bf:a1:61:3b:6d:56:b7:11:c5:6a:03:db:0b:c2:8a:a9:40:f0:
c4:4f:3f:76:39:65:10:25:68:98:be:af:82:df:10:41:6e:cc:
18:67:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:23 2026 by rpki-client