
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/blxR9c002zWt7XxxuwBWhkJN8s8.roa
File: blxR9c002zWt7XxxuwBWhkJN8s8.roa (raw, json)
Hash identifier: +4kMgGyEkROmBX/RYygcGOJnAfvuh1qUT+TVr0N0zKc=
Subject key identifier: 6E:5C:51:F5:CD:34:DB:35:AD:ED:7C:71:BB:00:56:86:42:4D:F2:CF
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0405
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/blxR9c002zWt7XxxuwBWhkJN8s8.roa
Signing time: Tue 31 Mar 2026 08:11:38 +0000
ROA not before: Tue 31 Mar 2026 08:11:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 103.3.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6E5C51F5CD34DB35ADED7C71BB005686424DF2CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:35:da:fa:93:f5:01:5d:ae:f1:7d:8e:17:
e7:61:97:84:37:09:43:dd:7a:14:6d:4d:6d:69:75:
67:aa:c6:8b:84:e9:40:7c:15:c4:76:d0:3f:8e:29:
e6:7f:84:89:86:27:b6:06:fd:61:84:75:b5:75:54:
51:1b:f1:95:a5:77:a8:d6:42:c8:19:ae:cd:2d:4c:
7c:1b:e3:44:d2:95:74:b5:ca:f5:fd:34:9c:47:ee:
e8:07:97:b7:7c:b7:a0:0e:ac:79:38:6d:12:e9:ad:
cf:b9:69:9d:ee:f7:d7:90:bb:98:d9:4d:d3:17:c3:
5c:7d:fa:e3:47:36:c4:f2:75:ab:7e:e6:c7:11:5c:
7b:eb:c4:15:da:7e:76:07:68:3d:6a:a9:77:92:9e:
4a:ad:e0:59:75:c5:0b:5e:4f:a0:f3:59:da:57:82:
23:09:a8:23:c4:a1:21:1a:27:6b:39:5b:7f:a9:13:
d2:8f:7f:0d:5b:88:eb:28:34:cf:00:45:0b:e7:4a:
4e:c3:c4:61:ec:0f:ac:00:a1:59:b3:61:b3:fe:95:
d4:6f:9e:ed:df:15:a3:b9:18:c4:2e:0f:d3:db:71:
b2:19:b5:c8:29:2a:9a:50:37:bb:5f:1e:e1:94:79:
73:53:50:69:a5:5c:be:ce:dd:b7:ef:aa:42:57:59:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5C:51:F5:CD:34:DB:35:AD:ED:7C:71:BB:00:56:86:42:4D:F2:CF
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/blxR9c002zWt7XxxuwBWhkJN8s8.roa
sbgp-ipAddrBlock: critical
IPv4:
103.3.4.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:44:37:10:2b:e1:6c:94:8f:39:31:b8:a8:7d:e1:18:12:4c:
8c:fc:93:7d:be:5f:a3:9a:b4:36:5c:6e:eb:b9:71:42:57:6a:
b7:04:90:fc:df:22:a3:70:27:83:f4:78:fc:10:6c:1f:44:9f:
b3:37:c2:01:b5:d3:0f:ac:37:37:dd:d3:4d:19:41:f0:bf:3e:
ab:fd:0c:d0:fa:66:76:16:34:09:8a:5e:fa:86:3d:8d:08:c2:
47:2a:a2:38:32:29:26:8a:f1:c6:c6:31:67:da:17:38:23:f8:
02:78:93:87:23:d3:9e:57:ee:c5:eb:72:af:97:71:77:fc:25:
c9:cb:54:25:3a:80:60:23:89:6f:5b:f8:cf:8f:b0:ae:6d:97:
42:ff:93:c8:fc:31:36:97:ea:00:ca:c5:a0:2b:50:93:04:19:
3c:87:d4:68:6c:26:83:86:46:89:5e:9e:d5:b9:8d:73:37:e2:
86:af:27:d7:94:26:33:dd:d3:6f:33:25:37:96:4c:48:c9:ef:
80:1b:1c:79:5e:8a:fb:72:f3:06:13:3f:b2:c4:90:e8:50:a7:
e5:13:81:9a:a4:7c:75:d0:32:81:11:6b:8c:16:79:e0:88:12:
dc:06:24:b5:8e:77:85:41:e6:2c:8d:03:0c:a3:f4:9b:1e:b8:
24:60:17:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:58:25 2026 by rpki-client