
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/cDhhrV4wekkN1k4jfd4noKL__4k.roa
File: cDhhrV4wekkN1k4jfd4noKL__4k.roa (raw, json)
Hash identifier: LW3GEyPjCSmB9vrrHyP9k18AJT25g3+lja83+DOV4cE=
Subject key identifier: 70:38:61:AD:5E:30:7A:49:0D:D6:4E:23:7D:DE:27:A0:A2:FF:FF:89
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0404
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cDhhrV4wekkN1k4jfd4noKL__4k.roa
Signing time: Tue 31 Mar 2026 08:11:37 +0000
ROA not before: Tue 31 Mar 2026 08:11:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9378
IP address blocks: 103.3.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=703861AD5E307A490DD64E237DDE27A0A2FFFF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:29:a9:e2:af:4e:ef:de:87:cb:02:b4:48:
af:5f:f6:05:a0:28:c6:7e:96:d9:ec:08:15:9a:9d:
ff:b5:e5:55:d5:41:43:8b:fd:bf:a9:4e:ae:f8:91:
e3:de:9a:32:43:b3:8d:66:2f:25:52:fa:51:f1:cf:
2d:ec:d7:bf:2d:d3:f0:98:72:af:3e:57:2b:32:1a:
10:04:82:33:88:47:b0:8c:87:c3:29:74:8d:1f:6d:
bc:bf:f2:40:42:e1:c4:7f:06:5c:15:7f:51:91:dd:
d4:29:29:7f:ee:f3:46:46:44:df:c3:80:5e:61:be:
19:dc:ba:79:b4:c7:fc:b2:cf:10:a1:15:d8:dc:51:
da:1f:8c:27:d5:ec:36:55:b9:05:59:58:64:0e:75:
b5:52:44:df:cc:b7:cd:9d:29:d3:08:23:3a:86:54:
74:22:77:00:8e:6c:c9:34:4c:43:e8:ba:9f:bd:25:
61:08:88:fe:bf:41:40:95:ac:35:4e:85:86:e1:85:
8a:15:4c:65:1f:b4:c8:af:35:12:fc:67:2f:fe:79:
82:31:1e:b9:5b:bb:70:81:79:aa:7f:31:5f:da:8d:
b7:f5:5c:f9:6c:c2:29:59:79:ff:6e:8f:b8:71:1a:
64:5c:83:51:4f:b8:0e:30:3e:54:39:a4:7b:37:15:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:38:61:AD:5E:30:7A:49:0D:D6:4E:23:7D:DE:27:A0:A2:FF:FF:89
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/cDhhrV4wekkN1k4jfd4noKL__4k.roa
sbgp-ipAddrBlock: critical
IPv4:
103.3.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:a5:81:bc:3e:24:cc:d7:f1:6d:d8:80:af:71:2a:41:3d:54:
2c:05:d3:e0:ee:f1:df:18:db:56:13:a3:ee:c7:bd:d0:90:6c:
26:48:5b:62:29:f0:a9:21:b9:71:a1:9e:b0:6b:07:a1:41:ac:
93:67:9e:b2:d5:13:bf:94:78:2d:1b:2f:a1:97:f7:37:3a:6e:
e2:a5:7c:2b:32:b1:c3:fe:05:dc:3f:d7:5b:1a:c9:2c:42:b8:
4b:ab:bf:69:d2:19:a0:19:f1:91:24:89:36:f4:b4:a5:f2:11:
de:ba:d7:23:72:b3:8b:c0:97:d4:05:38:5e:6e:03:5a:a7:49:
fb:d0:ce:fe:b4:7a:c0:c6:3b:6c:48:a9:81:39:aa:86:52:d0:
b9:1d:84:ae:bb:ee:06:68:35:0b:1a:67:91:b1:dc:40:d6:91:
e3:7f:0a:b9:d3:f5:b9:3f:25:60:30:fa:81:01:35:1e:8c:7a:
ea:97:5a:33:07:6f:3d:2b:17:72:99:08:cc:59:6c:53:81:b3:
62:62:e5:31:6b:f9:67:f9:f8:cd:69:5e:11:8b:43:10:6b:8c:
1e:06:cd:4e:63:7a:13:ea:c9:48:cb:38:ee:a3:6a:e3:e3:85:
a4:78:0f:f7:42:c3:37:3b:8a:db:2f:dc:35:a9:83:7a:ed:3b:
64:2c:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:43:50 2026 by rpki-client