
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/gmOqf9Ein5DNbwOsFfB66OEpjDo.roa
File: gmOqf9Ein5DNbwOsFfB66OEpjDo.roa (raw, json)
Hash identifier: CfEhMuSyVD8tRjEZtHUURRFlUfgBurQMRBwUZ+KvZ6c=
Subject key identifier: 82:63:AA:7F:D1:22:9F:90:CD:6F:03:AC:15:F0:7A:E8:E1:29:8C:3A
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0441
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gmOqf9Ein5DNbwOsFfB66OEpjDo.roa
Signing time: Tue 31 Mar 2026 08:12:09 +0000
ROA not before: Tue 31 Mar 2026 08:12:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 219.105.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1089 (0x441)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8263AA7FD1229F90CD6F03AC15F07AE8E1298C3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:a4:af:2a:a8:10:c0:41:8f:0e:14:7f:97:
41:d8:52:6a:93:19:b5:63:88:3a:b9:56:48:a2:3e:
7d:e8:f0:8a:65:2e:84:ba:91:e3:6a:30:ac:9d:e7:
84:6b:4e:b0:7f:9f:87:84:a5:fc:2c:86:17:57:ff:
21:51:28:f6:33:f7:e5:e0:5d:27:77:f1:5f:c5:f9:
a0:f6:33:c0:34:9e:f8:86:62:09:37:82:9a:26:7e:
69:8c:e6:9a:0a:b6:cb:1e:82:b3:dc:5e:ae:55:a9:
cf:b1:19:32:ff:5c:a2:e5:85:4a:c7:4b:0f:89:18:
dd:8d:19:4c:22:11:e6:44:45:ef:eb:7c:cd:dd:3e:
73:ea:ab:81:27:03:88:45:b2:5b:26:af:18:c2:ed:
8b:36:af:2c:48:e2:64:62:9f:a8:a0:36:a4:f3:cb:
5f:11:b8:a3:bd:74:59:c7:ff:0a:a6:e5:6b:da:69:
59:1b:77:be:87:b0:4e:46:2b:06:29:ec:aa:5b:d1:
e1:fd:ad:27:37:f2:2c:38:9d:54:d7:bb:b6:d0:51:
6d:a2:db:25:b4:6e:dc:62:03:3c:ae:6f:79:0f:a9:
d0:a2:45:f3:18:d5:6e:31:38:98:9c:bf:00:2c:b2:
a0:94:70:72:6a:10:eb:af:0c:f5:41:d3:e5:c2:93:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:63:AA:7F:D1:22:9F:90:CD:6F:03:AC:15:F0:7A:E8:E1:29:8C:3A
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/gmOqf9Ein5DNbwOsFfB66OEpjDo.roa
sbgp-ipAddrBlock: critical
IPv4:
219.105.96.0/19
Signature Algorithm: sha256WithRSAEncryption
36:ac:b0:2c:59:7b:66:cf:67:c3:37:46:05:18:9c:b7:84:73:
d3:06:bf:e0:03:eb:50:dd:29:8e:dc:da:c4:f5:3f:5b:c5:6c:
99:a6:94:39:b1:7b:61:4f:66:ec:37:a5:d2:5f:01:c6:b1:64:
28:0e:ea:db:06:03:ed:fd:9a:c0:6b:49:cd:ab:a3:91:de:65:
ab:8e:10:04:b2:1a:54:e2:f6:7c:63:f6:c3:4a:e5:f8:e0:72:
2f:37:42:66:7c:bb:d4:0c:b1:7b:ef:90:c5:3d:40:35:4e:d6:
a7:10:ea:d6:94:62:89:81:e9:fe:d8:ee:2f:10:74:c4:b1:92:
64:62:ab:d0:d8:93:a7:ca:1c:21:53:e0:38:9e:b8:a6:3c:bd:
97:18:dd:8d:e6:b3:72:ef:c4:09:78:8c:14:ee:4a:4e:9d:96:
ae:9d:ed:5b:1f:32:e9:01:93:19:19:27:9b:70:86:69:11:d5:
a8:28:dc:59:46:86:ee:ee:f2:87:40:72:77:cb:d8:07:73:87:
c9:36:bf:b0:1b:14:98:e0:05:4c:5c:1a:e6:5e:38:97:71:a4:
16:55:ad:00:52:7b:b5:03:b5:62:e1:93:61:c3:55:3f:96:b2:
09:1b:f2:7b:95:d6:7f:69:7e:0a:07:51:c0:a6:f9:5b:e0:42:
c1:df:d1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:06 2026 by rpki-client