
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/knRERKK_NzLr4LseskVDkYJHzCg.roa
File: knRERKK_NzLr4LseskVDkYJHzCg.roa (raw, json)
Hash identifier: 2nTlwpHwc1BnK1VgS8R9Zyl1kfYvcIFBBFuC432zAlA=
Subject key identifier: 92:74:44:44:A2:BF:37:32:EB:E0:BB:1E:B2:45:43:91:82:47:CC:28
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0426
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/knRERKK_NzLr4LseskVDkYJHzCg.roa
Signing time: Tue 31 Mar 2026 08:11:53 +0000
ROA not before: Tue 31 Mar 2026 08:11:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9378
IP address blocks: 180.131.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1062 (0x426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=92744444A2BF3732EBE0BB1EB24543918247CC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:54:4f:e5:51:ff:4d:e3:4e:17:eb:70:88:
bb:94:63:5a:5b:84:13:dc:3d:d4:10:1b:43:20:85:
15:55:25:e2:8b:2d:a9:d5:c8:c2:09:a8:2d:c6:41:
06:fb:d4:5c:6f:57:a7:c4:16:9f:1d:6e:a6:a5:1c:
65:b9:11:84:03:1c:d8:5b:75:56:84:66:51:e1:39:
e2:f2:f3:62:92:6d:c1:3a:7a:f3:91:ca:be:76:09:
a8:1b:3f:fc:36:de:52:2b:fb:9e:36:22:61:78:e0:
6f:08:7d:55:ee:f1:4c:cc:01:7c:19:12:47:35:36:
8e:5f:e3:3b:8f:aa:e9:11:b9:1b:2b:78:34:99:7b:
e4:9a:a4:f7:3f:f8:07:de:9f:78:9a:98:f5:81:fd:
a0:28:5f:c7:2b:b8:75:c8:9a:de:58:8f:0c:0c:88:
47:01:d3:6b:9b:73:06:fe:49:fc:23:64:a2:63:cf:
ff:af:1a:69:66:7b:24:85:c6:c4:7e:ea:77:70:4d:
45:2e:b6:c9:60:5b:a0:65:47:6e:36:0c:b6:b7:19:
c9:09:93:5a:2c:b2:7f:f0:93:ab:19:24:14:da:bb:
50:f5:9e:4a:aa:c0:d6:70:c6:54:f3:4b:e3:ee:24:
2b:a0:c4:ca:3c:2d:ac:28:ab:84:24:9f:da:00:2e:
49:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:74:44:44:A2:BF:37:32:EB:E0:BB:1E:B2:45:43:91:82:47:CC:28
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/knRERKK_NzLr4LseskVDkYJHzCg.roa
sbgp-ipAddrBlock: critical
IPv4:
180.131.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:c4:1b:54:a7:03:1b:e2:e0:e4:f2:5a:3d:42:88:5e:90:65:
21:ac:ce:c2:53:4f:cd:6b:8f:0a:90:28:23:cf:01:48:02:89:
9c:86:21:73:94:90:0e:17:62:7c:1a:ef:c5:1e:68:61:5c:35:
87:50:ab:95:66:55:0e:7e:f1:6d:a8:01:44:ce:a3:92:5c:3d:
95:02:c7:e0:c0:cd:7d:f8:b4:0b:c5:76:9f:60:55:e2:e5:f0:
9e:96:42:7b:3a:21:9e:04:ae:bd:97:91:22:3f:9d:cf:0d:11:
32:d4:8c:6e:fb:d4:a6:1c:38:75:e3:c5:03:bc:18:c5:ab:0c:
0b:b3:57:a4:f8:72:f5:88:d7:f7:f9:19:4f:66:0b:5f:9a:96:
06:b5:b8:47:69:62:f0:77:af:e1:f6:da:f7:bc:e3:46:96:a8:
40:c8:c3:52:6e:94:eb:12:d4:b8:cd:37:37:62:dc:9c:e6:3f:
d6:37:28:6b:ac:04:99:79:6b:38:a7:d5:83:36:42:69:c5:80:
7e:6f:80:32:e5:13:a8:ce:0b:e0:be:ed:81:a5:df:aa:1c:bb:
6d:b4:0b:c9:2d:2d:f9:5c:c7:06:1e:b8:48:93:34:82:58:c3:
65:69:16:9a:9e:c8:78:58:c7:33:44:53:53:e0:c1:c3:d9:98:
1f:a3:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:44:15 2026 by rpki-client