
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/l8pxYlpLLJXpbCVJedInCmB1VCE.roa
File: l8pxYlpLLJXpbCVJedInCmB1VCE.roa (raw, json)
Hash identifier: canS7BWcH6Ng023O5zWKAAKrk9ClC32I3lX9fm5YbaA=
Subject key identifier: 97:CA:71:62:5A:4B:2C:95:E9:6C:25:49:79:D2:27:0A:60:75:54:21
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04C3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/l8pxYlpLLJXpbCVJedInCmB1VCE.roa
Signing time: Tue 31 Mar 2026 08:13:11 +0000
ROA not before: Tue 31 Mar 2026 08:13:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 219.115.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1219 (0x4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:13:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=97CA71625A4B2C95E96C254979D2270A60755421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:59:a7:2e:c7:cc:fe:fe:70:7b:32:97:6d:
52:2f:e3:c5:39:b4:db:c2:82:9e:c5:ed:e9:e4:7a:
a1:92:43:73:e6:9a:ee:42:59:a9:79:f4:a2:18:a4:
a1:a7:51:f0:ec:91:b9:b0:c9:76:50:b5:55:7c:cc:
a9:d0:6e:54:6d:b5:a4:81:ff:e4:ed:e2:9d:5e:f6:
2a:dd:81:eb:ca:c2:4d:d9:57:e7:e4:90:4b:e5:4b:
14:73:bd:ba:3c:fb:98:27:d5:21:3c:14:35:b1:06:
96:49:1b:fc:5d:66:98:91:ea:ab:d8:2c:f1:a4:20:
12:7a:a3:d1:6a:9e:0a:07:d9:e0:ee:2e:a9:af:bd:
c1:7e:4b:3c:2f:95:5e:4c:51:9c:dc:a3:69:c6:28:
cd:63:9b:e2:47:0a:f0:2c:36:b6:5e:3d:e1:c9:34:
b3:82:8b:ed:6f:70:eb:98:38:2f:c5:80:b3:80:6b:
d3:1a:06:67:25:3d:67:74:4c:e2:8c:8e:b5:cd:d6:
15:1d:46:4b:e6:3c:85:24:77:f9:6d:0e:de:32:30:
43:a8:df:b6:18:c0:f1:8c:22:21:f9:58:68:e8:6f:
04:7a:8a:b8:19:1d:2a:44:8e:a4:40:ed:e8:82:d8:
4e:5e:f1:65:90:ce:4d:c2:d5:ff:ba:f0:6d:3d:ed:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CA:71:62:5A:4B:2C:95:E9:6C:25:49:79:D2:27:0A:60:75:54:21
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/l8pxYlpLLJXpbCVJedInCmB1VCE.roa
sbgp-ipAddrBlock: critical
IPv4:
219.115.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ee:21:b2:5d:bf:d6:90:25:92:15:5a:31:54:d0:40:96:61:2d:
9c:dc:5d:8e:1d:be:0f:47:2a:65:11:0f:eb:12:ca:c2:3f:b1:
61:53:da:6c:f0:65:8e:2f:f4:bc:61:60:ae:72:ee:0d:dd:6a:
11:32:bf:aa:56:28:31:cc:7e:19:d7:2e:9e:59:99:9c:c0:53:
cc:48:8f:a3:7c:31:75:15:87:7d:a7:99:0e:9d:88:69:55:3a:
18:d2:ef:d6:e8:29:71:6a:cd:24:0e:28:d4:c0:22:fb:b5:57:
5f:62:96:d3:35:42:d9:3d:cd:f2:75:00:f1:f7:0d:72:52:db:
8c:50:94:6b:fb:0c:d5:5f:18:12:a0:52:19:d8:8f:10:ed:58:
c3:ef:12:b1:4b:5b:d7:a7:9e:b0:a0:ac:67:b9:d5:ea:dc:ed:
1b:e5:ad:3c:f1:58:ee:2b:f9:9d:a6:74:ac:a7:08:cf:83:2e:
00:6f:7b:79:29:91:57:87:da:72:8f:95:29:53:8f:15:d5:4d:
22:e2:24:17:3c:f2:c6:11:6d:3f:02:18:48:62:6b:22:cc:64:
e5:c0:5d:49:a6:2d:e8:dc:28:9c:b1:2f:1a:85:a8:58:33:33:
e8:47:7e:59:58:1d:fe:29:f9:ec:02:85:d3:27:b8:b6:06:fd:
7a:fe:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:54:16 2026 by rpki-client