
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nsC2GVhVSdkJ-KGbrSvMfhpsl_E.roa
File: nsC2GVhVSdkJ-KGbrSvMfhpsl_E.roa (raw, json)
Hash identifier: cq5/hRjhNcndZTgUhacgYYI+jjSFPBt4+qzvtuIRTmg=
Subject key identifier: 9E:C0:B6:19:58:55:49:D9:09:F8:A1:9B:AD:2B:CC:7E:1A:6C:97:F1
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04AE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nsC2GVhVSdkJ-KGbrSvMfhpsl_E.roa
Signing time: Tue 31 Mar 2026 08:12:59 +0000
ROA not before: Tue 31 Mar 2026 08:12:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9617
IP address blocks: 119.24.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9EC0B619585549D909F8A19BAD2BCC7E1A6C97F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:6d:00:97:63:bd:e3:0c:a0:b0:ed:2f:b0:
57:17:10:42:58:c1:c2:7e:b3:1c:59:87:99:aa:2b:
b6:4e:84:30:50:cf:6f:a5:da:49:92:d8:3a:61:37:
6e:75:9b:59:ff:39:80:f4:74:97:00:b6:a3:51:3b:
ce:63:8c:57:1f:58:31:58:5e:23:18:e1:48:11:52:
ba:3a:6e:93:f8:e7:76:f3:ba:6b:e0:93:69:c4:6d:
bd:55:cd:1d:a0:9a:12:cb:74:74:a7:78:c4:dd:eb:
52:4e:e7:0f:0f:8f:81:eb:3e:18:48:09:b3:58:30:
ce:e0:65:1e:6d:82:70:e9:0a:b9:db:34:c1:52:58:
d6:1f:38:77:97:c1:ea:51:33:3f:d7:b5:90:27:09:
b5:d8:0a:54:9c:ab:40:b6:32:66:b7:5d:9d:90:69:
94:a8:18:8d:51:84:b8:a3:2b:b6:dc:f1:ad:f5:15:
53:48:48:c1:cc:42:78:1c:9d:7b:57:78:06:94:38:
9f:4e:17:13:f0:20:eb:f5:6f:6d:f5:89:25:00:05:
a7:e5:a2:84:72:09:b6:da:e6:88:de:be:a1:81:59:
4e:16:d3:3d:03:42:7c:0f:ed:67:8b:0c:7a:c4:ea:
b5:11:07:81:da:f7:9a:77:c9:82:94:b1:4f:14:4f:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:B6:19:58:55:49:D9:09:F8:A1:9B:AD:2B:CC:7E:1A:6C:97:F1
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nsC2GVhVSdkJ-KGbrSvMfhpsl_E.roa
sbgp-ipAddrBlock: critical
IPv4:
119.24.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c9:79:ca:46:29:16:aa:69:03:fa:e7:2f:8e:1f:7c:bf:66:56:
b6:7f:3e:03:10:64:9c:b7:90:88:90:58:e2:79:67:5f:a6:c3:
9d:da:0e:73:30:ad:6a:63:ef:54:dd:21:3a:27:51:cc:0b:82:
94:fc:94:65:0d:d6:c6:0f:76:d0:be:0e:8a:02:14:2c:f2:7c:
77:5e:1c:0f:d2:eb:01:5a:09:11:e9:c8:54:58:3d:2a:de:86:
88:dc:1d:f5:5c:09:cd:be:05:73:af:72:95:5e:9e:31:ec:70:
07:ec:55:bf:21:c1:70:e7:f6:54:dd:c3:26:f0:d4:7b:d2:a3:
e7:ce:14:12:15:ce:3d:99:8a:cc:b9:49:d9:b0:b7:45:62:30:
7c:20:a1:02:6e:a7:c6:b2:e0:0b:86:36:60:21:89:84:18:70:
a1:2d:45:59:5a:57:9f:43:e8:d5:fe:f7:52:3f:f2:d6:4a:ef:
bb:6b:d6:8c:cb:ef:af:c2:57:4a:7f:e5:5c:d5:4a:d0:ca:4e:
24:f5:d5:91:70:d4:b2:1d:a3:f8:79:da:ec:97:1a:48:7b:a6:
ae:a1:9e:1e:c9:22:f5:50:8e:39:82:5b:14:d2:22:00:75:cb:
d6:1c:80:18:3c:d6:aa:64:7a:c9:0d:03:1c:1a:1d:d0:9f:3b:
05:f3:b0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:49 2026 by rpki-client