
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/o8eWjLaBh343LbRyBO8g8qnCr-o.roa
File: o8eWjLaBh343LbRyBO8g8qnCr-o.roa (raw, json)
Hash identifier: uq1gN/HVwfstloTBsThXHB7MNojptsljpBaLc7KHYUw=
Subject key identifier: A3:C7:96:8C:B6:81:87:7E:37:2D:B4:72:04:EF:20:F2:A9:C2:AF:EA
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04BF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/o8eWjLaBh343LbRyBO8g8qnCr-o.roa
Signing time: Tue 31 Mar 2026 08:13:10 +0000
ROA not before: Tue 31 Mar 2026 08:13:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 218.220.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:13:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A3C7968CB681877E372DB47204EF20F2A9C2AFEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:73:52:40:97:c5:17:b1:42:da:76:0f:02:
8f:a0:a2:e0:d9:ab:b1:12:a2:28:26:bf:27:23:27:
c0:58:48:21:3e:18:35:36:21:fc:8b:d4:47:cc:eb:
8f:8d:0e:98:95:fb:1d:4e:bd:76:46:99:3a:f2:89:
a2:11:46:88:ef:0c:b8:3f:b7:a7:4d:18:21:4e:72:
e5:6b:2b:6f:a8:92:b4:66:8b:b9:19:4a:67:ca:7f:
31:3d:05:7c:16:83:d0:d3:d3:72:a5:06:53:87:19:
02:62:fa:df:38:aa:16:27:4d:33:09:b4:3b:9a:a1:
e7:a5:7f:19:a1:84:4e:40:8c:0e:91:9b:03:d4:09:
54:c5:a2:4a:88:92:41:96:0e:96:53:50:ea:9c:19:
8b:ea:82:cd:1d:fb:57:58:19:49:de:ea:73:93:17:
28:9c:09:f5:b5:6a:74:ce:23:a1:b0:59:55:2a:30:
bf:b8:c0:92:0f:30:13:73:fa:55:62:2a:47:9a:47:
20:f8:66:47:ed:75:60:1c:32:d9:37:80:3a:7c:93:
03:72:16:51:2a:69:7d:a6:4b:10:e2:34:52:68:1f:
d5:40:20:f3:81:82:fe:15:44:3c:9a:22:66:ac:7b:
53:8f:46:f0:85:eb:ea:33:de:65:32:ab:4d:65:7e:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:96:8C:B6:81:87:7E:37:2D:B4:72:04:EF:20:F2:A9:C2:AF:EA
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/o8eWjLaBh343LbRyBO8g8qnCr-o.roa
sbgp-ipAddrBlock: critical
IPv4:
218.220.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:8c:dd:c7:f1:bd:06:55:1c:ec:8b:94:c7:15:3a:28:81:55:
fa:91:97:c8:af:9d:5e:7c:db:12:2a:08:cf:10:d6:98:f9:45:
0a:05:64:fd:78:e8:3f:2b:0e:c2:2f:76:39:cb:7c:39:6b:98:
0e:7c:5a:17:f4:c7:a5:b1:da:43:ca:ce:bf:93:71:d0:1b:6d:
08:8b:40:5d:9b:cc:bb:f6:f3:cc:6f:ee:8f:d7:0c:36:c2:88:
f3:3b:f5:da:73:e7:cb:07:67:4c:a1:59:89:57:09:a1:3f:a8:
9a:38:35:f9:72:b4:42:d6:17:b8:17:d2:92:4e:4a:21:5d:32:
ef:1e:54:a3:ba:34:4f:9b:a2:28:6b:b8:6f:a1:a1:e5:9f:a9:
fb:0f:72:89:77:41:cc:92:37:73:e4:18:61:ea:e4:81:a0:a4:
c0:33:62:6c:95:24:51:11:83:03:b7:e9:ea:80:4f:96:ab:11:
eb:6b:32:46:39:31:f9:c4:3c:d8:2f:52:2f:33:b2:48:07:b0:
bb:2c:78:f5:fd:88:f9:0e:6e:6c:03:63:5e:5d:67:07:a8:54:
5f:0f:a6:1d:d4:5f:7d:db:79:db:1d:d1:40:4e:3d:6d:d5:f2:
69:8a:a0:33:6a:1f:57:0e:37:34:34:97:79:0a:cf:aa:05:9a:
fb:98:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:39 2026 by rpki-client