
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/p2H1GbGkb8ipC-2pqsrwE-qaE9s.roa
File: p2H1GbGkb8ipC-2pqsrwE-qaE9s.roa (raw, json)
Hash identifier: PBsrZCvG4ne+gSdoblGOQYRSaiKawRfiZt8CYaReRsA=
Subject key identifier: A7:61:F5:19:B1:A4:6F:C8:A9:0B:ED:A9:AA:CA:F0:13:EA:9A:13:DB
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 042E
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/p2H1GbGkb8ipC-2pqsrwE-qaE9s.roa
Signing time: Tue 31 Mar 2026 08:11:57 +0000
ROA not before: Tue 31 Mar 2026 08:11:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18134
IP address blocks: 113.197.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070 (0x42e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A761F519B1A46FC8A90BEDA9AACAF013EA9A13DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:7e:1d:00:c2:ac:5c:1c:76:79:62:20:34:
46:24:70:96:56:f3:ba:46:cc:79:59:6b:0f:4a:c6:
bf:b3:6c:63:ef:57:47:91:31:0f:de:de:2a:ee:ee:
31:3d:54:d5:a2:ad:ae:4c:6d:43:6c:1a:fa:27:cc:
d1:3d:6f:7e:27:cf:f9:46:fa:0c:91:27:a2:16:17:
51:7b:b0:75:3e:ad:9e:54:f5:8e:a8:55:25:2f:04:
d5:81:52:57:60:42:a5:26:23:50:00:53:30:d2:aa:
72:c2:05:f9:a6:97:94:c7:c2:2a:ca:65:d9:fe:38:
df:16:f4:7f:c3:3b:53:ad:24:4a:c9:f5:93:5b:0f:
0a:c0:40:70:4d:98:24:e3:5c:45:52:70:1c:7b:71:
c5:1b:7a:5d:56:47:08:90:d7:25:ae:5b:31:25:b5:
16:95:54:de:40:f9:13:49:95:92:c7:34:d5:ab:19:
a5:e0:fc:db:02:25:ff:cc:74:fd:55:7f:53:76:50:
f2:e5:91:97:60:fb:6d:fb:21:f2:ea:0c:95:6e:e9:
21:fa:8a:db:33:20:0c:9d:ae:40:7b:02:a2:80:19:
cb:90:a5:11:75:8a:8b:31:a3:a3:c5:2d:1f:8e:02:
1a:b0:0e:ef:d6:2a:60:a2:02:9e:5c:60:49:b2:09:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:61:F5:19:B1:A4:6F:C8:A9:0B:ED:A9:AA:CA:F0:13:EA:9A:13:DB
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/p2H1GbGkb8ipC-2pqsrwE-qaE9s.roa
sbgp-ipAddrBlock: critical
IPv4:
113.197.16.0/20
Signature Algorithm: sha256WithRSAEncryption
72:f4:5d:b5:8f:91:9d:c2:cb:16:8d:2e:7a:0b:4a:9e:31:4b:
e9:b1:4a:a8:6c:09:b8:e6:6d:a6:7d:32:b6:b0:40:81:49:30:
09:0e:23:91:02:90:77:fc:53:5d:b0:23:1a:1f:ad:cc:f4:67:
df:71:52:d8:24:6c:70:90:6e:a7:21:ef:bd:65:33:bd:6d:f2:
b5:12:bb:2d:0e:2c:cb:ff:a7:63:13:88:33:9f:84:1e:8f:88:
37:c1:2a:43:43:e0:7b:ae:f1:fc:00:16:4b:c8:79:f2:5d:55:
a2:a9:eb:50:b0:a4:c8:f0:1a:38:60:e2:ba:8a:11:5f:8d:6e:
b9:82:13:81:72:9e:a0:e2:0b:6d:47:bf:0a:8c:e5:9c:76:73:
47:f0:a5:c5:54:98:6d:d3:60:15:69:eb:a0:b6:9f:50:55:95:
2a:fe:54:dc:e7:15:2e:0e:36:d0:93:f9:2a:b7:a2:21:8a:43:
f0:e9:75:62:70:32:2f:5f:24:7b:2a:8c:94:b1:b7:6d:8e:60:
0d:fc:ff:5a:f2:8e:d9:d6:56:ab:7d:29:a7:b5:ae:54:f9:c6:
5b:6c:e7:91:43:e5:70:7a:51:79:42:c6:cb:c7:e6:cd:b2:4f:
e0:bc:46:d7:01:69:96:ae:cb:e8:2d:24:ec:b5:4b:6c:32:63:
71:94:1e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:26 2026 by rpki-client