
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/q-cHn3SyxMWm_oSpGK1NQVZwZKE.roa
File: q-cHn3SyxMWm_oSpGK1NQVZwZKE.roa (raw, json)
Hash identifier: wJVVZE1S8FhjS2TkS7pweucMYg826oq/NIpf06eJiwg=
Subject key identifier: AB:E7:07:9F:74:B2:C4:C5:A6:FE:84:A9:18:AD:4D:41:56:70:64:A1
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04B3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q-cHn3SyxMWm_oSpGK1NQVZwZKE.roa
Signing time: Tue 31 Mar 2026 08:13:02 +0000
ROA not before: Tue 31 Mar 2026 08:13:02 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 122.102.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1203 (0x4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:13:02 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=ABE7079F74B2C4C5A6FE84A918AD4D41567064A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:3f:51:c5:fc:83:ec:bb:16:24:15:80:96:
68:60:9a:37:62:9b:73:fb:98:03:fc:c6:b4:fd:18:
b9:b9:0e:52:4e:1e:12:87:dc:e9:77:c9:70:d5:2e:
56:a1:de:a5:0f:af:d9:f5:25:48:95:79:ff:7e:6c:
37:f7:40:a5:77:43:2a:2e:c8:57:36:6b:8c:17:1c:
7d:30:4b:43:cc:54:4f:e6:3d:72:c3:1f:ef:3d:de:
19:9e:b1:e1:1f:98:63:b2:0f:4e:45:79:00:d8:6c:
b7:30:55:aa:46:1b:53:d3:99:55:6a:5e:9d:dd:8c:
93:7b:7d:db:22:bb:4a:e4:e2:1f:47:91:a1:ea:37:
ef:c4:fc:5e:f2:9f:6e:73:2b:24:ba:8e:cb:91:91:
51:67:be:f9:10:7a:46:c8:fa:c1:e0:d9:6d:c0:03:
16:11:54:ea:a3:c3:43:76:dd:11:4a:e3:69:ca:7d:
62:89:6a:32:e6:81:57:a7:ac:ce:cf:13:9a:32:26:
9d:3e:64:a1:c1:20:8c:a7:7a:64:8d:7c:f0:53:44:
ef:ab:26:c5:57:e3:70:8d:5c:53:67:39:e8:ee:48:
c2:88:4b:02:10:90:f4:f9:32:42:80:af:78:d2:a1:
73:3e:c9:a7:64:f2:cd:38:25:e9:19:1e:d1:0e:72:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:07:9F:74:B2:C4:C5:A6:FE:84:A9:18:AD:4D:41:56:70:64:A1
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q-cHn3SyxMWm_oSpGK1NQVZwZKE.roa
sbgp-ipAddrBlock: critical
IPv4:
122.102.128.0/17
Signature Algorithm: sha256WithRSAEncryption
51:a0:ec:a7:bb:38:02:16:24:32:78:fc:19:be:3b:f5:48:a6:
0e:6b:91:90:13:5d:9b:b1:c3:17:90:2f:05:40:33:c4:e4:6c:
33:17:60:48:39:97:4c:6a:1c:bf:12:09:e0:9d:c3:c0:24:49:
c6:9e:dd:65:67:2b:22:6d:cc:70:b4:52:97:ed:d3:98:47:86:
6f:16:8e:87:48:6b:81:32:1c:d6:26:ff:00:7c:67:03:4a:9b:
28:f2:02:58:ce:dd:51:13:dc:ae:eb:d9:5c:79:6a:a1:0f:8e:
28:92:69:60:58:70:3b:90:1b:5a:0f:b5:7e:c8:28:68:2e:02:
b2:8a:5a:8e:64:bc:8c:15:2c:df:d9:ed:5c:27:ea:0a:a0:e9:
e5:de:1a:5a:5f:94:f8:27:c3:2c:b3:24:9d:00:25:f2:11:a3:
68:1b:86:60:ac:a5:b0:82:b5:b2:b3:da:f7:3d:7d:6b:9d:30:
36:cf:f1:4a:9d:b6:32:60:2e:7b:ff:53:aa:39:e5:27:a0:a7:
63:7e:17:0a:89:51:1e:70:b4:a0:db:b7:2b:df:d0:63:af:86:
02:1b:e0:ac:d0:11:75:44:c8:92:14:bb:db:c6:c1:eb:89:57:
64:93:d9:44:90:74:bd:16:ea:51:9c:3b:5b:56:98:9b:f1:ae:
e5:18:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:56:45 2026 by rpki-client