
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYj1_t6tm9zqm8eWxoKvZp3bwwo.roa
File: tYj1_t6tm9zqm8eWxoKvZp3bwwo.roa (raw, json)
Hash identifier: b1MGzupZaV29wvdPFLieXc8XFQc9C00jjF2f9nXc2l0=
Subject key identifier: B5:88:F5:FE:DE:AD:9B:DC:EA:9B:C7:96:C6:82:AF:66:9D:DB:C3:0A
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 042C
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYj1_t6tm9zqm8eWxoKvZp3bwwo.roa
Signing time: Tue 31 Mar 2026 08:11:56 +0000
ROA not before: Tue 31 Mar 2026 08:11:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9378
IP address blocks: 219.124.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B588F5FEDEAD9BDCEA9BC796C682AF669DDBC30A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:b0:05:a6:2f:be:79:0c:1c:70:0c:d3:2d:
c9:02:03:28:d7:54:ff:c8:39:97:23:26:a5:8a:24:
a3:7f:2c:64:70:f4:9c:cf:54:16:a9:4b:b4:64:7d:
1f:c4:f8:b6:af:99:5a:75:20:2d:53:93:f9:ae:e2:
35:a1:f4:03:df:f3:41:4f:70:65:f4:bf:cf:cc:e7:
24:65:73:b1:9a:74:d1:2f:7d:d8:a9:78:86:14:d6:
cd:be:b9:bb:4c:1f:e6:26:b2:42:b2:46:c2:0e:7b:
bb:95:64:6c:b5:f5:e2:ee:d9:6d:37:76:6d:53:f7:
2a:08:9c:db:57:9f:b1:01:68:f0:7f:7f:22:52:06:
6f:fc:a1:07:71:6c:b7:67:b1:09:b5:e1:6e:fc:ce:
b7:26:3f:94:1b:10:df:98:a5:7b:c2:20:08:ad:20:
80:40:be:e3:65:c8:ea:c4:f0:3d:b5:c1:2f:eb:df:
99:44:12:d5:67:dd:5a:56:37:bb:b4:c4:50:74:c5:
86:27:89:cb:b4:a5:93:ae:35:01:d1:87:64:0d:58:
97:f0:c4:71:30:12:8c:dc:f4:ff:55:cc:61:21:3b:
3c:2e:9a:97:a2:51:14:6f:8e:75:d1:35:4a:04:8b:
00:14:4d:23:85:5d:28:4b:bc:40:0e:a0:73:29:3f:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:88:F5:FE:DE:AD:9B:DC:EA:9B:C7:96:C6:82:AF:66:9D:DB:C3:0A
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tYj1_t6tm9zqm8eWxoKvZp3bwwo.roa
sbgp-ipAddrBlock: critical
IPv4:
219.124.16.0/20
Signature Algorithm: sha256WithRSAEncryption
33:11:dd:a5:02:e7:0e:36:e0:b0:f1:3e:08:fa:e8:b2:a4:04:
f4:57:9d:b6:5e:d3:16:3d:57:be:f7:3f:c0:7a:8d:f8:6c:5f:
ad:b8:c7:fa:35:97:e2:dc:7e:31:f2:89:b9:28:bd:52:f1:be:
70:6f:98:d1:5a:33:f1:8d:a7:f2:82:6c:94:c7:8f:27:bf:12:
ff:87:33:cd:16:a4:ae:52:23:91:99:c6:dd:01:63:0a:a0:72:
86:50:ce:51:ae:8b:65:ec:9c:d0:95:d1:ce:48:8d:b5:8a:38:
75:1f:3b:bc:51:d0:f3:fe:fe:9d:11:53:51:24:97:25:5a:f6:
b5:36:9f:25:a8:43:98:02:87:21:80:0b:1a:9c:af:e4:ea:12:
36:9a:bb:bc:0d:77:a6:e4:02:8f:1e:e2:5a:57:73:14:8b:cd:
71:7a:7f:2d:d0:0f:c5:8d:c6:8a:56:d6:02:b7:3f:26:ba:8d:
3d:e0:b9:d4:44:b2:d0:28:99:f6:9a:c0:be:f7:3a:00:53:38:
c2:fd:d7:d2:75:53:b5:fd:ff:1c:a6:71:dd:25:7e:34:a3:0c:
5c:69:8b:13:00:60:8b:d2:e0:21:47:97:fa:54:e3:87:a8:d9:
6d:4d:c6:2a:f5:d8:9b:00:45:82:d5:96:cb:3c:f4:71:c7:03:
68:60:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:44:17 2026 by rpki-client