
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/tnh5ohPITAakIicLhzFMi97-pEE.roa
File: tnh5ohPITAakIicLhzFMi97-pEE.roa (raw, json)
Hash identifier: deIctx+qydIMeF6u9VjpZK8LWk51N8mr9RQQzfIipgM=
Subject key identifier: B6:78:79:A2:13:C8:4C:06:A4:22:27:0B:87:31:4C:8B:DE:FE:A4:41
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0419
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tnh5ohPITAakIicLhzFMi97-pEE.roa
Signing time: Tue 31 Mar 2026 08:11:47 +0000
ROA not before: Tue 31 Mar 2026 08:11:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 27.113.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049 (0x419)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B67879A213C84C06A422270B87314C8BDEFEA441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:85:37:c6:f5:b3:05:c7:5b:0c:70:51:8e:
21:46:a3:3c:a8:54:ff:90:ec:84:41:b7:e1:4e:a5:
9c:59:7c:c5:42:e9:8f:8f:6d:ae:91:12:be:d7:c1:
c0:69:4d:0e:ac:ef:71:c1:5a:43:ac:25:e0:11:a5:
6e:b6:87:67:18:20:dd:23:5a:d2:83:cf:1b:12:47:
80:4b:6c:1d:53:48:49:ab:a9:3f:c4:4b:b0:9a:a0:
18:18:2b:41:bf:f7:21:c7:95:be:12:69:05:86:cd:
69:d6:3c:22:b6:4b:6d:fa:7f:bd:b7:3d:59:89:d6:
b9:75:e9:d0:c2:f8:62:3e:ef:4c:e9:da:94:09:b4:
23:b7:26:b0:da:19:d9:dd:df:3e:7c:3d:f8:f1:4f:
cf:b4:17:47:92:10:79:40:35:ee:e1:5b:3e:43:2f:
3a:33:73:a7:44:96:6a:76:fb:ca:9c:2f:89:2f:20:
79:59:87:88:a5:f5:e0:b0:bd:20:88:61:65:e0:43:
b8:05:25:95:75:ac:57:9e:9b:26:80:9b:71:d2:76:
30:29:e7:e2:99:0f:85:db:f9:19:4e:88:85:0f:3e:
51:f0:5c:6a:21:14:06:b1:50:5f:ed:ba:80:cf:9e:
1e:29:c1:87:82:86:2a:50:dd:b9:79:10:b3:28:26:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:79:A2:13:C8:4C:06:A4:22:27:0B:87:31:4C:8B:DE:FE:A4:41
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/tnh5ohPITAakIicLhzFMi97-pEE.roa
sbgp-ipAddrBlock: critical
IPv4:
27.113.248.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:2e:0a:16:d5:7b:60:1d:4a:4f:61:21:97:fc:47:81:84:55:
4c:a7:e3:6b:ed:a9:a8:88:17:61:23:ec:35:16:1d:a8:6e:92:
03:fe:c7:e7:5a:78:ba:5c:27:0d:bc:23:81:b6:b3:73:c5:f6:
76:60:3e:de:43:16:b0:42:f5:97:04:0f:32:5d:c8:60:ea:2f:
00:d3:aa:16:44:18:dd:b7:d2:38:da:2b:cb:d4:7a:a7:63:7a:
62:cf:11:94:49:5d:b0:78:2a:16:8b:98:09:d9:1f:f9:2f:9c:
ee:e2:4b:46:a0:08:1d:ad:a6:93:78:20:46:46:4f:bc:5e:47:
22:b7:2d:b0:89:ae:77:e9:83:b3:2e:0b:0a:38:c2:54:5c:82:
45:c9:0d:f9:2c:d1:0d:7b:1b:b7:99:a8:0c:6b:6e:c0:5c:40:
d1:97:f5:a4:78:d0:92:f1:b5:fb:b6:65:98:55:30:d3:c6:cd:
cd:63:2e:dc:90:fe:66:68:2e:96:1f:26:a0:78:87:87:f4:df:
9a:c9:01:ce:32:39:92:1a:d8:e6:32:ef:72:43:d4:f4:35:37:
5e:5f:66:ab:fd:c6:11:ce:fb:bb:51:74:c3:73:d5:a0:a9:b8:
f4:1b:70:00:54:04:b6:d8:c1:07:e8:40:2c:4e:1b:06:70:0b:
41:a2:f1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:37 2026 by rpki-client