
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ux2BnIcfl_qxWDUIIutFANmYiFM.roa
File: ux2BnIcfl_qxWDUIIutFANmYiFM.roa (raw, json)
Hash identifier: Bt3+mWen8StydmPSIytT+Q8ERRJqDK0/+S2llyDTRb8=
Subject key identifier: BB:1D:81:9C:87:1F:97:FA:B1:58:35:08:22:EB:45:00:D9:98:88:53
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0490
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ux2BnIcfl_qxWDUIIutFANmYiFM.roa
Signing time: Tue 31 Mar 2026 08:12:47 +0000
ROA not before: Tue 31 Mar 2026 08:12:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4721
IP address blocks: 211.19.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BB1D819C871F97FAB158350822EB4500D9988853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:7b:40:9f:5b:53:95:67:ff:64:d6:80:97:
5f:ad:c5:38:40:d9:ea:de:33:20:cc:dd:61:1d:03:
34:28:45:f3:81:0f:40:e2:0d:2a:9a:28:43:ac:55:
92:98:ec:42:8e:df:79:5c:18:4c:c4:ed:45:0f:be:
ea:16:82:ee:2c:45:8d:c5:8f:24:f2:d2:9b:2b:f8:
ce:2e:28:c9:55:e9:c4:2e:fe:57:69:7f:e8:78:2d:
97:61:00:75:40:74:18:1d:6a:7d:fe:53:7d:44:d5:
a7:f5:f5:5b:84:40:b3:29:c2:58:e8:62:05:98:ca:
11:22:d2:14:f2:db:ec:ea:56:94:82:6e:19:d4:ad:
bf:b1:f2:c5:64:16:17:96:2d:b1:cc:48:4f:46:4f:
6b:f6:f1:39:24:ed:af:37:49:2a:e0:56:50:cf:10:
aa:0d:93:da:4a:63:5e:e0:ca:99:39:01:73:68:14:
73:24:6c:dd:98:e3:1d:eb:8e:d5:9e:da:48:9a:d8:
22:08:56:6e:2b:75:30:0c:fe:cc:a5:21:46:60:41:
d7:36:4f:f4:fc:23:48:0c:1a:01:20:24:f8:a4:0a:
8c:9e:fa:94:55:0b:bb:b9:66:d5:2b:70:6b:62:f1:
86:84:99:c4:30:3f:73:14:c8:85:92:90:21:51:87:
f6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:81:9C:87:1F:97:FA:B1:58:35:08:22:EB:45:00:D9:98:88:53
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ux2BnIcfl_qxWDUIIutFANmYiFM.roa
sbgp-ipAddrBlock: critical
IPv4:
211.19.208.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:bb:89:cc:ce:e2:2d:48:e0:36:3e:ef:85:3b:90:55:09:ad:
02:15:b7:37:3c:33:c8:df:50:6f:6b:88:92:8b:da:39:ff:c6:
d9:a3:e0:5c:9d:ef:ed:d6:9b:bd:b1:1d:ae:4b:a9:65:e3:09:
ed:be:a9:cb:fa:dd:64:07:2b:33:e6:74:8a:00:ef:17:04:de:
b1:5d:ac:2d:f2:f4:97:87:38:93:e5:b0:1e:ea:ea:11:1d:79:
eb:34:5d:a7:f8:72:b7:e4:75:4e:85:0a:47:3c:4a:42:f5:15:
af:be:dd:19:a0:7a:db:ad:56:f2:9b:40:4f:ab:0f:c6:47:f7:
38:f9:70:86:30:0f:b5:05:bb:58:93:d3:bd:6f:d2:7f:27:f1:
d2:04:d6:86:00:f6:e2:71:83:55:88:aa:d7:bc:20:31:b4:e7:
5b:b2:ab:dd:cd:06:48:bb:e4:ec:93:be:dd:9c:92:e6:6f:16:
5a:31:c1:ae:ca:a2:0b:18:4f:fd:40:58:6c:77:79:87:9f:a4:
6e:6b:36:3e:ff:91:80:f3:92:a0:0b:0b:c8:eb:0a:81:9a:17:
07:e6:03:a8:29:e9:5b:06:74:74:54:b3:91:ce:73:2b:78:e8:
08:5e:33:da:f2:27:78:be:d3:0b:5c:67:6f:cf:9b:a3:ff:78:
94:fe:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:17 2026 by rpki-client