
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/vYShfhgxma5ARYn6cUOKIjwOitY.roa
File: vYShfhgxma5ARYn6cUOKIjwOitY.roa (raw, json)
Hash identifier: xQqAzoRmJNYmXTi2U8Z4MrE5W8q+EbxFd3x+5FQf4vk=
Subject key identifier: BD:84:A1:7E:18:31:99:AE:40:45:89:FA:71:43:8A:22:3C:0E:8A:D6
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0474
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vYShfhgxma5ARYn6cUOKIjwOitY.roa
Signing time: Tue 31 Mar 2026 08:12:34 +0000
ROA not before: Tue 31 Mar 2026 08:12:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4721
IP address blocks: 123.98.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1140 (0x474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BD84A17E183199AE404589FA71438A223C0E8AD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:76:c9:2a:00:3a:ec:44:c9:c7:23:07:30:
7f:74:24:0f:ac:5e:82:13:c7:10:82:3d:bc:9f:f8:
eb:26:94:f8:61:7b:6c:1a:87:40:bd:3b:a0:0f:15:
9a:90:e1:55:73:97:0b:20:b2:b5:f9:96:2c:81:86:
b3:bb:90:be:42:a0:f3:ec:54:01:96:92:2f:9a:25:
8d:a4:8d:e7:37:2e:b0:89:86:5a:94:8c:08:78:3e:
98:91:1a:3c:86:24:af:12:18:58:4d:b3:75:6b:8b:
3f:e5:27:88:94:9a:ec:8d:d7:4b:83:a8:f3:24:53:
33:12:3c:87:f7:34:7f:3d:14:37:dc:56:46:87:a0:
dc:f7:f9:ad:25:40:b1:8b:26:33:a3:7f:01:5d:a7:
80:dd:aa:17:97:a1:6c:f7:9c:df:70:d5:78:86:cb:
39:22:e7:7c:b9:04:22:93:41:6b:33:55:dc:45:d6:
3e:a0:c3:2a:af:3f:28:12:21:d4:9a:b7:4d:36:bf:
28:09:8a:dc:70:7d:ca:34:f3:01:4f:0a:21:cc:46:
b2:33:57:59:d2:6c:6f:23:4c:71:83:7b:1c:97:ec:
09:02:46:e0:3c:a2:af:08:a4:66:22:4a:6f:2d:5f:
70:2d:7f:b8:ea:3b:de:49:1a:89:5f:df:69:c7:a4:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:84:A1:7E:18:31:99:AE:40:45:89:FA:71:43:8A:22:3C:0E:8A:D6
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/vYShfhgxma5ARYn6cUOKIjwOitY.roa
sbgp-ipAddrBlock: critical
IPv4:
123.98.224.0/19
Signature Algorithm: sha256WithRSAEncryption
85:3c:50:d8:d5:ee:b7:02:76:f1:c1:72:26:a9:20:ab:e7:e4:
cf:2e:67:62:a0:1a:a0:ba:80:8a:a1:45:64:dc:74:69:58:82:
88:5c:d6:d5:1b:69:07:1a:96:03:13:9b:20:22:0b:3e:b3:dd:
03:87:df:90:78:3a:19:d4:07:26:7b:2d:bd:5d:41:59:5a:48:
e9:e8:27:37:8a:0f:71:92:e7:1e:21:23:af:83:c5:45:7c:2e:
c9:05:e8:a2:19:b6:cd:3c:c9:d6:71:40:1e:02:0e:ff:cb:71:
96:94:f2:75:e5:cc:4a:c3:75:65:61:b7:40:67:11:c2:c1:8f:
e6:7d:a1:ca:e6:57:34:d7:c5:d1:ea:7a:90:b2:51:70:ed:e3:
87:51:5f:7c:ff:15:f0:ea:ac:00:30:20:dc:46:1e:8b:d8:93:
c8:b8:28:66:9f:80:25:fe:00:f2:f6:fc:db:7b:73:2f:f0:12:
4f:fb:93:9e:23:13:fa:0e:cf:e7:c1:4a:c7:01:f9:3d:fc:4f:
a5:14:3a:8f:91:af:07:c2:c3:99:7c:08:ad:cd:8b:d1:85:d7:
7f:d6:71:ab:1b:9a:5d:3c:05:e0:78:e4:58:46:06:00:fa:b4:
13:f5:f1:dd:d1:6d:15:c0:60:b3:d4:8a:f4:9e:89:16:a8:96:
0d:26:8d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:48 2026 by rpki-client