
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wn60u6y1MIbvcOWytP9qdkEoBhc.roa
File: wn60u6y1MIbvcOWytP9qdkEoBhc.roa (raw, json)
Hash identifier: uE/MVAZJ/LLRL1UabEB4q1ubiYk6BBSGFqDfz8/nHJo=
Subject key identifier: C2:7E:B4:BB:AC:B5:30:86:EF:70:E5:B2:B4:FF:6A:76:41:28:06:17
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 044B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wn60u6y1MIbvcOWytP9qdkEoBhc.roa
Signing time: Tue 31 Mar 2026 08:12:15 +0000
ROA not before: Tue 31 Mar 2026 08:12:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 202.162.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C27EB4BBACB53086EF70E5B2B4FF6A7641280617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:3b:67:28:05:94:7b:d7:bb:41:dc:89:9b:
dc:27:0e:83:61:d2:79:1b:e6:c2:cf:02:13:61:26:
82:2c:59:57:91:63:e1:14:b6:f5:b4:e3:08:3b:53:
bc:67:63:32:cf:da:68:44:d6:2a:25:64:e2:19:ea:
8e:47:ae:2d:05:f4:57:d8:66:d2:11:04:ef:34:5d:
74:8b:f0:b8:d2:7b:b6:5a:8b:0b:45:40:5b:aa:25:
20:08:b8:1c:7f:0c:a6:cd:62:23:81:90:de:8c:60:
72:47:21:e7:d8:a2:f5:35:42:8a:6a:cf:88:eb:c2:
7a:a9:80:f7:c1:0c:e3:68:ea:cb:85:5e:15:56:36:
0e:a6:ed:05:db:27:7e:50:41:55:85:77:7c:80:f7:
34:3a:99:d0:c1:e4:a1:51:be:5a:b2:4d:fb:c6:29:
62:70:c8:4c:61:6e:36:e9:e8:65:f4:a6:86:7d:c7:
46:15:90:74:5d:ad:16:d8:53:7a:bb:db:52:8d:9c:
b5:01:46:aa:a4:b9:b5:75:c0:ad:da:60:87:f6:df:
90:d7:1d:ab:0a:d4:90:a4:77:35:f7:c0:e2:eb:49:
76:ec:4c:c0:2a:21:22:f2:52:55:db:15:c0:16:d9:
d2:98:28:53:98:d0:c6:8d:f9:7b:b2:6a:e1:7c:8e:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7E:B4:BB:AC:B5:30:86:EF:70:E5:B2:B4:FF:6A:76:41:28:06:17
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wn60u6y1MIbvcOWytP9qdkEoBhc.roa
sbgp-ipAddrBlock: critical
IPv4:
202.162.128.0/19
Signature Algorithm: sha256WithRSAEncryption
d7:4c:24:a5:4e:da:52:fc:13:d0:fb:48:b0:97:f6:20:52:7f:
0f:c5:b4:f7:30:76:b0:8c:c1:fa:4a:47:1c:b2:86:c8:e6:8b:
60:d2:f8:87:48:de:b6:3a:9b:49:55:84:2f:4c:ed:f8:41:67:
dc:53:81:3d:4b:14:74:a0:d4:05:eb:de:18:ea:7d:4d:57:b7:
a1:d1:6b:ab:1b:82:fa:7b:a2:17:c3:5a:05:8e:ca:68:bd:ea:
97:b6:06:83:51:11:9c:7d:45:36:50:c6:0e:80:d3:b2:72:47:
1a:84:cb:15:98:e2:4a:8a:76:b8:b2:fa:7f:a6:6b:de:79:84:
44:a3:64:40:ed:b7:66:9b:92:c2:90:85:51:dd:77:91:a5:63:
8e:30:03:ee:b1:ae:7b:1f:ce:23:66:b3:85:77:47:dd:5d:3f:
44:dc:14:1f:3b:50:7f:40:ae:73:2f:d4:fc:49:92:55:3d:da:
80:60:1a:37:24:11:4e:80:8c:50:fa:46:35:b1:2c:69:69:05:
f7:83:7b:e3:e2:5e:d1:3e:85:8c:93:95:a1:a9:24:45:7d:0c:
96:d0:10:60:fe:93:5f:72:f1:3a:8f:4c:9f:9c:4b:1c:ef:b0:
3f:24:b9:b8:1c:67:65:81:5f:57:98:44:0d:12:af:5c:69:5c:
a1:da:80:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:57:27 2026 by rpki-client