
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zSOg2V2NelFo5OHUYFAdv1U0OsY.roa
File: zSOg2V2NelFo5OHUYFAdv1U0OsY.roa (raw, json)
Hash identifier: zb+h2Jul9Kwkdr6+yns0looK5gRfMUeNV759jcjLSGE=
Subject key identifier: CD:23:A0:D9:5D:8D:7A:51:68:E4:E1:D4:60:50:1D:BF:55:34:3A:C6
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 042A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zSOg2V2NelFo5OHUYFAdv1U0OsY.roa
Signing time: Tue 31 Mar 2026 08:11:55 +0000
ROA not before: Tue 31 Mar 2026 08:11:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9378
IP address blocks: 218.45.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CD23A0D95D8D7A5168E4E1D460501DBF55343AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:ea:af:0d:2e:bb:71:f9:bd:14:bf:61:c9:
2e:bb:99:78:28:3c:ac:d2:21:1e:3f:e7:b9:33:48:
ea:24:61:48:5d:6a:49:f9:86:01:0e:5b:c3:a2:a3:
36:11:a9:29:93:bc:9e:c0:a1:d0:cf:d4:5d:3d:60:
92:66:8c:7b:05:78:d9:c2:12:0c:88:b7:04:90:43:
20:ff:c6:a1:a3:2c:22:0c:45:52:d5:5a:71:f5:0f:
ba:e7:4b:94:bb:81:2a:fc:bd:6c:09:79:8c:52:b6:
7c:1d:4e:68:45:80:37:82:8f:d6:51:8e:6d:74:b4:
c0:d1:c7:0b:48:10:12:f0:72:e2:f0:3a:bb:b8:5d:
2a:0c:3f:d8:3f:c7:30:f1:08:a5:55:f2:cc:5b:33:
7e:32:aa:f1:c7:9f:fa:4e:91:87:0a:fb:02:07:4c:
d7:1f:79:75:49:88:26:b8:99:ef:77:35:d6:90:0a:
39:d7:1d:be:9a:e2:7f:4e:fe:dc:c9:63:d0:7e:c3:
ee:f5:d9:a8:b2:b4:73:3b:84:3b:a2:b0:e1:7a:56:
dd:4f:3b:5b:16:8a:0a:ca:d5:bc:db:27:a3:95:81:
4e:95:6c:18:be:7a:7b:eb:5f:03:93:a0:c1:a5:65:
cc:dc:9c:0c:84:c7:97:ff:ef:23:e3:ec:f8:28:4c:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:A0:D9:5D:8D:7A:51:68:E4:E1:D4:60:50:1D:BF:55:34:3A:C6
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zSOg2V2NelFo5OHUYFAdv1U0OsY.roa
sbgp-ipAddrBlock: critical
IPv4:
218.45.112.0/20
Signature Algorithm: sha256WithRSAEncryption
d5:9d:a2:b9:fb:ee:04:89:cc:dc:8f:53:09:39:5b:f2:50:87:
23:92:6b:1d:d8:f8:a0:c7:56:2f:57:40:1e:0d:28:31:23:bb:
e9:63:77:68:95:05:c9:cc:2c:a5:92:9c:62:f9:75:01:e3:2a:
bb:3a:29:12:2c:11:2f:7f:09:62:6e:21:5f:77:79:dc:78:9a:
56:56:ee:ba:64:c7:c4:f6:d8:c1:e1:62:2a:a2:4c:a8:b9:64:
bf:f0:2d:18:09:d7:38:1c:b5:0c:1e:99:3c:4c:af:9f:fa:ba:
fe:77:6d:27:60:44:12:76:b8:22:8b:9a:f3:00:13:7b:0c:96:
06:af:0e:78:57:ab:fc:fb:01:7c:77:16:1c:c2:41:cc:f9:20:
59:b8:d5:8f:df:a6:ec:59:ed:c2:72:54:6e:67:78:31:5c:42:
cd:91:ae:2f:f4:47:fb:b9:dc:fb:4a:66:a8:84:a8:09:86:6a:
2d:27:7d:4b:ed:74:5b:f4:dc:f7:12:11:ed:41:ef:60:56:0e:
e7:1b:fe:4f:70:cc:69:28:dc:2b:26:71:4e:92:d4:7f:69:a7:
e9:99:69:98:65:70:96:1d:cd:42:c1:bf:e6:4d:5a:43:af:70:
13:ad:28:52:7a:1d:b2:3d:33:29:a6:ec:e3:fd:1c:b1:32:03:
46:49:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:43 2026 by rpki-client