
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/zyP6cZ5pXnQJkIy4auUutwiUe64.roa
File: zyP6cZ5pXnQJkIy4auUutwiUe64.roa (raw, json)
Hash identifier: N5UeVxa3dVfVHEUzvD1KxNfsUT1e1LCi5uqGlE7o268=
Subject key identifier: CF:23:FA:71:9E:69:5E:74:09:90:8C:B8:6A:E5:2E:B7:08:94:7B:AE
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0411
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zyP6cZ5pXnQJkIy4auUutwiUe64.roa
Signing time: Tue 31 Mar 2026 08:11:43 +0000
ROA not before: Tue 31 Mar 2026 08:11:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 219.100.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 08:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1041 (0x411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CF23FA719E695E7409908CB86AE52EB708947BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:17:df:c0:93:6a:52:f3:f8:6f:d7:73:e4:a2:
92:34:2e:43:81:22:96:9f:75:c5:a4:dd:be:26:6b:
54:33:ae:43:ce:2d:ae:64:dc:1d:ae:09:b0:34:bd:
12:25:c4:83:bc:02:7b:e3:00:73:65:cc:72:0c:53:
53:fe:7e:53:7d:a0:df:80:cf:7a:a6:97:c6:a0:3e:
2f:03:cd:2d:01:27:a2:e6:dd:a8:c3:51:e7:27:88:
f6:d4:bc:0b:64:1e:95:eb:f7:48:2c:42:52:a8:85:
2c:d3:8f:cc:ab:91:a5:b6:81:ee:ad:42:2a:d5:89:
f0:39:77:cf:98:5f:ba:cf:3b:b0:8f:36:d8:50:e5:
26:3c:7b:3e:ff:69:4a:29:07:7a:87:97:61:66:d4:
55:b8:da:57:13:db:1a:d2:42:dc:47:25:47:da:1c:
bc:a5:ab:95:63:5a:ab:ba:39:bc:6e:b0:be:fc:32:
85:ef:6e:11:88:48:b7:1d:9a:35:72:86:15:46:05:
f1:74:4d:fb:13:78:5c:e2:a0:85:b8:ae:c3:da:3a:
fd:45:7e:0d:97:56:a2:cb:40:99:41:17:04:e2:b8:
45:fb:a7:70:2a:a0:7f:2c:0a:5c:02:b8:8c:6c:fa:
24:67:73:c7:62:cc:d0:29:fd:f0:dc:56:19:2c:8c:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:23:FA:71:9E:69:5E:74:09:90:8C:B8:6A:E5:2E:B7:08:94:7B:AE
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/zyP6cZ5pXnQJkIy4auUutwiUe64.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.152.0/22
Signature Algorithm: sha256WithRSAEncryption
42:e5:c9:15:1e:78:bd:3b:f7:24:7d:3d:1c:71:cd:01:ff:25:
34:30:c3:44:6a:36:97:c3:01:56:10:c3:0a:26:c1:29:91:38:
a5:0e:0e:fe:ba:2c:0f:87:74:92:39:9d:7b:22:50:f8:5d:ba:
49:f6:8e:e8:de:2b:76:ff:36:42:a6:e8:d3:88:20:f2:cc:0c:
72:5f:74:ce:16:fd:e1:16:2f:0a:42:53:4c:b1:03:67:15:c9:
3e:d4:c1:f5:cb:50:ee:b3:ff:f9:1c:b9:e7:5e:54:52:4e:59:
26:18:46:2a:e1:f0:99:a6:3c:be:ad:48:27:bb:e7:e8:5a:14:
fe:78:62:10:5c:fa:d2:dc:a3:f7:4f:cc:61:df:0c:78:f7:44:
73:01:97:7b:d2:e2:f1:31:c6:b3:ca:b5:c7:8d:53:22:1f:67:
55:81:40:bd:2a:c5:3a:67:f0:19:6d:b4:43:83:45:33:34:2c:
39:6d:c4:10:d8:2f:8f:e7:e5:00:57:32:04:4a:f3:e1:a0:66:
6e:2c:a7:a2:e5:73:ee:f9:95:1d:7a:6a:51:50:34:40:d6:82:
1e:6b:c2:81:85:59:06:ec:2b:29:0c:19:c7:f6:e1:af:2b:05:
01:45:aa:3e:59:06:e7:a9:af:f2:25:dd:d8:eb:9b:ff:00:ff:
98:ac:ba:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:55:22 2026 by rpki-client