
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Y-FYwII8s1AZcc4KurAVFlRDwSI.roa
File: Y-FYwII8s1AZcc4KurAVFlRDwSI.roa (raw, json)
Hash identifier: AvPYNV/RCwXo3jAjArDReDhbUBdJ/Ske/olT4HcrjTY=
Subject key identifier: 63:E1:58:C0:82:3C:B3:50:19:71:CE:0A:BA:B0:15:16:54:43:C1:22
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 02D3
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Y-FYwII8s1AZcc4KurAVFlRDwSI.roa
Signing time: Tue 31 Mar 2026 07:34:51 +0000
ROA not before: Tue 31 Mar 2026 07:34:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9370
IP address blocks: 133.167.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Mar 31 07:34:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=63E158C0823CB3501971CE0ABAB015165443C122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:7a:98:3e:08:43:1d:d9:29:1f:dc:08:6c:
81:68:a9:6b:70:3a:fc:eb:ba:de:d5:94:aa:e8:57:
a1:4d:0c:dc:3d:c9:fc:a6:fb:5b:65:e2:f0:17:e8:
1e:76:22:d3:af:71:70:10:ee:ab:0f:a0:ab:69:2b:
88:c6:cc:53:02:51:ba:24:22:31:6f:9f:03:ab:8b:
65:ba:4b:7d:a2:42:5e:b5:40:7c:a1:a3:94:4b:81:
3e:2e:fd:ac:db:eb:19:92:bf:b5:7f:b0:0d:07:b3:
bc:a4:3f:49:79:79:0b:96:0d:88:6d:cd:58:8c:f8:
16:ac:60:b9:2d:04:26:c3:d0:7d:5b:d1:19:41:cb:
6d:9d:4c:ce:ed:4d:d6:fc:16:96:4c:25:bf:39:66:
e6:cd:09:59:a0:6d:e2:f4:20:dc:30:3d:67:78:0a:
ae:81:c2:ca:79:9b:a6:94:29:aa:46:b4:ce:0f:b7:
94:6c:87:40:54:b3:e7:2f:88:51:9f:53:cc:cd:e2:
6c:cc:d0:4f:5f:42:b0:8a:a1:51:d4:b4:47:90:f1:
c2:0b:2a:53:92:58:9c:ef:54:39:ab:ca:69:9a:4a:
a3:b4:7a:28:34:99:5d:8a:4e:21:6c:6e:c7:69:03:
23:7a:39:ff:8f:db:81:5d:8a:76:52:b5:06:36:3a:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:58:C0:82:3C:B3:50:19:71:CE:0A:BA:B0:15:16:54:43:C1:22
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Y-FYwII8s1AZcc4KurAVFlRDwSI.roa
sbgp-ipAddrBlock: critical
IPv4:
133.167.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:cd:3a:55:a9:56:a4:15:fd:b0:db:ab:18:00:54:e9:07:18:
a3:4a:93:44:ac:b2:a7:8b:45:82:53:a7:5a:f7:4c:de:1b:23:
f5:88:75:d6:53:ad:1b:06:8f:30:4e:fa:5e:c6:2f:ed:22:8e:
ea:b5:bb:54:97:5b:32:ac:66:f3:6f:ee:77:e6:30:99:90:51:
2f:be:0d:bf:64:4a:14:6c:f3:d7:16:fa:77:1b:75:1c:a9:64:
45:97:6e:a2:2d:65:37:49:5a:81:3d:55:e2:fa:7d:53:24:97:
6c:e9:c3:93:96:94:9b:22:23:f1:ff:7a:cd:cf:12:3f:fc:64:
32:03:9e:2e:40:19:f8:ea:f6:51:10:90:65:74:b4:89:ff:39:
1c:58:6e:d3:22:8c:2b:26:fe:96:c0:81:a2:0b:b4:16:ac:ee:
2f:9e:7e:31:96:a4:40:96:ac:96:08:4c:dd:ed:64:d8:66:b7:
4f:de:ad:c5:da:48:25:f9:02:b2:1e:f4:2c:03:a2:97:fd:cd:
b7:d6:31:53:4e:69:9b:39:8a:88:16:87:c3:ae:6b:d7:0d:64:
f9:eb:89:a0:45:f8:de:86:6d:02:e2:e7:71:61:49:03:7f:84:
27:92:94:be:e1:5d:bd:5c:d7:f5:e0:b9:54:f6:17:1f:ac:05:
f6:f9:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:53 2026 by rpki-client