
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/212LOsFp9tDjoG8k9mJ8JaSeszY.roa
File: 212LOsFp9tDjoG8k9mJ8JaSeszY.roa (raw, json)
Hash identifier: aUHlM6OaQyq/KS26hiwOt/ACCAoJC9oektEBilxOP84=
Subject key identifier: DB:5D:8B:3A:C1:69:F6:D0:E3:A0:6F:24:F6:62:7C:25:A4:9E:B3:36
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 80
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/212LOsFp9tDjoG8k9mJ8JaSeszY.roa
Signing time: Sun 01 Mar 2026 01:31:34 +0000
ROA not before: Sun 01 Mar 2026 01:31:34 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 7684
IP address blocks: 157.17.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: Mar 1 01:31:34 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=DB5D8B3AC169F6D0E3A06F24F6627C25A49EB336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:e0:31:16:ce:c3:6f:8f:c8:cb:a4:b7:aa:
e0:fd:03:89:4b:de:15:a8:a8:71:36:c0:50:e1:e9:
38:30:41:fa:3a:a0:be:8b:e5:5f:ca:12:c8:5e:03:
b9:ad:2f:d2:32:e3:1b:d1:df:87:57:dc:d4:53:ea:
b5:95:9c:fe:a6:01:1a:0e:90:b0:2d:59:2a:58:f3:
d5:e2:b4:ab:64:a4:f9:3e:fd:b5:49:a1:d9:0d:6b:
2c:11:d8:7d:42:91:95:1e:ba:8f:fd:28:74:bd:d1:
f4:68:3d:7e:83:82:cc:41:c0:04:cd:56:51:be:e9:
7b:88:5b:df:ad:6d:bc:82:c8:5a:0d:b8:5d:87:1e:
07:ea:08:f2:02:d6:6c:c2:41:95:59:a5:fc:c7:77:
64:c5:82:7f:dc:a4:01:0a:da:fe:46:7b:41:93:95:
88:51:06:d7:db:da:4d:1a:73:bb:01:0d:80:69:af:
10:bc:5d:2d:3f:e8:de:4e:28:29:1f:5c:cd:f2:75:
37:14:67:8b:08:02:70:33:48:5d:0f:3e:da:61:0d:
70:e3:02:3e:a7:5e:0c:73:41:3e:1b:8f:94:97:5f:
8b:e1:23:72:7f:b5:ec:56:a1:35:1a:a8:58:bd:4e:
62:59:a0:75:08:07:74:9c:e7:45:41:40:17:d6:e7:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5D:8B:3A:C1:69:F6:D0:E3:A0:6F:24:F6:62:7C:25:A4:9E:B3:36
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/212LOsFp9tDjoG8k9mJ8JaSeszY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.17.64.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:9b:37:b8:ad:2e:14:19:7d:cd:a0:50:dc:f4:84:1c:b8:e5:
39:bc:0c:b5:6f:94:17:14:3b:e1:d5:17:98:e3:75:fd:9d:2d:
bf:32:9a:be:ec:3d:19:9f:8d:97:61:27:a4:6d:18:46:a7:f7:
13:9e:74:86:66:8f:ba:fc:6b:98:f9:26:04:93:8e:72:55:12:
fd:39:ec:a3:22:bd:3e:a6:3c:33:1a:05:81:42:8c:f2:79:17:
c8:c0:af:13:bb:23:95:7f:7b:39:31:9c:be:bd:3b:e8:11:9a:
3f:ae:62:b3:e2:24:52:69:e1:35:60:bc:a6:a5:a3:18:4c:09:
f8:9d:42:fb:05:67:10:a5:68:ae:85:01:c9:58:18:13:3f:4f:
2e:ed:55:7f:eb:88:ea:2b:15:19:99:28:70:c0:02:60:d6:58:
b6:07:a0:36:a9:dd:2e:83:ae:9a:ed:c7:2b:87:18:36:da:22:
15:be:ad:18:90:d1:e5:56:6f:59:9b:7d:5a:04:a7:2b:23:72:
1b:13:d1:8e:f5:2c:dd:7f:a7:18:53:e4:f0:55:c0:00:a8:e1:
1a:33:e6:3a:07:57:f4:bf:a6:32:67:22:8b:2c:8d:8f:2f:07:
69:77:e5:92:cb:c3:d6:29:02:b6:7d:83:27:20:be:fd:14:2a:
42:b8:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:30 2026 by rpki-client