
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/_yhgD2OR3w9ltwtpatAXobO_5ZE.roa
File: _yhgD2OR3w9ltwtpatAXobO_5ZE.roa (raw, json)
Hash identifier: Dp8c+usO1AfI3exVtzuwYhZN/Hhi+aNi44p5laHBxoM=
Subject key identifier: FF:28:60:0F:63:91:DF:0F:65:B7:0B:69:6A:D0:17:A1:B3:BF:E5:91
Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial: 87
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/_yhgD2OR3w9ltwtpatAXobO_5ZE.roa
Signing time: Tue 31 Mar 2026 07:32:38 +0000
ROA not before: Tue 31 Mar 2026 07:32:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 210.151.64.0/18 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
Validity
Not Before: Mar 31 07:32:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FF28600F6391DF0F65B70B696AD017A1B3BFE591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:87:a4:14:26:7d:f8:7c:eb:b7:7d:c7:b9:
fd:e3:f0:a4:a7:ed:8e:36:83:da:1c:a0:0c:d2:54:
8f:d1:f9:ba:2c:f4:37:d8:86:15:ee:a9:45:b9:1e:
7f:27:3f:5d:98:5a:c5:7f:0b:46:33:fe:46:8f:50:
ed:b7:21:a5:14:c2:4f:21:37:03:6a:bf:bb:64:bc:
60:f7:b3:76:e7:27:1c:f2:fa:ef:49:6e:c1:5c:bb:
fa:ab:bf:5a:cc:10:86:2a:6f:33:ea:05:27:f4:8f:
a9:e4:9c:24:bf:18:3b:f1:e6:88:e8:ed:8b:eb:e5:
19:b2:bc:2c:5d:4e:00:01:aa:47:eb:71:e6:af:24:
97:a6:5b:2a:0f:a0:ba:ed:8f:2f:93:98:9d:a6:1c:
0e:f2:d1:b9:3d:0f:a8:62:39:fe:5a:1f:97:be:32:
79:26:28:ce:ab:37:b4:65:da:e2:05:c0:9b:c6:f1:
4d:a2:d1:e5:90:81:5d:23:7e:91:05:86:bb:7b:6f:
e5:24:59:57:24:da:dd:c9:8e:7d:83:5d:db:fb:5a:
28:f2:fd:08:73:29:c5:51:24:2a:4e:fe:cc:31:d8:
16:92:3a:48:5f:d6:9c:eb:21:72:17:9a:e5:1f:99:
aa:ea:1b:2f:a6:eb:4d:d4:35:26:00:48:7c:86:fb:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:60:0F:63:91:DF:0F:65:B7:0B:69:6A:D0:17:A1:B3:BF:E5:91
X509v3 Authority Key Identifier:
keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/_yhgD2OR3w9ltwtpatAXobO_5ZE.roa
sbgp-ipAddrBlock: critical
IPv4:
210.151.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b1:c4:a1:ec:8f:26:86:a6:86:40:0b:a4:51:1b:9e:98:87:1b:
c2:d9:8a:68:17:84:4f:2e:53:ee:b6:b1:71:1b:d7:81:ff:97:
0a:2e:e5:1f:8a:e4:ea:9b:f2:4c:dc:ae:a4:7e:f2:d5:33:83:
22:90:ad:23:1c:1a:a5:51:6f:11:1b:eb:f0:b9:9c:cc:9f:87:
d4:3b:d2:d2:f8:d8:71:6a:3a:82:71:5d:78:32:8b:dc:52:55:
8f:30:73:c0:4f:ba:9e:f4:09:00:dd:ea:fc:fe:87:08:40:2b:
ce:bf:88:2a:0b:b3:64:7f:4b:2c:83:a5:77:5f:9d:7b:aa:f8:
60:74:ad:42:0b:c3:50:69:08:7a:9b:ee:26:ab:35:65:67:96:
1f:24:3e:df:42:7d:aa:28:62:51:38:fb:fc:bd:2d:88:d5:a4:
3d:4f:5b:18:43:38:0b:46:b8:d7:f3:0e:d9:57:3c:72:85:fb:
1d:cb:48:22:60:b6:e0:1e:37:3e:cd:0b:5f:2e:28:48:0e:90:
1d:f5:10:ea:00:0f:c7:03:8f:df:dd:a2:59:9c:64:a4:e3:fd:
e0:79:52:10:78:d7:2d:21:9a:47:16:aa:73:3a:37:38:6e:d2:
6d:1e:68:63:f7:ec:88:01:34:0d:46:96:ef:0b:f5:21:07:51:
8c:8b:45:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:23:27 2026 by rpki-client