
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/6ZM2NBWQHWUzZnIKsjKQIBiW9fo.roa
File: 6ZM2NBWQHWUzZnIKsjKQIBiW9fo.roa (raw, json)
Hash identifier: r+cXyBXIu5aJHfdOqYlN8us8tz0S1/fZSCgLPcY+wZU=
Subject key identifier: E9:93:36:34:15:90:1D:65:33:66:72:0A:B2:32:90:20:18:96:F5:FA
Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial: C6
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/6ZM2NBWQHWUzZnIKsjKQIBiW9fo.roa
Signing time: Tue 31 Mar 2026 07:27:20 +0000
ROA not before: Tue 31 Mar 2026 07:27:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7521
IP address blocks: 210.173.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
Validity
Not Before: Mar 31 07:27:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E993363415901D653366720AB23290201896F5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:59:3c:55:b4:23:9e:38:96:55:9b:7a:8d:
73:8a:9d:23:e8:34:b1:ff:c9:f5:12:58:5f:ab:93:
d2:84:0f:64:96:49:bf:17:b6:3d:6f:49:8d:c2:d0:
c1:2b:cd:f3:0d:76:9f:da:d0:c9:ad:62:f3:4d:7a:
a4:15:81:67:84:6b:56:39:ff:03:50:26:99:2c:02:
b2:ec:91:05:2b:a2:b1:c8:e3:81:5a:01:30:89:fc:
dc:43:44:85:a5:79:70:70:39:ad:cf:e1:57:4f:2e:
bb:9f:49:4a:d5:1a:1c:6d:2d:42:e8:79:f3:35:2f:
bd:89:48:80:66:2b:a0:f6:75:4a:4a:88:83:9c:5e:
86:bf:80:cc:c3:36:b1:e4:7d:1e:8a:e9:f5:5b:02:
61:2b:ef:cc:c5:88:2f:68:31:2c:90:91:13:c5:7f:
43:de:ca:13:a8:5e:47:b9:03:fe:82:77:02:35:e0:
b3:0b:c4:39:71:18:53:86:89:75:aa:db:63:0b:d5:
98:c4:a1:ab:38:e1:32:c8:cb:9c:d2:ba:f0:c2:58:
66:49:fb:f5:82:5e:46:09:50:5d:3d:ae:d5:09:35:
16:05:b7:72:07:0a:ab:75:93:7f:ac:95:01:0b:fc:
29:a0:29:bd:e7:0f:99:be:b9:51:00:ea:ec:96:e8:
94:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:93:36:34:15:90:1D:65:33:66:72:0A:B2:32:90:20:18:96:F5:FA
X509v3 Authority Key Identifier:
keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/6ZM2NBWQHWUzZnIKsjKQIBiW9fo.roa
sbgp-ipAddrBlock: critical
IPv4:
210.173.168.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:39:4b:7f:c4:d0:24:34:1e:19:d0:3e:4a:58:a4:dc:f0:9b:
66:13:0f:93:b5:14:9b:e0:72:83:8b:88:c9:72:7a:69:a6:11:
c2:b7:7c:c7:f3:70:f5:a5:6a:be:91:7e:11:12:e2:ef:fd:3b:
b9:4d:20:0b:1d:d0:f9:7b:fe:1e:ff:4c:d1:81:aa:b9:e3:d2:
aa:52:b6:b8:a1:16:d4:13:fe:f8:c4:36:0d:00:0b:0f:af:9a:
93:dd:d9:96:90:13:92:cd:16:fe:e8:29:47:5f:0f:4c:29:82:
14:d5:df:ad:45:d2:24:89:97:de:00:87:e0:82:d6:19:e2:f0:
37:71:fc:b7:4f:58:dd:0a:b2:df:f6:dc:82:17:a9:58:d9:a5:
b9:39:96:28:ca:a6:a2:5c:44:ee:1f:d7:66:d6:64:11:0c:62:
83:48:a8:cc:17:d4:7a:04:ae:c8:14:ed:c4:7e:bb:f6:75:dd:
3f:93:41:ee:ad:28:db:00:d5:91:70:a4:19:37:39:62:48:42:
27:a6:ce:1b:c5:22:dd:a4:8e:2b:04:96:e4:ba:97:c2:7d:54:
80:fd:f4:fc:b7:ce:2d:2f:ae:f7:df:e7:ed:ee:53:c1:5a:f0:
9b:9d:b6:de:33:0c:ee:75:73:1b:12:d9:14:7e:5c:ed:32:71:
80:ea:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:21 2026 by rpki-client