
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/FmZ_XeKxYHrz_8O2o8IPCO7FuO8.roa
File: FmZ_XeKxYHrz_8O2o8IPCO7FuO8.roa (raw, json)
Hash identifier: /mBJvnFUTo5DYEpWkTc8SKFHTQmtkwUYqdjzcCWXMgs=
Subject key identifier: 16:66:7F:5D:E2:B1:60:7A:F3:FF:C3:B6:A3:C2:0F:08:EE:C5:B8:EF
Certificate issuer: /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial: BC
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/FmZ_XeKxYHrz_8O2o8IPCO7FuO8.roa
Signing time: Sun 01 Mar 2026 01:30:56 +0000
ROA not before: Sun 01 Mar 2026 01:30:56 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 7521
IP address blocks: 210.173.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
Validity
Not Before: Mar 1 01:30:56 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=16667F5DE2B1607AF3FFC3B6A3C20F08EEC5B8EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:e4:b8:ae:6e:98:31:e7:f4:0f:88:09:9b:
f9:33:7d:da:da:8c:6b:c5:8f:35:4a:73:c9:ea:28:
90:a3:11:56:8c:1f:ad:ac:d4:cc:1c:29:05:31:c0:
18:ec:ca:1f:4c:f9:ce:8c:3e:05:e4:f9:e7:0b:73:
a1:8f:66:5b:a5:17:68:8d:25:99:81:f9:df:9a:5f:
b3:e1:81:4a:25:dc:f2:08:72:f9:e7:5c:69:f6:69:
52:1d:7a:5f:39:51:b2:94:56:05:24:7c:18:c9:16:
dd:24:b0:18:dd:2e:c4:fd:dc:41:ba:2c:fc:06:02:
0e:be:83:28:c4:ad:82:74:28:af:ce:5c:e4:71:48:
cf:88:ab:62:6b:9c:95:28:b1:dd:c4:97:17:72:46:
95:ea:3a:db:26:04:3c:c1:bc:a8:7b:44:89:f3:3c:
59:b3:14:2d:eb:ba:9a:2a:7f:97:27:c9:7d:a2:7c:
51:79:63:ea:78:61:ba:b9:38:95:dc:42:14:ea:ff:
e1:9c:fb:e1:8c:28:d3:cb:56:06:a6:7e:8b:ab:7f:
ae:76:26:e7:d5:9b:17:b7:23:86:23:d1:41:de:00:
d3:64:ad:32:ff:a4:c9:3d:9a:49:be:4d:28:cd:a1:
81:22:eb:1f:aa:e4:d3:7a:ec:2e:ca:46:41:1d:00:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:7F:5D:E2:B1:60:7A:F3:FF:C3:B6:A3:C2:0F:08:EE:C5:B8:EF
X509v3 Authority Key Identifier:
keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/FmZ_XeKxYHrz_8O2o8IPCO7FuO8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.173.170.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2f:70:4c:8d:23:77:83:af:6a:39:03:6c:4d:48:91:96:f6:
21:54:d9:a7:b2:9c:33:1d:66:e6:72:97:68:22:29:9e:98:19:
25:ad:fc:08:b1:7c:44:fb:5f:cf:f6:08:17:52:87:8a:ab:7b:
6f:47:87:e8:81:ac:e1:56:5c:e1:98:3c:46:46:8e:d4:88:bb:
82:c1:54:1f:cc:80:f1:9c:40:73:ce:8f:46:d3:6e:86:0c:1a:
f5:bf:4a:e2:26:f5:6a:aa:b3:4a:1e:f8:2c:26:c2:81:1a:59:
95:62:6a:1b:69:e1:b8:88:df:8d:51:90:c7:77:09:6e:a5:80:
2a:e3:17:e3:f0:74:cb:c2:91:bb:6f:45:71:e0:22:0b:d0:bc:
4b:8b:1a:c0:38:9a:aa:73:75:c9:d9:eb:c8:42:33:b9:92:28:
e6:e5:9d:a9:06:41:33:a0:36:f5:62:c6:27:a3:99:ec:92:99:
d5:1e:93:fa:04:b8:46:32:15:e4:53:d9:19:66:37:35:c0:e5:
df:51:31:09:ce:b8:59:52:8f:e4:37:36:df:a0:79:68:8a:27:
54:45:b8:34:53:5c:b3:bd:6c:04:33:22:47:cf:b1:f2:e4:12:
59:c7:c7:5d:f4:8c:ba:90:8f:dc:88:53:be:00:21:65:4a:d9:
df:95:6e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:55 2026 by rpki-client