
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/WHobzPJBzpkVgN3FJ7zR6BkMD0k.roa
File: WHobzPJBzpkVgN3FJ7zR6BkMD0k.roa (raw, json)
Hash identifier: BVYiVKgIYtKVfxYk5UUy/SkKksB9SHU3IgCg6jgBFLQ=
Subject key identifier: 58:7A:1B:CC:F2:41:CE:99:15:80:DD:C5:27:BC:D1:E8:19:0C:0F:49
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: A8
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/WHobzPJBzpkVgN3FJ7zR6BkMD0k.roa
Signing time: Tue 31 Mar 2026 08:17:35 +0000
ROA not before: Tue 31 Mar 2026 08:17:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2514
IP address blocks: 61.194.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Mar 31 08:17:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=587A1BCCF241CE991580DDC527BCD1E8190C0F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:3e:4a:9e:a3:92:46:ea:35:8b:3f:86:42:
9d:6b:bc:50:fc:21:80:e1:6f:fb:49:73:ba:67:07:
34:18:b7:a4:e2:be:6d:3f:f8:32:39:f9:eb:ca:13:
d9:a6:da:b1:5a:9b:87:2c:39:ff:f9:3e:bd:b3:32:
2d:a6:ea:2d:33:1d:29:93:e7:9a:b4:cf:52:9e:6a:
2a:26:45:07:35:77:fb:63:03:87:25:36:33:a7:33:
14:b5:0a:15:c5:ca:6c:d8:3b:e0:4f:d1:a0:21:41:
86:43:df:34:2b:99:16:4c:00:f0:59:2d:64:3f:a8:
ec:99:19:85:21:4f:aa:e7:14:de:58:f1:db:c6:87:
d9:df:74:d1:9f:7d:00:3c:1d:8c:86:8e:32:3a:47:
1a:2a:03:ed:ec:5e:d5:a5:46:13:37:15:9c:f4:51:
87:ae:32:2b:9a:5b:27:43:c5:30:f1:da:e6:8e:1f:
95:84:3d:22:09:6f:3c:4c:a4:49:99:06:8b:da:be:
eb:bb:9b:86:90:12:b9:3e:7b:b0:a5:c8:c2:32:fe:
d7:f8:88:39:47:2a:e4:1f:0d:52:77:83:af:40:ab:
82:79:20:d6:31:ec:f8:bc:e8:34:11:96:d4:34:4b:
92:5b:04:15:99:29:9d:2a:ce:c2:01:9a:6a:c9:f1:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7A:1B:CC:F2:41:CE:99:15:80:DD:C5:27:BC:D1:E8:19:0C:0F:49
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/WHobzPJBzpkVgN3FJ7zR6BkMD0k.roa
sbgp-ipAddrBlock: critical
IPv4:
61.194.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:7e:00:97:47:ce:14:85:f8:48:87:87:da:fd:49:c5:61:77:
15:14:15:d0:6d:db:43:e3:5f:78:dd:96:b9:4e:09:80:5f:98:
cf:ff:ed:98:d9:46:83:e2:bc:5d:fd:bd:0b:e4:a0:7d:e1:42:
38:89:43:c2:16:55:90:b4:b0:07:be:ce:59:e1:79:c3:92:4a:
1c:af:36:75:29:50:c7:ee:f2:59:3c:95:ea:64:b0:66:f7:4a:
d8:d6:b7:22:1b:98:84:35:31:95:d5:98:3d:62:5b:80:a6:05:
69:88:e3:82:1e:f2:dc:d9:d0:ad:9b:c8:8c:f1:81:1b:b3:dd:
c3:cc:19:67:c9:0e:b8:59:04:aa:4e:8d:8c:78:f1:b5:22:ef:
7b:4d:85:8f:28:b3:e5:0a:82:28:a0:fb:0e:c8:8d:9b:85:72:
48:ca:ec:b1:84:d8:4c:f6:dc:a1:b3:2a:dd:2f:a1:35:3c:be:
2a:19:47:92:be:c7:39:55:b5:dd:11:db:17:db:e1:f2:f6:47:
6a:94:d8:cb:62:06:f2:eb:04:b2:a5:ae:92:6f:66:33:06:e3:
b9:7d:de:60:28:4b:9c:86:48:86:bd:d1:30:b6:c4:42:36:4f:
7e:9d:c9:d4:91:1e:1b:4d:30:6f:19:77:94:5b:6c:45:81:b1:
5b:54:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:46 2026 by rpki-client