
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/YaysI-Uo8NmH1DKa8MUcEqHhSYQ.roa
File: YaysI-Uo8NmH1DKa8MUcEqHhSYQ.roa (raw, json)
Hash identifier: BEttYeQCrzZJVmbQuttZVCPCSYyV1YZ3+Bl/Z9ZHNjc=
Subject key identifier: 61:AC:AC:23:E5:28:F0:D9:87:D4:32:9A:F0:C5:1C:12:A1:E1:49:84
Certificate issuer: /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial: 67
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/YaysI-Uo8NmH1DKa8MUcEqHhSYQ.roa
Signing time: Tue 31 Mar 2026 07:49:28 +0000
ROA not before: Tue 31 Mar 2026 07:49:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7671
IP address blocks: 203.211.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Validity
Not Before: Mar 31 07:49:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=61ACAC23E528F0D987D4329AF0C51C12A1E14984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:66:b7:a1:f3:fd:ef:fa:45:09:84:4a:d5:
b3:32:e4:e9:3a:b8:e1:2e:75:b1:25:f1:e5:6e:4f:
96:7e:93:dc:ea:b8:97:4a:f8:61:94:56:ab:65:34:
c6:6a:d7:50:4f:ec:66:61:3c:a0:f9:4f:b1:21:89:
77:86:8e:88:2c:76:09:b5:b7:c3:7a:87:71:c0:20:
1d:13:70:e3:33:1a:87:0e:93:65:2e:19:7f:91:2a:
bb:30:29:70:b0:52:9e:63:49:40:2a:90:b3:cb:d2:
66:e4:0b:b2:89:92:ff:15:ef:5c:4f:16:53:2b:8b:
f9:c4:80:c2:b0:8e:75:a5:0f:fc:19:3c:dc:3e:a5:
d6:ad:35:37:78:b9:a0:8a:1c:44:17:c9:0b:49:d6:
3a:fa:ba:47:3b:d3:4e:0c:be:bc:ed:95:3c:22:0f:
58:79:a5:5e:ea:b0:7f:64:b4:3f:58:44:d7:13:ce:
4b:7c:2c:b0:cc:e8:33:7a:e1:f4:ac:fe:04:16:ca:
f6:a9:87:54:1c:3b:a2:53:dc:55:1f:ac:c8:cc:40:
8c:84:07:b3:5e:fe:24:f9:1e:4f:41:2e:ec:95:a7:
b4:ee:bb:c1:95:01:10:4b:58:21:b9:41:d1:e7:bb:
94:0f:3b:7c:b3:e4:ce:83:1f:f3:17:af:2c:43:94:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:AC:23:E5:28:F0:D9:87:D4:32:9A:F0:C5:1C:12:A1:E1:49:84
X509v3 Authority Key Identifier:
keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/YaysI-Uo8NmH1DKa8MUcEqHhSYQ.roa
sbgp-ipAddrBlock: critical
IPv4:
203.211.160.0/19
Signature Algorithm: sha256WithRSAEncryption
08:c3:b7:0c:e0:70:de:9c:90:86:b6:51:b5:49:32:64:a1:cf:
76:a4:30:d7:90:a7:53:62:a5:a5:f5:2e:42:75:68:8d:78:03:
01:4e:17:4c:97:ee:74:1c:7e:04:c7:9f:5c:66:f1:c3:4d:87:
c3:0f:09:eb:a6:94:6e:b3:17:20:1b:25:58:76:86:53:6d:c7:
45:99:1e:4b:97:11:91:45:a2:a7:bc:80:7f:57:10:44:9d:e1:
de:73:43:32:bd:e3:d6:93:25:42:59:6f:dc:5e:53:c9:3f:8f:
b8:74:5d:36:16:21:71:c2:e5:6e:1e:77:e4:4c:03:d6:f6:19:
a1:be:0c:f5:ac:f1:c8:82:b7:e6:2e:45:00:75:46:7a:9f:49:
27:a5:9f:3c:b6:13:f1:05:e7:48:08:42:e4:91:d2:8d:22:68:
42:9d:fd:89:c5:9e:16:b4:05:0b:24:3d:f3:46:66:2d:2d:4a:
8f:13:b8:c8:fc:9c:88:15:66:5b:65:2c:c5:f6:7c:bd:27:b7:
1a:3b:4a:2b:09:8c:2b:83:f3:7b:99:d8:ac:06:b2:28:98:2c:
07:4a:13:4a:d3:1c:67:da:79:24:83:89:98:50:be:c3:da:45:
d1:ba:7a:01:19:ed:c4:de:98:6b:c8:90:7e:55:fd:88:e8:b6:
b7:53:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:29 2026 by rpki-client