
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/833/Hy-QJCv90q06QcthUsQgRo2ZHzg.roa
File: Hy-QJCv90q06QcthUsQgRo2ZHzg.roa (raw, json)
Hash identifier: ycNcz6L/EQ6yZVEmbq+HfrO+4/ry+TmCgdYwMrbSDY4=
Subject key identifier: 1F:2F:90:24:2B:FD:D2:AD:3A:41:CB:61:52:C4:20:46:8D:99:1F:38
Certificate issuer: /CN=0D3BC2E4E3FE818E8EF64BF2F0414CF88AF82D82
Certificate serial: 2C
Authority key identifier: 0D:3B:C2:E4:E3:FE:81:8E:8E:F6:4B:F2:F0:41:4C:F8:8A:F8:2D:82
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/Hy-QJCv90q06QcthUsQgRo2ZHzg.roa
Signing time: Tue 25 Aug 2026 01:19:44 +0000
ROA not before: Tue 25 Aug 2026 01:19:44 +0000
ROA not after: Sun 15 Aug 2027 01:30:02 +0000
asID: 23629
IP address blocks: 119.47.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 16:34:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D3BC2E4E3FE818E8EF64BF2F0414CF88AF82D82
Validity
Not Before: Aug 25 01:19:44 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=1F2F90242BFDD2AD3A41CB6152C420468D991F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:b0:e2:03:94:ea:7a:91:92:4b:ff:e7:7d:
a9:0b:b1:74:38:92:d3:3c:fc:f6:23:b5:4c:31:e3:
11:6d:0f:61:ca:4a:b9:b9:f1:de:24:5c:52:9f:ad:
60:9b:02:1f:d6:f0:b6:97:30:cd:ed:f9:89:bf:85:
92:1b:c8:55:60:f3:dc:54:b9:33:da:1f:20:ca:d3:
82:c1:b8:ec:43:7a:e3:aa:24:f7:d1:67:36:86:42:
af:2e:70:4a:33:85:5a:42:9b:6c:d5:71:12:6e:6a:
d7:db:a8:d8:40:35:55:ef:72:86:58:17:bf:5e:28:
c9:37:71:45:36:94:0a:8d:47:31:8a:65:67:6c:8a:
22:b6:ce:bf:66:74:6d:9f:f9:07:4c:df:d1:57:04:
4b:94:15:2e:06:11:36:5d:d7:fe:60:30:40:74:62:
43:d6:64:64:c8:4e:68:de:b5:48:0b:db:8c:ca:ae:
1b:cf:1d:c2:e0:e1:db:01:9d:31:07:50:fd:26:ea:
aa:10:bf:86:4b:4f:0b:8b:a2:f4:14:5b:f9:0d:58:
1a:42:99:1f:67:07:db:a7:e9:6b:52:df:01:d7:8f:
b9:72:95:1e:f2:33:4f:3c:4f:ee:78:43:b2:61:51:
75:01:03:71:cf:6d:f9:31:93:a1:41:68:26:ff:49:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:90:24:2B:FD:D2:AD:3A:41:CB:61:52:C4:20:46:8D:99:1F:38
X509v3 Authority Key Identifier:
keyid:0D:3B:C2:E4:E3:FE:81:8E:8E:F6:4B:F2:F0:41:4C:F8:8A:F8:2D:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DTvC5OP-gY6O9kvy8EFM-Ir4LYI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/833/Hy-QJCv90q06QcthUsQgRo2ZHzg.roa
sbgp-ipAddrBlock: critical
IPv4:
119.47.64.0/20
Signature Algorithm: sha256WithRSAEncryption
67:7d:ae:e0:5f:f7:81:29:8c:b9:b3:8d:df:b3:a3:a2:0e:4a:
1b:ad:b1:24:52:2c:1a:9c:fb:f8:bb:67:9a:e7:83:c0:92:61:
15:41:54:1e:b5:a3:fb:af:69:34:15:81:69:8c:6d:d2:d1:cc:
aa:a9:c2:f2:d1:30:ad:25:c4:9d:64:c8:ef:ad:78:ae:f7:c0:
4b:28:cc:62:76:7a:8c:83:fb:9f:38:cd:20:bd:08:df:f1:86:
ef:a8:57:e4:f6:e7:33:ea:be:af:b9:55:e2:2d:50:94:b6:8f:
34:d0:6e:aa:61:f6:12:f1:53:d0:ee:02:fa:06:ad:1d:24:d2:
1f:56:4c:29:e2:1b:0d:61:1e:41:5a:9d:5d:14:59:63:07:89:
ac:b6:5b:05:34:3e:08:73:2e:ee:08:d4:dd:9a:e8:02:60:29:
0d:13:d7:d8:e1:bd:6f:66:f1:6f:e3:ea:a3:0e:67:5d:b5:6f:
9a:25:ec:0f:14:4b:57:20:47:1a:23:7d:49:63:ad:87:21:2a:
4d:16:b7:af:7b:b5:76:d5:54:c7:01:88:a8:aa:4d:d1:db:1a:
85:1a:82:d5:60:fe:57:06:ca:b5:db:bb:b9:07:9f:19:18:11:
e5:c4:a9:4a:3b:c3:44:0d:c6:77:24:3b:5e:b1:70:59:29:6a:
cc:89:78:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:18 2026 by rpki-client