
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/yG5c7vhALgptvfamNJ3UPbZ48fs.roa
File: yG5c7vhALgptvfamNJ3UPbZ48fs.roa (raw, json)
Hash identifier: 4zUOlXGUrb3VzoeUFAy0+j1fQX1No+ckrbHGon1XbUU=
Subject key identifier: C8:6E:5C:EE:F8:40:2E:0A:6D:BD:F6:A6:34:9D:D4:3D:B6:78:F1:FB
Certificate issuer: /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial: 3B
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/yG5c7vhALgptvfamNJ3UPbZ48fs.roa
Signing time: Tue 31 Mar 2026 08:34:59 +0000
ROA not before: Tue 31 Mar 2026 08:34:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24255
IP address blocks: 202.127.80.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Validity
Not Before: Mar 31 08:34:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C86E5CEEF8402E0A6DBDF6A6349DD43DB678F1FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:12:1c:12:93:d7:71:e0:be:44:8a:e5:30:
2d:33:31:8c:e9:cc:28:e2:00:21:df:ee:62:3a:3e:
fe:1f:a3:81:4c:f5:f0:99:6e:62:a5:cf:fc:52:58:
4d:84:80:7c:30:67:a9:2b:cf:b7:46:c9:2e:c0:97:
14:51:df:b3:c3:a5:68:d9:95:7c:01:74:5e:8c:ce:
91:e4:66:7d:2e:04:1e:0c:22:1c:cf:d0:b7:60:2e:
f8:c8:88:fc:60:df:2f:ba:e3:3d:61:db:7b:9c:1c:
92:77:73:9b:49:8e:ea:d9:a7:7c:3b:3b:27:68:cf:
5f:ca:04:0a:8a:b8:42:43:80:1b:e6:4e:35:84:62:
01:3a:8e:37:68:98:d6:d3:ef:a7:f0:58:c2:fa:3b:
60:a5:fb:4c:35:d8:fd:81:4e:b5:e5:d4:10:b7:b7:
fc:a9:a7:fb:9b:2b:09:2b:5d:bc:4f:74:10:7d:48:
ee:4c:06:bf:78:90:b2:59:fe:b4:71:a5:d5:1e:bb:
2b:0a:cc:12:00:83:c2:c5:1d:02:af:3b:38:e9:c2:
70:4b:93:1b:f1:d3:21:eb:c2:ae:cd:20:05:dc:69:
85:23:78:52:97:fd:6f:7d:70:55:2f:7b:a1:dd:c5:
c2:e5:39:4c:98:21:ee:05:7f:c4:8a:8a:a3:14:cf:
0c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6E:5C:EE:F8:40:2E:0A:6D:BD:F6:A6:34:9D:D4:3D:B6:78:F1:FB
X509v3 Authority Key Identifier:
keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/yG5c7vhALgptvfamNJ3UPbZ48fs.roa
sbgp-ipAddrBlock: critical
IPv4:
202.127.80.0/20
Signature Algorithm: sha256WithRSAEncryption
02:0b:f4:91:e2:4c:3d:2a:fb:6e:92:87:60:4e:50:f7:f8:1a:
14:ea:84:f0:70:cc:bf:a0:d4:d5:9c:1b:df:1c:f0:c6:07:35:
1c:3a:3a:37:e1:d7:7a:35:99:be:d2:8b:ef:cf:03:01:6a:9b:
57:1b:77:7b:6c:ef:bb:f7:47:e1:c9:9b:63:7f:d9:45:70:0f:
28:56:7f:19:a5:ab:b9:c0:62:6b:68:09:55:03:5e:94:0c:ae:
67:10:04:76:b6:4b:e1:35:8d:72:f6:0a:30:e9:46:19:d0:d3:
4e:59:c4:9c:ad:b2:0a:9a:0a:50:67:ca:cb:93:d7:a5:ca:d1:
c9:33:94:f2:73:21:fd:60:56:04:bf:ab:c4:58:c5:03:51:63:
2c:c8:84:50:66:5e:95:93:2b:30:7b:aa:c1:2c:78:e4:b6:10:
cd:50:ff:ca:9a:f8:79:07:eb:8c:a9:32:73:15:7f:0b:77:eb:
13:59:30:37:ba:83:5b:81:3b:be:ea:01:ba:f8:04:19:30:25:
a8:69:ef:8e:6c:54:bf:67:a9:8c:9c:2d:0d:1a:66:ff:ee:4b:
05:eb:f3:73:03:17:7e:07:c5:4f:1f:d7:d8:51:ec:d1:2d:56:
38:5f:7f:31:77:9a:a3:2a:54:6d:ba:3c:98:2e:e2:d8:d0:d1:
3a:b2:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:18 2026 by rpki-client