
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/frSQ-4NpxLvtuORa6C3HnT22ftY.roa
File: frSQ-4NpxLvtuORa6C3HnT22ftY.roa (raw, json)
Hash identifier: 6hnfMMz6Oa+UjLQPBRA9WeTApqz9VwV09Zm38szkjJk=
Subject key identifier: 7E:B4:90:FB:83:69:C4:BB:ED:B8:E4:5A:E8:2D:C7:9D:3D:B6:7E:D6
Certificate issuer: /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial: FB
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/frSQ-4NpxLvtuORa6C3HnT22ftY.roa
Signing time: Tue 31 Mar 2026 07:39:06 +0000
ROA not before: Tue 31 Mar 2026 07:39:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2518
IP address blocks: 118.108.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Validity
Not Before: Mar 31 07:39:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7EB490FB8369C4BBEDB8E45AE82DC79D3DB67ED6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:ea:33:e1:c1:6b:04:27:fd:73:19:e2:ad:
49:a6:ee:25:16:99:53:61:0e:8c:f4:64:d4:12:30:
54:52:66:2d:1f:15:cc:87:d4:9d:4a:8e:20:a8:00:
fd:7f:25:cd:1f:06:f9:ac:ea:35:68:25:7e:34:69:
fe:78:32:4f:e0:74:1e:18:37:b1:65:6b:81:7f:dc:
9b:4d:db:0a:60:ae:1f:8b:ea:87:e2:5c:77:52:fc:
30:95:cd:67:45:8f:fb:e2:8b:7a:76:2e:85:2c:56:
79:b2:af:1c:b9:59:66:cc:a6:93:71:bd:dd:06:67:
0c:6a:6d:3a:f1:15:ae:af:c7:f8:07:bd:f0:53:ce:
3f:94:ed:eb:a2:17:a1:93:aa:ac:bd:6e:fd:e8:d9:
6a:88:43:aa:e9:04:c4:8f:5f:46:54:4a:8a:5b:d7:
cb:3d:17:5b:83:92:b0:e9:82:ba:f1:e4:8a:91:9e:
9d:1f:d6:12:e3:fa:8a:17:ed:04:12:8c:73:7b:83:
7e:24:a6:46:8a:9f:21:53:02:e7:93:fe:7e:f9:cf:
2f:d4:cb:58:8b:16:c7:e6:eb:91:f7:54:1d:28:6a:
5d:3a:34:9b:f8:d8:77:53:97:de:f0:51:32:94:b8:
3d:f5:be:91:85:89:e2:c9:90:7d:d7:9a:75:88:d7:
ef:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B4:90:FB:83:69:C4:BB:ED:B8:E4:5A:E8:2D:C7:9D:3D:B6:7E:D6
X509v3 Authority Key Identifier:
keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/frSQ-4NpxLvtuORa6C3HnT22ftY.roa
sbgp-ipAddrBlock: critical
IPv4:
118.108.0.0/14
Signature Algorithm: sha256WithRSAEncryption
ba:5b:2c:d3:fd:fd:96:b9:50:3c:3c:ef:9b:70:e2:02:c4:89:
75:35:6c:66:dc:15:b3:ac:05:89:5d:1f:e4:60:e7:dc:01:d5:
05:e3:e8:21:9d:27:c8:ba:8c:55:53:a1:20:66:d2:3c:52:81:
c4:8b:56:5c:9f:9c:6a:bd:65:8f:b1:54:7e:86:ca:71:ed:6d:
53:48:14:c3:50:85:22:c1:f5:e5:ee:38:11:9a:50:91:20:e0:
6e:62:d0:24:80:fe:76:a9:49:10:04:7c:18:87:f5:e9:bd:22:
99:5e:d9:60:bc:c4:d6:8c:93:7c:bc:9b:af:23:da:45:37:5e:
48:5c:2c:02:2b:38:92:fd:79:8e:8e:43:8d:b6:f9:86:0d:e0:
a4:54:76:ab:94:ba:ec:58:cc:27:9c:bd:fa:fd:f1:de:45:e5:
76:1a:74:e2:17:a9:e2:e7:90:a6:eb:9b:b5:44:2b:ce:f3:d7:
73:d9:b4:17:50:54:59:37:bd:4f:33:fd:17:2c:84:57:4f:c2:
e2:13:a1:63:79:1e:93:6e:ac:23:3e:c6:c6:7f:0c:e7:c9:9f:
e2:46:41:35:94:b3:bd:56:29:7a:59:83:73:7e:1b:24:3f:b1:
a9:63:0b:b7:81:ca:a3:3a:7f:17:09:e4:05:52:a5:55:3d:87:
01:5c:4c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:21 2026 by rpki-client