
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/yrGy7x-SphCgdtjtfkKc46MdLpo.roa
File: yrGy7x-SphCgdtjtfkKc46MdLpo.roa (raw, json)
Hash identifier: OfcM+D7G5OlMqr0uyOXqmLzd7Nais4xdCM2fq6yj/3w=
Subject key identifier: CA:B1:B2:EF:1F:92:A6:10:A0:76:D8:ED:7E:42:9C:E3:A3:1D:2E:9A
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 13
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/yrGy7x-SphCgdtjtfkKc46MdLpo.roa
Signing time: Wed 25 Mar 2026 05:47:31 +0000
ROA not before: Wed 25 Mar 2026 05:47:31 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 119.228.0.0/14 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 25 05:47:31 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=CAB1B2EF1F92A610A076D8ED7E429CE3A31D2E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0c:ab:cb:35:3a:ba:1e:e3:f5:e5:ee:ac:61:
c1:2d:17:57:26:38:9a:66:a4:d7:37:96:94:0c:3f:
ac:11:2f:40:08:a7:93:4b:4e:31:fa:92:73:a8:11:
0e:99:63:c0:0f:29:56:93:dd:4a:50:4e:79:6f:19:
cc:88:ca:a8:5c:67:ca:d9:ab:05:31:41:d0:70:58:
1d:17:04:21:7e:11:d4:f8:f5:c8:26:a2:6e:e0:85:
cc:00:b4:1f:38:46:9c:1e:8c:c6:d1:b9:f7:d6:b0:
3a:87:dd:5c:67:58:bd:cc:fb:c4:8a:cf:09:9a:48:
13:fb:a9:e7:52:9b:fd:d6:db:85:7c:82:7e:c2:3a:
8b:e0:02:64:ec:60:55:58:b4:ab:0a:f1:37:21:ca:
46:34:3c:8e:06:2d:c5:09:e5:0a:ad:14:9b:3d:93:
b0:0a:12:27:b7:b8:00:0f:8b:c5:82:25:be:5b:d4:
4a:d2:bf:49:8f:c0:d2:12:e6:a6:2c:42:34:b2:bb:
e2:65:35:9b:10:c0:4f:c0:e7:0d:e3:a5:ad:9c:b8:
04:fb:3f:38:6c:31:09:fb:f8:2d:c3:7f:7c:7a:a5:
b1:2f:a6:82:40:2c:d9:e5:53:2a:c6:9e:cb:f7:ef:
ac:18:71:07:5c:7d:c5:a3:74:8d:b1:36:1d:4d:eb:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:B2:EF:1F:92:A6:10:A0:76:D8:ED:7E:42:9C:E3:A3:1D:2E:9A
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/yrGy7x-SphCgdtjtfkKc46MdLpo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.228.0.0/14
Signature Algorithm: sha256WithRSAEncryption
23:73:72:07:aa:a6:8a:99:37:66:7d:88:88:ad:e2:23:a1:2f:
52:36:ac:24:1d:63:0f:cc:1a:a1:37:ed:82:74:47:f8:96:1e:
a9:58:4d:3e:e2:fd:b3:18:38:71:28:e9:ae:04:7d:1b:0e:e1:
d1:ff:74:b1:ff:56:75:4d:11:db:60:60:65:95:8c:fb:31:56:
6d:3a:6a:ba:91:ee:00:14:15:05:22:12:9b:94:22:93:aa:a4:
f2:d0:8b:0e:49:a8:cc:51:ce:1a:8c:5b:da:24:23:de:78:8d:
6b:e8:3c:de:b7:c9:36:05:b1:c4:b3:b4:01:61:fd:d8:c8:e2:
4e:14:8d:e7:bc:21:97:9c:b1:aa:f6:e0:69:51:fa:e8:99:c8:
32:f6:ce:db:d3:2e:d4:0c:af:17:ce:82:f8:59:50:62:4b:ac:
a1:7b:e7:d5:41:bb:fd:5f:a4:0b:d0:da:6c:7b:56:1f:70:e7:
8b:21:02:7b:3b:9a:af:3c:5c:1b:29:c3:ac:dc:14:3a:d8:d1:
df:81:b1:91:2f:dd:5c:7c:c2:13:c0:05:0c:fa:c7:1a:3e:c6:
68:43:c2:71:14:05:55:eb:a2:4a:f6:1d:d7:25:1e:36:58:f2:
50:c1:d6:1f:0e:4a:ff:d2:72:b7:cf:06:3b:ee:fc:d9:b4:08:
3f:a0:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:17:05 2026 by rpki-client