
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FUo5dhGPoVyqCVDX9qy1nVzAdTM.roa
File: FUo5dhGPoVyqCVDX9qy1nVzAdTM.roa (raw, json)
Hash identifier: y1Yz9EzPvSMqzhvFN5UQ7hEAfpRZu8xADbWNhdS3WLo=
Subject key identifier: 15:4A:39:76:11:8F:A1:5C:AA:09:50:D7:F6:AC:B5:9D:5C:C0:75:33
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17AB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FUo5dhGPoVyqCVDX9qy1nVzAdTM.roa
Signing time: Tue 31 Mar 2026 08:04:18 +0000
ROA not before: Tue 31 Mar 2026 08:04:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.77.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6059 (0x17ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=154A3976118FA15CAA0950D7F6ACB59D5CC07533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:12:ca:ac:69:a4:c8:8f:77:3d:f1:26:3d:d7:
c8:36:54:a2:b6:83:fb:22:a8:3e:d7:ec:a6:e1:e3:
13:68:81:2f:85:61:47:f3:e0:0c:b9:0d:ff:17:bf:
2f:ef:19:7e:7c:aa:06:8a:4d:1f:4f:a5:72:81:49:
2b:4e:8a:c3:7d:ae:c8:4a:86:37:3e:e5:f5:04:51:
e4:60:d9:01:23:30:de:bb:a2:5e:ae:cc:6c:8d:7e:
dd:5a:14:02:49:aa:2e:d5:c7:ee:f4:74:08:d7:c1:
c0:3b:a5:d3:58:83:7c:99:13:0b:b1:21:1c:b7:79:
e4:b6:02:ff:55:c3:80:ff:c8:ea:51:70:a8:fc:e3:
40:b2:6c:52:21:a4:d2:54:33:b9:cf:78:9d:87:c0:
75:78:6f:e9:a9:30:ac:bc:a8:d3:fc:5c:3d:74:47:
b5:a3:21:84:d6:71:d0:80:6b:af:67:e2:b4:8d:12:
28:18:84:b3:41:45:bf:fe:fe:02:e8:10:e3:c0:65:
7a:28:d5:d1:bf:ea:d9:1d:5f:7d:17:2b:37:48:93:
58:da:b6:0e:d5:71:02:a4:03:d3:e5:c6:43:dc:6c:
e0:c8:fd:74:0f:24:1f:5b:e0:12:d9:0b:2a:65:b5:
db:7f:56:1a:f8:f8:44:59:13:de:cf:e4:6a:82:4b:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:39:76:11:8F:A1:5C:AA:09:50:D7:F6:AC:B5:9D:5C:C0:75:33
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FUo5dhGPoVyqCVDX9qy1nVzAdTM.roa
sbgp-ipAddrBlock: critical
IPv4:
1.77.0.0/17
Signature Algorithm: sha256WithRSAEncryption
94:56:5a:c1:81:0e:c3:56:c4:03:82:0c:d6:97:4b:be:33:f0:
17:6c:17:cc:42:33:94:a9:b4:32:3d:f4:48:65:33:fa:ba:96:
ca:ef:16:f0:25:ea:9d:83:68:f3:94:c5:55:2a:3b:29:a9:46:
43:1e:05:df:d6:a9:db:d8:cd:e8:d3:a1:a5:59:df:1e:56:6b:
c9:cd:2e:9d:94:60:63:3f:84:03:09:a2:67:a9:2b:d5:e3:82:
35:66:17:6d:69:2d:79:33:03:cf:dc:b5:0f:c2:82:e0:3b:2d:
c3:45:4b:47:18:64:35:56:48:20:4e:fc:50:fc:b1:b1:4c:cb:
4f:b3:65:14:7a:5b:bf:7f:4a:6d:3e:67:30:6c:95:63:81:26:
76:97:6a:a1:7d:0a:fa:bb:71:a8:74:60:9d:bf:35:c9:bf:be:
28:68:5f:02:b4:37:81:6d:25:69:a3:a0:dd:e1:43:bb:c7:aa:
fc:09:6e:e7:33:ea:48:c2:57:45:fc:fc:44:c0:cb:ea:4f:4f:
ca:d2:cf:82:f9:ed:22:66:96:1a:08:a4:43:f3:d7:17:08:af:
3d:60:d9:36:7d:ec:10:29:c5:03:f9:22:76:69:2f:61:71:7e:
18:1b:73:6d:2c:45:d4:dd:d2:fb:b4:74:61:74:55:62:bb:21:
35:07:2d:98
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE1NEEzOTc2MTE4RkEx
NUNBQTA5NTBEN0Y2QUNCNTlENUNDMDc1MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgEsqsaaTIj3c98SY918g2VKK2g/siqD7X7Kbh4xNogS+FYUfz
4Ay5Df8Xvy/vGX58qgaKTR9PpXKBSStOisN9rshKhjc+5fUEUeRg2QEjMN67ol6u
zGyNft1aFAJJqi7Vx+70dAjXwcA7pdNYg3yZEwuxIRy3eeS2Av9Vw4D/yOpRcKj8
40CybFIhpNJUM7nPeJ2HwHV4b+mpMKy8qNP8XD10R7WjIYTWcdCAa69n4rSNEigY
hLNBRb/+/gLoEOPAZXoo1dG/6tkdX30XKzdIk1jatg7VcQKkA9PlxkPcbODI/XQP
JB9b4BLZCypltdt/Vhr4+ERZE97P5GqCSw2tAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUFUo5dhGPoVyqCVDX9qy1nVzAdTMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0ZVbzVkaEdQb1Z5cUNWRFg5cXkxblZ6QWRUTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAcBTQAwDQYJKoZIhvcNAQELBQADggEB
AJRWWsGBDsNWxAOCDNaXS74z8BdsF8xCM5SptDI99EhlM/q6lsrvFvAl6p2DaPOU
xVUqOympRkMeBd/WqdvYzejToaVZ3x5Wa8nNLp2UYGM/hAMJomepK9XjgjVmF21p
LXkzA8/ctQ/CguA7LcNFS0cYZDVWSCBO/FD8sbFMy0+zZRR6W79/Sm0+ZzBslWOB
JnaXaqF9Cvq7cah0YJ2/Ncm/vihoXwK0N4FtJWmjoN3hQ7vHqvwJbucz6kjCV0X8
/ETAy+pPT8rSz4L57SJmlhoIpEPz1xcIrz1g2TZ97BApxQP5InZpL2Fxfhgbc20s
RdTd0vu0dGF0VWK7ITUHLZg=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:34 2026 by rpki-client