
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFL80SeWHnE1WU6y_LTg3L5e96o.roa
File: dFL80SeWHnE1WU6y_LTg3L5e96o.roa (raw, json)
Hash identifier: gBabBARtPtVgDgSHNxLySxvPm1Mrr6hyjouXtrGGrGs=
Subject key identifier: 74:52:FC:D1:27:96:1E:71:35:59:4E:B2:FC:B4:E0:DC:BE:5E:F7:AA
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 98
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFL80SeWHnE1WU6y_LTg3L5e96o.roa
Signing time: Tue 31 Mar 2026 07:55:08 +0000
ROA not before: Tue 31 Mar 2026 07:55:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 148.67.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Mar 31 07:55:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7452FCD127961E7135594EB2FCB4E0DCBE5EF7AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:07:03:4f:2c:19:07:78:7b:9a:e1:e4:1c:
90:09:a1:a4:e8:71:11:5f:ae:cd:39:6a:81:60:8e:
01:50:60:76:c3:9d:80:8b:e9:05:c7:9f:71:1d:8c:
67:49:8e:30:e1:4d:91:3e:d3:74:70:5d:6c:84:e5:
41:80:9c:c9:2c:29:17:e8:7e:e2:9f:d0:11:f6:a9:
e0:e0:66:cf:a8:b2:99:4a:63:15:20:84:4d:17:08:
ef:0d:db:2b:0c:30:b2:7e:77:84:d4:b5:c7:b1:00:
b1:51:2c:70:5e:84:d1:6e:38:9d:85:13:d7:3d:aa:
b2:94:57:0c:21:0d:87:81:4c:fc:d8:62:9d:0d:0d:
04:4e:e5:4a:03:ba:0f:5c:b9:b9:8f:12:1d:5f:e6:
fe:ba:3e:6e:8a:00:6d:f3:fe:dc:61:32:bb:bb:52:
1e:e6:a3:b3:d3:1c:78:3f:f5:c8:7d:74:43:3f:86:
2f:bd:b1:49:f3:21:0d:7b:d7:e4:81:ec:6f:82:44:
b3:fe:37:de:4a:55:1a:82:89:da:c7:1f:8c:45:b8:
b0:45:0e:fd:06:f4:6f:70:5a:0e:83:c7:91:ef:85:
71:c4:f3:66:56:52:d5:96:eb:ab:6c:8f:1b:5c:23:
00:9f:79:db:d7:be:da:2a:ad:a0:b0:66:3a:a0:a1:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:52:FC:D1:27:96:1E:71:35:59:4E:B2:FC:B4:E0:DC:BE:5E:F7:AA
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dFL80SeWHnE1WU6y_LTg3L5e96o.roa
sbgp-ipAddrBlock: critical
IPv4:
148.67.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:98:f4:15:d5:10:69:ae:6c:da:b8:83:4a:b4:f6:ab:78:60:
3f:29:3e:58:75:45:ac:74:7a:43:6b:14:d3:4b:a7:44:51:94:
8e:9f:eb:e4:f8:ad:e4:cf:d9:18:08:4b:26:5a:4e:f7:57:4e:
39:ac:ef:89:68:4d:52:8e:36:2b:16:ba:c2:35:ba:ac:54:08:
8a:45:52:9e:14:11:d0:73:ac:33:36:1b:8a:75:fa:eb:f1:8e:
4f:ca:c3:ed:16:76:53:df:61:09:fe:78:51:2c:13:0d:a2:6e:
c5:dc:c1:69:1c:b5:cd:3d:92:0b:bf:fa:e6:e9:c6:4f:1d:e6:
43:95:03:fb:80:96:bf:4a:29:36:76:a9:10:08:70:41:15:2c:
bc:67:08:ae:fc:1a:36:55:5e:53:b0:90:0c:f5:67:cd:2a:77:
6c:21:9b:e8:d2:79:0b:28:b4:c7:7b:dd:bc:e9:4f:90:ba:da:
f6:52:a8:19:fb:cd:b5:36:15:85:a5:a1:9f:88:4c:45:0e:a3:
da:c6:c2:10:a3:f9:b3:6c:ca:5a:5e:14:1c:db:96:5b:86:0b:
c4:a0:0b:a3:fa:3f:fc:96:f7:7d:85:09:4c:11:4c:09:ed:ee:
77:1e:a4:b6:77:2b:28:86:6d:72:26:1a:3e:be:01:80:bd:2b:
f8:de:2e:51
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5
RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw
NzU1MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc0NTJGQ0QxMjc5NjFF
NzEzNTU5NEVCMkZDQjRFMERDQkU1RUY3QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNVwcDTywZB3h7muHkHJAJoaTocRFfrs05aoFgjgFQYHbDnYCL
6QXHn3EdjGdJjjDhTZE+03RwXWyE5UGAnMksKRfofuKf0BH2qeDgZs+osplKYxUg
hE0XCO8N2ysMMLJ+d4TUtcexALFRLHBehNFuOJ2FE9c9qrKUVwwhDYeBTPzYYp0N
DQRO5UoDug9cubmPEh1f5v66Pm6KAG3z/txhMru7Uh7mo7PTHHg/9ch9dEM/hi+9
sUnzIQ171+SB7G+CRLP+N95KVRqCidrHH4xFuLBFDv0G9G9wWg6Dx5HvhXHE82ZW
UtWW66tsjxtcIwCfedvXvtoqraCwZjqgodddAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUdFL80SeWHnE1WU6y/LTg3L5e96owHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco
j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193
R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2RGTDgwU2VXSG5FMVdVNnlfTFRnM0w1ZTk2by5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCUQzANBgkqhkiG9w0BAQsFAAOCAQEA
YZj0FdUQaa5s2riDSrT2q3hgPyk+WHVFrHR6Q2sU00unRFGUjp/r5Pit5M/ZGAhL
JlpO91dOOazviWhNUo42Kxa6wjW6rFQIikVSnhQR0HOsMzYbinX66/GOT8rD7RZ2
U99hCf54USwTDaJuxdzBaRy1zT2SC7/65unGTx3mQ5UD+4CWv0opNnapEAhwQRUs
vGcIrvwaNlVeU7CQDPVnzSp3bCGb6NJ5Cyi0x3vdvOlPkLra9lKoGfvNtTYVhaWh
n4hMRQ6j2sbCEKP5s2zKWl4UHNuWW4YLxKALo/o//Jb3fYUJTBFMCe3udx6ktncr
KIZtciYaPr4BgL0r+N4uUQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:34 2026 by rpki-client