
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fU0SIal6g9KKkdy1dpu966lkNjU.roa
File: fU0SIal6g9KKkdy1dpu966lkNjU.roa (raw, json)
Hash identifier: asG3RkztW3r941uAKIlwqumTGwvWH4THHQFaP8yyzHo=
Subject key identifier: 7D:4D:12:21:A9:7A:83:D2:8A:91:DC:B5:76:9B:BD:EB:A9:64:36:35
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 17DB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fU0SIal6g9KKkdy1dpu966lkNjU.roa
Signing time: Tue 31 Mar 2026 08:04:41 +0000
ROA not before: Tue 31 Mar 2026 08:04:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6107 (0x17db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 31 08:04:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7D4D1221A97A83D28A91DCB5769BBDEBA9643635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:6b:9c:c2:61:c8:be:23:85:ac:c2:f1:17:
1b:f9:0b:3b:df:d7:79:77:87:9c:97:29:0b:12:9c:
d8:39:5a:1b:52:2f:2b:9a:84:3e:cc:fa:4c:13:a7:
b9:90:68:af:eb:1d:a7:f4:68:ce:c9:c4:0f:df:77:
70:b4:b6:76:91:72:1d:56:5a:f7:02:14:ea:a0:2e:
fb:07:73:65:3c:69:f3:b4:bf:02:bf:77:d6:f3:a0:
9f:4b:bb:6e:21:9a:ec:22:c3:08:a9:5b:9a:90:b1:
f5:26:9a:73:e8:96:1c:eb:61:4c:8a:b5:d0:f7:ea:
fe:99:e1:7e:44:a6:56:cc:f2:7b:15:2a:b4:7a:06:
3e:31:db:18:f8:f9:f2:46:32:fa:43:10:df:f5:13:
fa:14:d1:b0:c0:67:0f:9e:7a:31:7a:1c:ba:87:5d:
53:4a:2e:dd:eb:b1:3f:57:bf:bc:3e:8e:79:5f:49:
42:25:34:da:12:d7:98:21:17:fc:63:e6:d8:7d:75:
a3:ce:63:37:d2:f8:eb:7e:13:44:bc:52:be:4d:32:
24:b6:7b:eb:4f:53:d2:b7:c2:a5:72:da:39:c6:30:
6c:51:5f:bf:8e:3e:c2:fd:df:7d:84:b5:d6:55:9a:
3b:73:0a:24:d5:0b:71:5b:9c:79:9b:be:65:df:6e:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4D:12:21:A9:7A:83:D2:8A:91:DC:B5:76:9B:BD:EB:A9:64:36:35
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fU0SIal6g9KKkdy1dpu966lkNjU.roa
sbgp-ipAddrBlock: critical
IPv4:
1.72.224.0/19
Signature Algorithm: sha256WithRSAEncryption
90:11:da:12:6e:2b:c8:bc:c0:57:2c:45:c5:0a:3b:92:33:78:
d8:2c:a6:e0:5c:15:d5:00:22:50:ba:77:89:71:d7:5d:47:9a:
5f:1f:2c:4e:28:f0:08:7c:e3:a4:66:04:99:31:5d:43:70:06:
73:b8:03:e3:bc:64:53:fc:5a:0d:87:6c:2c:ab:bd:bb:3e:84:
7d:40:18:7f:b2:ea:97:25:5d:df:e5:97:61:fc:f8:09:31:22:
6f:52:a5:86:6a:b9:68:14:d9:c1:de:78:86:d5:e1:48:27:d1:
6f:c5:89:43:87:53:2a:c8:4e:ef:f2:83:20:58:8c:f2:b1:9a:
b0:88:cb:96:35:81:ec:cf:96:37:c1:72:86:0f:db:c1:e8:16:
33:a3:d7:b8:41:69:f9:c1:41:ae:27:f9:9c:db:40:99:8f:58:
a8:bb:f0:3e:ca:65:a4:ef:d5:68:66:8f:fb:33:2f:82:a6:dd:
0f:6c:02:80:cd:1a:10:e6:5b:47:7a:c7:b1:5b:05:cb:06:7e:
65:75:21:cb:50:b7:e6:2c:a6:3f:9a:5c:31:cb:9a:c1:de:39:
0d:4d:dc:f0:9c:ac:ba:b9:66:71:72:a3:11:18:26:37:10:ad:
dd:3a:fd:ad:6e:17:17:0f:af:98:86:63:89:c8:23:24:07:44:
7b:c9:16:ae
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF9swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODA0NDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdENEQxMjIxQTk3QTgz
RDI4QTkxRENCNTc2OUJCREVCQTk2NDM2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMOmucwmHIviOFrMLxFxv5Czvf13l3h5yXKQsSnNg5WhtSLyua
hD7M+kwTp7mQaK/rHaf0aM7JxA/fd3C0tnaRch1WWvcCFOqgLvsHc2U8afO0vwK/
d9bzoJ9Lu24hmuwiwwipW5qQsfUmmnPolhzrYUyKtdD36v6Z4X5EplbM8nsVKrR6
Bj4x2xj4+fJGMvpDEN/1E/oU0bDAZw+eejF6HLqHXVNKLt3rsT9Xv7w+jnlfSUIl
NNoS15ghF/xj5th9daPOYzfS+Ot+E0S8Ur5NMiS2e+tPU9K3wqVy2jnGMGxRX7+O
PsL9332EtdZVmjtzCiTVC3FbnHmbvmXfbgaxAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUfU0SIal6g9KKkdy1dpu966lkNjUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L2ZVMFNJYWw2ZzlLS2tkeTFkcHU5NjZsa05qVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUBSOAwDQYJKoZIhvcNAQELBQADggEB
AJAR2hJuK8i8wFcsRcUKO5IzeNgspuBcFdUAIlC6d4lx111Hml8fLE4o8Ah846Rm
BJkxXUNwBnO4A+O8ZFP8Wg2HbCyrvbs+hH1AGH+y6pclXd/ll2H8+AkxIm9SpYZq
uWgU2cHeeIbV4Ugn0W/FiUOHUyrITu/ygyBYjPKxmrCIy5Y1gezPljfBcoYP28Ho
FjOj17hBafnBQa4n+ZzbQJmPWKi78D7KZaTv1Whmj/szL4Km3Q9sAoDNGhDmW0d6
x7FbBcsGfmV1IctQt+Yspj+aXDHLmsHeOQ1N3PCcrLq5ZnFyoxEYJjcQrd06/a1u
FxcPr5iGY4nIIyQHRHvJFq4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:33 2026 by rpki-client