
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/38014/_f4zAxg3_BQQ719QJJuo-r94YMI.roa
File: _f4zAxg3_BQQ719QJJuo-r94YMI.roa (raw, json)
Hash identifier: aGuwd8LmBQBlwbxPMe7T5Weq8J46fMtk+/c1igCHuaw=
Subject key identifier: FD:FE:33:03:18:37:FC:14:10:EF:5F:50:24:9B:A8:FA:BF:78:60:C2
Certificate issuer: /CN=CFC9F9D6C1EEAD816401C7C76B6CB206175FE227
Certificate serial: 0E
Authority key identifier: CF:C9:F9:D6:C1:EE:AD:81:64:01:C7:C7:6B:6C:B2:06:17:5F:E2:27
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/_f4zAxg3_BQQ719QJJuo-r94YMI.roa
Signing time: Tue 31 Mar 2026 08:46:54 +0000
ROA not before: Tue 31 Mar 2026 08:46:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 45689
IP address blocks: 202.222.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFC9F9D6C1EEAD816401C7C76B6CB206175FE227
Validity
Not Before: Mar 31 08:46:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FDFE33031837FC1410EF5F50249BA8FABF7860C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:6d:80:69:43:91:77:8d:ed:b8:e5:20:12:
6d:b7:b5:75:6b:9d:7a:8b:04:8a:84:2d:fb:7a:f7:
aa:86:2e:d3:4a:30:7e:26:7b:d8:f9:42:e1:e8:56:
49:1e:40:8d:27:8c:6f:a8:51:bf:a8:68:73:6d:fa:
91:c9:a1:0c:8a:14:17:f5:b0:91:73:30:6d:93:4e:
b3:be:50:64:4a:c4:23:e2:cd:1a:2b:e1:09:75:60:
f4:2f:30:70:15:91:9a:1d:09:95:8e:e3:03:7b:dd:
8f:04:45:c3:e8:84:64:cd:2c:f9:31:98:84:50:22:
34:a6:bc:44:21:28:c2:cc:b0:dd:6c:a2:26:86:c5:
9c:13:2a:4a:4d:f6:19:de:c7:3d:5b:aa:91:f7:7d:
51:cc:15:a0:e0:13:92:fc:aa:91:91:13:54:e6:d1:
c4:30:90:86:00:6e:7e:42:e3:02:71:30:2a:db:7e:
ba:26:01:e6:eb:97:6c:bc:11:d8:cf:6c:ba:cd:7b:
ae:94:fd:03:8e:70:c8:6c:8f:75:e4:68:c8:4b:a4:
08:eb:33:1c:e0:f2:eb:56:7a:05:c8:15:2e:18:c8:
8f:90:b4:64:09:67:28:bd:fc:7b:9e:2b:29:2e:6c:
d8:68:95:87:5f:e0:7b:01:85:12:45:fd:3d:de:bd:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:33:03:18:37:FC:14:10:EF:5F:50:24:9B:A8:FA:BF:78:60:C2
X509v3 Authority Key Identifier:
keyid:CF:C9:F9:D6:C1:EE:AD:81:64:01:C7:C7:6B:6C:B2:06:17:5F:E2:27
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/_f4zAxg3_BQQ719QJJuo-r94YMI.roa
sbgp-ipAddrBlock: critical
IPv4:
202.222.176.0/20
Signature Algorithm: sha256WithRSAEncryption
53:af:71:b9:89:25:cb:01:14:b4:f3:eb:2a:60:e0:58:0c:0e:
4a:84:a2:96:3e:ae:53:18:50:84:4b:75:e5:a9:97:c9:12:32:
ea:b3:71:09:5d:2e:d9:54:28:36:4a:ac:39:7e:97:02:52:28:
95:ff:dc:fa:78:03:c2:2e:fa:bf:4c:2a:db:32:48:c5:01:81:
a3:ff:f8:4b:f2:56:52:e8:3d:3f:28:3b:06:a0:00:a1:31:2e:
25:a7:29:cf:08:78:8a:1e:25:22:6b:d3:c0:23:3c:1b:1d:67:
19:97:59:fe:3e:31:2d:7b:90:79:18:2d:b9:d1:3b:d8:4d:ab:
40:83:c8:0b:42:52:71:84:dc:af:e1:35:f7:29:84:26:2f:1f:
d0:f9:fd:7a:0f:72:c5:ff:8c:31:14:38:23:15:d6:4c:7c:2e:
6a:32:45:fc:d3:6b:c1:38:a8:13:fd:da:54:e7:c7:50:92:be:
49:ee:ac:45:63:93:d3:28:c3:8b:9a:ac:ab:aa:b0:16:29:21:
be:ed:dc:e4:28:9e:cd:fd:16:46:e9:1e:4d:cb:09:7e:0e:03:
3f:41:ba:11:4f:f4:41:45:5a:b9:fd:cb:06:f8:d7:7d:3e:97:
64:4a:5d:a3:5b:9c:95:9f:50:56:25:1b:cc:84:aa:08:7b:7c:
bf:b4:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:52 2026 by rpki-client