
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/1fFocl8sYZc0O6zhHscxgpqzHIQ.roa
File: 1fFocl8sYZc0O6zhHscxgpqzHIQ.roa (raw, json)
Hash identifier: 7dtylErP0+AP2JcvSeLLCTqeMPwGfOeRU7KF79X8iW0=
Subject key identifier: D5:F1:68:72:5F:2C:61:97:34:3B:AC:E1:1E:C7:31:82:9A:B3:1C:84
Certificate issuer: /CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Certificate serial: 12
Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/1fFocl8sYZc0O6zhHscxgpqzHIQ.roa
Signing time: Fri 03 Apr 2026 09:14:32 +0000
ROA not before: Fri 03 Apr 2026 09:14:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10001
IP address blocks: 202.75.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Validity
Not Before: Apr 3 09:14:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D5F168725F2C6197343BACE11EC731829AB31C84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:08:e0:e1:e9:0b:90:20:d0:e5:56:81:12:
f2:75:f1:43:60:75:0f:30:ab:75:03:0a:47:37:1d:
90:b5:5b:59:44:a8:e9:00:f6:31:de:80:36:5e:cc:
51:85:1f:66:d7:1e:9f:0c:68:1e:65:97:52:2c:f4:
4d:83:89:9f:b1:2c:a7:1b:39:8e:58:4a:ed:02:17:
5a:d6:96:69:e3:56:5c:86:d1:bc:2e:34:a3:c4:43:
2c:94:ad:f7:11:79:1b:56:b5:b0:2b:d7:94:be:9c:
c8:f8:d3:34:4b:fd:42:22:eb:3f:e1:87:2a:0c:65:
da:42:85:2f:08:33:1b:18:44:84:81:0f:d1:86:82:
e2:c5:6a:45:f4:7d:00:4b:8a:91:e1:ce:59:04:60:
bd:68:cc:64:46:a9:f3:89:ab:0e:77:7b:aa:0c:05:
88:37:3b:d3:03:71:6b:dc:c2:9f:5a:9a:dd:7d:6b:
48:5a:ac:1d:78:ac:48:3b:33:a6:dd:9e:b0:e6:49:
b0:8a:39:09:91:f3:a2:70:30:d3:b8:26:97:d1:96:
24:a3:39:a1:47:91:3c:85:50:5d:0e:fa:83:ec:47:
dc:32:8c:45:4e:48:cf:fd:a4:07:99:b7:3c:6f:84:
db:22:13:51:6d:b5:af:45:42:c7:15:bd:3f:31:45:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:68:72:5F:2C:61:97:34:3B:AC:E1:1E:C7:31:82:9A:B3:1C:84
X509v3 Authority Key Identifier:
keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/1fFocl8sYZc0O6zhHscxgpqzHIQ.roa
sbgp-ipAddrBlock: critical
IPv4:
202.75.112.0/20
Signature Algorithm: sha256WithRSAEncryption
39:89:01:48:14:3c:d1:49:5a:07:fa:72:bd:d6:96:35:84:7c:
e3:6d:29:13:15:e5:1f:5d:76:c2:a8:a7:3f:c9:39:84:75:e3:
d3:8f:13:dc:b9:29:83:47:94:bb:22:86:7e:8c:77:5f:95:84:
f6:34:c1:7e:59:6f:47:94:60:a3:8b:f9:ff:6e:13:6d:ed:7b:
53:4c:e2:89:de:51:6f:48:d4:4b:4e:96:09:5c:2e:a0:44:5c:
ac:a8:dc:54:e2:ba:5c:61:76:02:c7:d7:98:b2:14:bb:2c:21:
58:c2:e1:42:1a:ae:53:2f:b7:9d:cb:0e:7b:f4:d5:09:bd:41:
07:b8:cb:b8:01:95:66:3a:c8:ff:4b:da:18:f8:6d:5a:39:f3:
41:57:40:f5:e2:55:d0:ee:26:ab:a3:d3:ba:1d:3a:13:76:66:
51:86:b6:3d:19:e7:99:ad:a6:d4:73:5c:85:84:87:42:d6:06:
d3:cc:41:1a:50:43:b4:b6:b3:ea:c1:de:d3:48:9d:8a:2e:46:
ac:56:5e:6f:59:0c:62:5b:60:65:45:c7:89:dd:07:85:92:9a:
5c:d8:8e:6b:cc:af:f8:e5:89:f0:ec:57:8a:d1:f3:97:62:8d:
7e:11:2f:44:ed:48:c8:ea:5a:06:e8:7c:3b:26:1e:21:c1:4d:
5f:1e:c7:13
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTkw
QkZENjNGODY3NUI3QjQ0NTYzNjIzRTQyRjcyOTI1NkNBMUU4MB4XDTI2MDQwMzA5
MTQzMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDVGMTY4NzI1RjJDNjE5
NzM0M0JBQ0UxMUVDNzMxODI5QUIzMUM4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANL/CODh6QuQINDlVoES8nXxQ2B1DzCrdQMKRzcdkLVbWUSo6QD2
Md6ANl7MUYUfZtcenwxoHmWXUiz0TYOJn7Espxs5jlhK7QIXWtaWaeNWXIbRvC40
o8RDLJSt9xF5G1a1sCvXlL6cyPjTNEv9QiLrP+GHKgxl2kKFLwgzGxhEhIEP0YaC
4sVqRfR9AEuKkeHOWQRgvWjMZEap84mrDnd7qgwFiDc70wNxa9zCn1qa3X1rSFqs
HXisSDszpt2esOZJsIo5CZHzonAw07gml9GWJKM5oUeRPIVQXQ76g+xH3DKMRU5I
z/2kB5m3PG+E2yITUW21r0VCxxW9PzFF6LcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTV8WhyXyxhlzQ7rOEexzGCmrMchDAfBgNVHSMEGDAWgBS5kL/WP4Z1t7RFY2I+
QvcpJWyh6DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDI1L3VaQ18xai1HZGJlMFJXTmlQa0wzS1NWc29lZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VaQ18xai1HZGJlMFJXTmlQa0wzS1NW
c29lZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80MjUvMWZGb2NsOHNZWmMwTzZ6aEhzY3hncHF6SElRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMpLcDANBgkqhkiG9w0BAQsFAAOCAQEA
OYkBSBQ80UlaB/pyvdaWNYR8420pExXlH112wqinP8k5hHXj048T3Lkpg0eUuyKG
fox3X5WE9jTBfllvR5Rgo4v5/24Tbe17U0ziid5Rb0jUS06WCVwuoERcrKjcVOK6
XGF2AsfXmLIUuywhWMLhQhquUy+3ncsOe/TVCb1BB7jLuAGVZjrI/0vaGPhtWjnz
QVdA9eJV0O4mq6PTuh06E3ZmUYa2PRnnma2m1HNchYSHQtYG08xBGlBDtLaz6sHe
00idii5GrFZeb1kMYltgZUXHid0HhZKaXNiOa8yv+OWJ8OxXitHzl2KNfhEvRO1I
yOpaBuh8OyYeIcFNXx7HEw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:36:32 2026 by rpki-client