
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/FYC-o6CuT9VABgd2H8kDufXzA5Y.roa
File: FYC-o6CuT9VABgd2H8kDufXzA5Y.roa (raw, json)
Hash identifier: zw/ELlVvYe04GfbDNsr/PbyJ4ayFJ/nSCwxYEnNTFQ8=
Subject key identifier: 15:80:BE:A3:A0:AE:4F:D5:40:06:07:76:1F:C9:03:B9:F5:F3:03:96
Certificate issuer: /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial: 3C
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/FYC-o6CuT9VABgd2H8kDufXzA5Y.roa
Signing time: Tue 31 Mar 2026 08:49:24 +0000
ROA not before: Tue 31 Mar 2026 08:49:24 +0000
ROA not after: Wed 24 Mar 2027 01:46:06 +0000
asID: 17511
IP address blocks: 122.100.24.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Validity
Not Before: Mar 31 08:49:24 2026 GMT
Not After : Mar 24 01:46:06 2027 GMT
Subject: CN=1580BEA3A0AE4FD5400607761FC903B9F5F30396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:22:10:6e:5d:f5:4f:3e:31:c0:ce:a2:9b:
4c:e5:83:96:10:fb:da:0c:14:0a:a3:da:90:d8:0f:
1b:17:46:90:1b:a7:fd:e7:aa:54:c2:fc:75:61:4a:
44:0d:66:43:28:e9:7a:87:12:7f:bd:c3:9b:4b:d4:
28:7d:6f:bc:4a:48:26:c6:9d:2c:34:2a:48:10:fb:
6f:79:60:f2:da:ea:52:dc:fe:e7:cb:a2:8a:5a:e8:
9c:ef:3e:ac:2e:cf:bc:3f:4e:e1:6c:3d:aa:ac:41:
15:4b:bc:aa:c6:07:64:fc:da:3c:4d:fd:31:ca:be:
88:8e:ba:18:f3:83:8d:23:61:16:81:20:81:60:89:
41:59:f0:e5:16:18:ea:ab:10:9d:95:0b:44:a1:78:
d8:fe:56:50:40:d0:d1:4f:62:a3:be:be:94:08:14:
73:33:f1:e9:5a:16:48:b5:6e:bb:af:d3:6e:44:73:
68:80:ce:11:90:c8:f7:e0:6b:29:b0:74:34:93:cf:
2d:d4:d4:41:b5:25:5a:64:82:be:51:ef:40:31:4a:
b0:01:41:6f:80:48:65:0b:bc:b6:ae:91:2a:fa:56:
31:ab:eb:67:c5:93:dc:93:d5:03:ef:af:6e:f3:4c:
ac:ae:04:5c:98:40:c0:73:36:3c:8e:11:d2:77:78:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:80:BE:A3:A0:AE:4F:D5:40:06:07:76:1F:C9:03:B9:F5:F3:03:96
X509v3 Authority Key Identifier:
keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/FYC-o6CuT9VABgd2H8kDufXzA5Y.roa
sbgp-ipAddrBlock: critical
IPv4:
122.100.24.0/21
Signature Algorithm: sha256WithRSAEncryption
11:09:1f:2a:6e:8b:00:63:45:d3:de:80:8c:0c:0d:71:42:7e:
3f:fd:c8:0d:df:bb:d4:71:f1:97:da:32:91:ff:53:bd:4d:1c:
51:d9:23:79:a4:64:66:3e:bd:60:6d:f2:c8:99:d8:81:9f:2d:
b8:e2:da:a9:8f:83:24:9d:19:56:1a:fa:c5:77:38:5c:de:7d:
cf:a7:ca:90:0a:7c:96:07:fb:12:07:a9:78:ec:8d:50:bc:a9:
47:ba:f9:ed:99:aa:96:72:8c:ef:66:2f:9d:8b:3f:db:14:29:
35:24:7b:35:5d:ce:64:a1:36:58:d6:86:8b:12:6d:6c:da:db:
b2:e1:50:fa:ce:d7:5b:a0:0e:45:01:d6:63:b2:78:29:93:9e:
26:d9:a0:9a:a2:1e:65:fa:23:ed:b4:b8:80:05:2b:02:33:fb:
f0:12:a5:b3:f0:96:40:95:56:48:81:11:bc:2c:b0:15:ef:7e:
5f:19:d3:1d:ec:38:b2:0c:9e:45:d3:24:ca:24:97:06:79:49:
64:3f:49:f0:fa:ba:cf:61:e0:72:b2:fd:e6:d0:7a:b9:a9:43:
01:c8:e7:55:8a:12:4b:16:64:52:6a:59:94:48:ed:aa:d2:71:
a9:cc:12:b0:ba:a6:92:1b:a6:a1:50:b5:6b:0b:a0:9b:59:bc:
1e:a2:2b:45
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMzMTA4
NDkyNFoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoMTU4MEJFQTNBMEFFNEZE
NTQwMDYwNzc2MUZDOTAzQjlGNUYzMDM5NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL8lIhBuXfVPPjHAzqKbTOWDlhD72gwUCqPakNgPGxdGkBun/eeq
VML8dWFKRA1mQyjpeocSf73Dm0vUKH1vvEpIJsadLDQqSBD7b3lg8trqUtz+58ui
ilronO8+rC7PvD9O4Ww9qqxBFUu8qsYHZPzaPE39Mcq+iI66GPODjSNhFoEggWCJ
QVnw5RYY6qsQnZULRKF42P5WUEDQ0U9io76+lAgUczPx6VoWSLVuu6/TbkRzaIDO
EZDI9+BrKbB0NJPPLdTUQbUlWmSCvlHvQDFKsAFBb4BIZQu8tq6RKvpWMavrZ8WT
3JPVA++vbvNMrK4EXJhAwHM2PI4R0nd41sECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQVgL6joK5P1UAGB3YfyQO59fMDljAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80OTMvRllDLW82Q3VUOVZBQmdkMkg4a0R1Zlh6QTVZLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3pkGDANBgkqhkiG9w0BAQsFAAOCAQEA
EQkfKm6LAGNF096AjAwNcUJ+P/3IDd+71HHxl9oykf9TvU0cUdkjeaRkZj69YG3y
yJnYgZ8tuOLaqY+DJJ0ZVhr6xXc4XN59z6fKkAp8lgf7EgepeOyNULypR7r57Zmq
lnKM72YvnYs/2xQpNSR7NV3OZKE2WNaGixJtbNrbsuFQ+s7XW6AORQHWY7J4KZOe
JtmgmqIeZfoj7bS4gAUrAjP78BKls/CWQJVWSIERvCywFe9+XxnTHew4sgyeRdMk
yiSXBnlJZD9J8Pq6z2HgcrL95tB6ualDAcjnVYoSSxZkUmpZlEjtqtJxqcwSsLqm
khumoVC1awugm1m8HqIrRQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:36:45 2026 by rpki-client