
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/f1QW2-UwJm3yso-cA6eQ8OEXafU.roa
File: f1QW2-UwJm3yso-cA6eQ8OEXafU.roa (raw, json)
Hash identifier: zdS9ywxYPSRPGDbevW8H65Pm6rt6AS5L9rOq0M/dlk8=
Subject key identifier: 7F:54:16:DB:E5:30:26:6D:F2:B2:8F:9C:03:A7:90:F0:E1:17:69:F5
Certificate issuer: /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial: 46
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/f1QW2-UwJm3yso-cA6eQ8OEXafU.roa
Signing time: Tue 31 Mar 2026 08:34:20 +0000
ROA not before: Tue 31 Mar 2026 08:34:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17682
IP address blocks: 219.100.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Validity
Not Before: Mar 31 08:34:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7F5416DBE530266DF2B28F9C03A790F0E11769F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:44:3e:b6:f3:99:d0:a9:2b:a0:6d:78:ec:
e9:ec:bf:e1:c5:df:5d:15:bd:8c:6d:43:9e:2b:28:
8b:a3:07:20:b9:6d:a5:5b:90:03:0c:b5:4e:cf:04:
90:aa:9f:0b:e4:88:30:c2:7e:56:76:0d:f8:3f:1f:
2b:d9:d0:c0:02:18:9b:5e:11:8b:19:73:bf:b7:d8:
b6:4c:b8:74:e4:23:f5:b5:64:cd:40:88:a2:ab:39:
70:ad:47:bf:f3:10:89:df:45:ed:57:bf:2f:04:40:
c3:1e:df:36:e5:af:27:b7:8a:a7:a1:74:bb:00:81:
ad:64:4b:ca:4c:44:94:94:5e:4a:e5:1b:7e:28:27:
fc:56:3b:5f:1d:8f:77:46:b1:6f:6f:8a:ba:e7:15:
12:06:c6:27:a4:b2:94:a7:05:8d:f6:31:17:48:bd:
6c:6f:2a:e8:0e:34:ff:fd:a7:97:88:ba:21:c5:1a:
40:03:e3:3a:3c:33:a9:a7:7f:b2:33:17:f6:e3:76:
71:ee:d4:cc:3b:9d:cc:51:e1:bd:e3:66:d6:3b:50:
52:13:fa:59:2b:41:d6:71:7f:21:27:da:be:be:88:
fd:4c:be:d4:28:c5:aa:be:9a:9c:54:7c:60:55:ce:
9d:04:55:42:05:80:fd:cb:78:ed:27:ff:23:bc:02:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:16:DB:E5:30:26:6D:F2:B2:8F:9C:03:A7:90:F0:E1:17:69:F5
X509v3 Authority Key Identifier:
keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/f1QW2-UwJm3yso-cA6eQ8OEXafU.roa
sbgp-ipAddrBlock: critical
IPv4:
219.100.56.0/22
Signature Algorithm: sha256WithRSAEncryption
67:76:12:72:c2:bf:64:e3:28:5b:97:dc:51:21:8a:47:87:64:
bb:7e:df:70:8c:e1:98:e4:05:ad:98:6a:a7:90:b0:63:92:c0:
83:22:04:e6:53:80:ac:c7:80:58:16:cf:b9:a7:66:3d:86:a8:
99:fc:65:fc:a8:4c:f5:58:68:3b:a6:3b:fe:e6:2c:cb:43:d2:
06:c0:43:58:56:bf:d9:65:8a:95:f9:56:ae:5c:1d:6a:99:41:
25:cc:86:e5:e5:c3:b8:ff:68:e7:98:70:a6:54:54:f7:9d:06:
97:73:79:38:cf:0b:15:1e:f6:9d:15:43:f9:9a:8e:8c:0f:ea:
04:58:c8:2b:9b:ef:5a:31:90:56:52:d4:79:02:b9:c0:35:75:
8c:96:37:65:99:13:32:bd:20:eb:94:a2:d5:55:24:cb:e8:6f:
73:7b:2e:c6:0b:c3:4c:12:3f:b3:5d:dc:1f:11:7d:f9:c3:fb:
c2:90:d1:44:ed:e9:59:5b:92:08:88:3a:28:ab:a6:8b:72:dc:
3c:4f:02:f2:14:5c:19:c1:08:c0:f5:d2:42:e2:bd:aa:fd:7c:
1e:0a:0a:30:2d:17:5c:ff:2a:6f:b5:df:fd:31:62:68:89:d5:
28:7a:70:bd:68:8b:66:8f:43:30:36:97:c2:5b:25:b7:89:f8:
79:f1:a9:dd
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NEY5
NEYyNkFEMjNDQkE5MzY1NUFFMzREODA2QThDRTBBNEM1OTA3MB4XDTI2MDMzMTA4
MzQyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0Y1NDE2REJFNTMwMjY2
REYyQjI4RjlDMDNBNzkwRjBFMTE3NjlGNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK7wRD6285nQqSugbXjs6ey/4cXfXRW9jG1Dnisoi6MHILltpVuQ
Awy1Ts8EkKqfC+SIMMJ+VnYN+D8fK9nQwAIYm14Rixlzv7fYtky4dOQj9bVkzUCI
oqs5cK1Hv/MQid9F7Ve/LwRAwx7fNuWvJ7eKp6F0uwCBrWRLykxElJReSuUbfign
/FY7Xx2Pd0axb2+KuucVEgbGJ6SylKcFjfYxF0i9bG8q6A40//2nl4i6IcUaQAPj
Ojwzqad/sjMX9uN2ce7UzDudzFHhveNm1jtQUhP6WStB1nF/ISfavr6I/Uy+1CjF
qr6anFR8YFXOnQRVQgWA/ct47Sf/I7wCKCkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR/VBbb5TAmbfKyj5wDp5Dw4Rdp9TAfBgNVHSMEGDAWgBSE+U8mrSPLqTZVrjTY
BqjOCkxZBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjA0L2hQbFBKcTBqeTZrMlZhNDAyQWFvemdwTVdRYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hQbFBKcTBqeTZrMlZhNDAyQWFvemdw
TVdRYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82MDQvZjFRVzItVXdKbTN5c28tY0E2ZVE4T0VYYWZVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAttkODANBgkqhkiG9w0BAQsFAAOCAQEA
Z3YScsK/ZOMoW5fcUSGKR4dku37fcIzhmOQFrZhqp5CwY5LAgyIE5lOArMeAWBbP
uadmPYaomfxl/KhM9VhoO6Y7/uYsy0PSBsBDWFa/2WWKlflWrlwdaplBJcyG5eXD
uP9o55hwplRU950Gl3N5OM8LFR72nRVD+ZqOjA/qBFjIK5vvWjGQVlLUeQK5wDV1
jJY3ZZkTMr0g65Si1VUky+hvc3suxgvDTBI/s13cHxF9+cP7wpDRRO3pWVuSCIg6
KKumi3LcPE8C8hRcGcEIwPXSQuK9qv18HgoKMC0XXP8qb7Xf/TFiaInVKHpwvWiL
Zo9DMDaXwlslt4n4efGp3Q==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:03 2026 by rpki-client