
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/fpAJyU38YkRwPtrB8a1jbEuFQcE.roa
File: fpAJyU38YkRwPtrB8a1jbEuFQcE.roa (raw, json)
Hash identifier: K3wL4d++tZ9my7/qi4dlE1Swaz2N4v7McjWSjBVxWtk=
Subject key identifier: 7E:90:09:C9:4D:FC:62:44:70:3E:DA:C1:F1:AD:63:6C:4B:85:41:C1
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 9A
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/fpAJyU38YkRwPtrB8a1jbEuFQcE.roa
Signing time: Tue 31 Mar 2026 08:25:04 +0000
ROA not before: Tue 31 Mar 2026 08:25:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9374
IP address blocks: 202.224.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Mar 31 08:25:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7E9009C94DFC6244703EDAC1F1AD636C4B8541C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:e1:91:b6:53:49:59:4b:3d:5b:0e:01:10:
ed:66:a6:83:fa:75:aa:02:2f:8f:fa:e7:a2:c4:c8:
4e:53:0b:fd:39:78:da:d7:af:6c:e7:fd:69:f3:59:
82:b3:02:f8:3b:86:12:94:db:fc:00:1a:5b:83:1d:
d8:9b:37:fe:20:27:4e:2b:6e:59:ca:8f:ef:37:21:
fb:31:b0:5e:3d:88:10:65:ed:3e:cf:10:39:31:72:
20:2f:26:d5:cb:fe:a1:27:50:51:bc:00:26:11:eb:
93:05:bb:fd:e9:06:19:47:83:ef:8e:eb:a0:52:30:
2b:81:fc:e2:b3:ff:c1:9e:e5:7a:6d:a1:aa:0b:c5:
0d:6b:f0:6e:52:a8:aa:71:65:4e:f8:50:67:2f:e1:
e0:7b:71:8c:4f:da:7b:98:23:33:57:b1:25:10:8a:
3f:c0:df:75:a8:77:1c:80:2e:9a:f9:6f:07:7f:eb:
ee:04:84:fe:a0:0e:ca:a0:7f:37:1d:70:00:e5:84:
af:1f:6a:fb:4e:98:24:95:ed:1e:10:95:68:19:b6:
44:6d:2e:c6:65:1d:73:79:99:e4:46:d2:e8:e0:29:
17:2a:df:63:db:99:b8:9f:e0:48:19:5d:fa:00:c3:
a4:af:72:55:0d:48:92:fd:7d:6b:95:90:f5:25:cd:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:90:09:C9:4D:FC:62:44:70:3E:DA:C1:F1:AD:63:6C:4B:85:41:C1
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/fpAJyU38YkRwPtrB8a1jbEuFQcE.roa
sbgp-ipAddrBlock: critical
IPv4:
202.224.64.0/19
Signature Algorithm: sha256WithRSAEncryption
88:0d:b2:3f:81:34:15:ad:f1:54:ce:43:df:50:93:f4:6f:40:
48:6e:4c:cf:53:70:a5:7f:48:ce:7b:b8:08:9a:62:4b:37:12:
2f:7f:5f:36:b9:04:b0:3a:b8:aa:9c:c9:3f:d1:0b:10:d6:c3:
82:5c:00:5c:41:c1:5e:b1:ac:ea:1c:f7:f2:aa:9b:f4:65:7b:
2d:40:c9:ad:04:2a:41:68:ae:17:12:9b:71:e2:c6:98:c5:f3:
b3:59:ea:7a:b1:c4:0e:0c:ce:53:17:f2:37:7d:dc:83:d0:b6:
dc:4c:f1:65:95:26:03:30:75:48:19:6d:49:da:3d:f1:01:02:
f5:2c:0d:ff:70:af:e3:93:cd:09:27:d4:89:f0:71:4c:d7:7b:
a3:9d:9a:27:05:88:35:a2:69:e0:e8:d8:12:c7:7e:56:e3:ba:
4d:c5:0e:17:8d:86:56:f9:5b:2d:0e:0b:76:6f:d0:05:b9:f3:
e6:c5:4a:04:f7:03:8e:fe:a6:43:27:27:c3:05:64:92:df:98:
b9:84:28:e9:c5:9e:e1:b9:7c:7a:ae:08:55:69:7b:ec:eb:5a:
57:0c:3a:d9:4b:db:ff:b9:e9:7b:e3:ee:58:05:5a:ab:3c:a6:
cf:a3:0a:4b:c6:16:5c:04:e1:98:9c:ed:1b:51:80:6e:2e:d3:
3a:35:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:15 2026 by rpki-client