
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/0obS8sUtibGEXfaqY_Yqrkcqfnw.roa
File: 0obS8sUtibGEXfaqY_Yqrkcqfnw.roa (raw, json)
Hash identifier: vooVzQVBmizRoUsRJzj10GN9ExW5SWlTutiR30dwyMM=
Subject key identifier: D2:86:D2:F2:C5:2D:89:B1:84:5D:F6:AA:63:F6:2A:AE:47:2A:7E:7C
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 046F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0obS8sUtibGEXfaqY_Yqrkcqfnw.roa
Signing time: Tue 31 Mar 2026 08:12:31 +0000
ROA not before: Tue 31 Mar 2026 08:12:31 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4721
IP address blocks: 114.198.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1135 (0x46f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:31 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D286D2F2C52D89B1845DF6AA63F62AAE472A7E7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:e8:48:fe:16:ea:f7:ce:89:81:22:70:e9:
24:1d:ed:8a:95:f2:e7:4e:ad:db:58:47:48:2a:6a:
d8:3d:e0:be:26:7a:8a:31:b2:64:fd:fd:67:e1:59:
ea:c2:b3:2e:54:f7:90:4d:ad:7c:e6:74:81:02:bc:
4b:bd:24:7e:8d:83:70:d3:ae:7d:73:fc:d1:1c:94:
b6:87:ed:c5:c7:87:b9:11:c1:06:15:75:8e:b5:b1:
e3:1c:b0:a4:72:51:4a:c9:99:e8:66:27:3c:b1:74:
5a:51:cc:33:86:95:b7:cd:f6:88:99:32:42:ce:15:
ac:0e:e4:01:7c:6f:55:c2:96:3f:6d:f1:d3:c1:c6:
5f:52:b2:57:66:5d:64:32:78:dd:d7:3b:59:ce:bc:
21:0b:ff:9b:e4:b9:6a:6a:d9:db:b8:95:0b:f9:80:
94:72:ec:68:a3:bf:db:12:54:1c:6b:b2:ab:87:30:
b7:f8:b4:c6:fb:98:1c:fb:c8:bf:61:01:14:68:4d:
96:72:9c:fb:e9:84:ed:b5:10:dd:92:71:10:10:b1:
ac:2d:5b:e9:e5:c9:86:18:c3:7f:9b:04:75:42:4e:
e8:61:b3:c6:42:dd:a4:1f:af:77:35:46:9a:1b:cd:
4c:8a:09:01:10:2b:35:0f:11:da:e3:89:47:33:ad:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:D2:F2:C5:2D:89:B1:84:5D:F6:AA:63:F6:2A:AE:47:2A:7E:7C
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/0obS8sUtibGEXfaqY_Yqrkcqfnw.roa
sbgp-ipAddrBlock: critical
IPv4:
114.198.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:59:ab:32:ea:3a:40:02:03:12:03:a0:f9:f4:47:3f:31:5b:
3f:ad:b6:f0:23:59:4f:cb:3f:2c:fe:af:29:91:cd:cc:d4:a9:
6b:e7:93:bd:0c:3b:a1:94:97:3a:cb:b2:93:f1:5b:41:3f:df:
7e:40:69:66:4d:fb:96:e6:7f:86:ed:80:bf:f8:c5:2e:ad:5b:
08:9e:93:c8:61:96:db:d2:16:d8:22:e4:57:69:f0:c9:6f:79:
b1:b6:61:cc:77:79:b8:cb:6b:2d:61:d3:05:95:b0:4e:32:d9:
9f:6e:f4:ae:c1:41:b0:0d:9b:ea:e1:c6:3e:cf:52:3c:1f:11:
e7:62:ba:b1:90:90:d6:26:16:2f:e6:e1:fa:f4:41:c7:18:b0:
f4:d8:f8:6a:50:fe:a5:e3:a4:ab:d2:d6:6f:e5:e4:03:5d:8e:
c7:b9:d2:d5:2b:ec:cf:84:1c:ec:e5:58:77:e7:62:58:49:a3:
19:41:29:17:ec:4d:8b:e2:b8:f5:13:a7:2f:f9:de:2e:74:7c:
77:3a:67:53:31:7d:db:28:51:81:90:a3:dd:a0:1a:6f:89:b5:
14:58:6f:82:fb:0b:97:01:9b:94:ce:77:66:c6:4d:fb:99:b0:
b8:f0:c1:1c:54:87:32:05:bd:93:98:12:64:92:a5:c7:d3:d7:
5d:9c:67:42
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyMzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQyODZEMkYyQzUyRDg5
QjE4NDVERjZBQTYzRjYyQUFFNDcyQTdFN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzA+hI/hbq986JgSJw6SQd7YqV8udOrdtYR0gqatg94L4meoox
smT9/WfhWerCsy5U95BNrXzmdIECvEu9JH6Ng3DTrn1z/NEclLaH7cXHh7kRwQYV
dY61seMcsKRyUUrJmehmJzyxdFpRzDOGlbfN9oiZMkLOFawO5AF8b1XClj9t8dPB
xl9SsldmXWQyeN3XO1nOvCEL/5vkuWpq2du4lQv5gJRy7Gijv9sSVBxrsquHMLf4
tMb7mBz7yL9hARRoTZZynPvphO21EN2ScRAQsawtW+nlyYYYw3+bBHVCTuhhs8ZC
3aQfr3c1RpobzUyKCQEQKzUPEdrjiUczrepXAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU0obS8sUtibGEXfaqY/YqrkcqfnwwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxLzBvYlM4c1V0aWJHRVhmYXFZX1lxcmtjcWZudy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANyxuAwDQYJKoZIhvcNAQELBQADggEB
AD5ZqzLqOkACAxIDoPn0Rz8xWz+ttvAjWU/LPyz+rymRzczUqWvnk70MO6GUlzrL
spPxW0E/335AaWZN+5bmf4btgL/4xS6tWwiek8hhltvSFtgi5Fdp8MlvebG2Ycx3
ebjLay1h0wWVsE4y2Z9u9K7BQbANm+rhxj7PUjwfEediurGQkNYmFi/m4fr0QccY
sPTY+GpQ/qXjpKvS1m/l5ANdjse50tUr7M+EHOzlWHfnYlhJoxlBKRfsTYviuPUT
py/53i50fHc6Z1MxfdsoUYGQo92gGm+JtRRYb4L7C5cBm5TOd2bGTfuZsLjwwRxU
hzIFvZOYEmSSpcfT112cZ0I=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:42:54 2026 by rpki-client