
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/C-U97FRlu7SzB3oZnYCwCq-BLrI.roa
File: C-U97FRlu7SzB3oZnYCwCq-BLrI.roa (raw, json)
Hash identifier: HJ6H6w3bGjgDOpOnbm/uw4KMVTScCULcxumt8plNOdU=
Subject key identifier: 0B:E5:3D:EC:54:65:BB:B4:B3:07:7A:19:9D:80:B0:0A:AF:81:2E:B2
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0423
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/C-U97FRlu7SzB3oZnYCwCq-BLrI.roa
Signing time: Tue 31 Mar 2026 08:11:52 +0000
ROA not before: Tue 31 Mar 2026 08:11:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9824
IP address blocks: 124.195.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 10:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1059 (0x423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:11:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0BE53DEC5465BBB4B3077A199D80B00AAF812EB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:17:19:8b:ad:48:41:43:8b:38:f3:4e:fd:dc:
fe:fe:44:79:ac:c6:4a:2f:98:52:97:f8:bf:f9:5d:
bd:bf:74:62:2c:08:04:e0:34:68:71:05:24:fc:ac:
29:bf:78:69:86:d2:c2:55:31:a6:50:30:b4:21:69:
85:5e:df:c7:af:82:dd:84:c9:88:2a:ef:f1:99:f3:
cf:08:d5:88:67:8f:09:67:7f:9d:58:55:52:f7:c6:
4c:6f:ad:fa:8e:51:00:c2:24:31:f0:1a:92:f3:e6:
96:4e:06:7c:09:a7:42:d1:c9:ee:ad:21:04:3a:a3:
31:55:40:f7:d4:91:c0:5a:2d:49:0e:b8:d7:af:7c:
36:51:d1:ab:d1:a2:e6:15:de:26:e4:09:53:60:ba:
fe:b7:bd:d9:bb:91:f8:59:4c:37:c0:1e:6b:95:0a:
9a:be:ee:e4:b4:38:c1:e6:6c:dc:4f:8b:25:8b:19:
34:30:83:60:89:9b:3a:36:91:06:7a:fd:7c:f7:3e:
72:93:f3:d9:41:dc:a6:36:68:c4:73:53:95:96:8b:
67:f4:93:0d:aa:6f:9d:24:58:d7:6c:6c:7f:57:9e:
2e:7e:b3:9b:5f:7f:03:09:b6:b3:68:f7:f5:d7:c9:
4f:3c:3d:0f:6f:2f:8e:c0:2e:7e:43:47:94:09:e8:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:3D:EC:54:65:BB:B4:B3:07:7A:19:9D:80:B0:0A:AF:81:2E:B2
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/C-U97FRlu7SzB3oZnYCwCq-BLrI.roa
sbgp-ipAddrBlock: critical
IPv4:
124.195.144.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:92:cc:99:de:97:a6:e4:28:2e:28:2b:e6:a1:1a:b6:66:df:
ba:9c:9c:ab:bf:67:98:37:92:e6:e5:d0:43:1d:c7:52:e9:01:
c0:06:0d:b7:d1:9d:c8:89:7d:22:38:49:34:c4:18:c2:b4:f8:
af:6d:31:a4:fb:5a:62:2b:f6:d0:43:89:41:4f:15:37:b8:f2:
43:28:a0:aa:d6:98:8a:89:de:df:e8:06:db:7d:90:40:85:64:
35:6f:08:8c:b8:d3:95:13:b1:ab:54:c6:b4:a7:38:f7:08:d9:
17:21:97:29:07:3c:a8:40:a7:ee:06:2f:6b:c3:2c:00:5e:88:
0c:79:a3:0e:0e:7a:eb:6c:19:2f:9a:be:99:d0:e9:62:96:35:
d8:76:01:37:46:da:9c:f4:49:c3:60:a7:5e:3c:83:6d:a4:d7:
ce:49:43:29:fc:27:60:76:a3:03:9a:46:a6:e0:c2:91:73:dc:
6f:28:6c:ba:e5:2d:2b:3e:f3:13:11:72:67:aa:7f:0d:98:a2:
2d:61:c8:e7:62:4c:89:4c:c5:36:e2:85:2f:1c:bd:92:6d:7d:
cc:8f:4f:0c:7e:01:08:0a:c2:35:5f:12:b2:53:3b:9e:bf:6f:
81:ab:87:e3:3c:ba:1f:cc:d7:fa:d8:9e:89:71:f7:c2:f5:a8:
11:1d:91:cc
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODExNTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBCRTUzREVDNTQ2NUJC
QjRCMzA3N0ExOTlEODBCMDBBQUY4MTJFQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeFxmLrUhBQ4s480793P7+RHmsxkovmFKX+L/5Xb2/dGIsCATg
NGhxBST8rCm/eGmG0sJVMaZQMLQhaYVe38evgt2EyYgq7/GZ888I1Yhnjwlnf51Y
VVL3xkxvrfqOUQDCJDHwGpLz5pZOBnwJp0LRye6tIQQ6ozFVQPfUkcBaLUkOuNev
fDZR0avRouYV3ibkCVNguv63vdm7kfhZTDfAHmuVCpq+7uS0OMHmbNxPiyWLGTQw
g2CJmzo2kQZ6/Xz3PnKT89lB3KY2aMRzU5WWi2f0kw2qb50kWNdsbH9Xni5+s5tf
fwMJtrNo9/XXyU88PQ9vL47ALn5DR5QJ6GFbAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUC+U97FRlu7SzB3oZnYCwCq+BLrIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL0MtVTk3RlJsdTdTekIzb1puWUN3Q3EtQkxySS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR8w5AwDQYJKoZIhvcNAQELBQADggEB
ALuSzJnel6bkKC4oK+ahGrZm37qcnKu/Z5g3kubl0EMdx1LpAcAGDbfRnciJfSI4
STTEGMK0+K9tMaT7WmIr9tBDiUFPFTe48kMooKrWmIqJ3t/oBtt9kECFZDVvCIy4
05UTsatUxrSnOPcI2RchlykHPKhAp+4GL2vDLABeiAx5ow4OeutsGS+avpnQ6WKW
Ndh2ATdG2pz0ScNgp148g22k185JQyn8J2B2owOaRqbgwpFz3G8obLrlLSs+8xMR
cmeqfw2Yoi1hyOdiTIlMxTbihS8cvZJtfcyPTwx+AQgKwjVfErJTO56/b4Grh+M8
uh/M1/rYnolx98L1qBEdkcw=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:58:26 2026 by rpki-client