
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/YoA9kWxyjkZmTrNsIVp2fKOoSXg.roa
File: YoA9kWxyjkZmTrNsIVp2fKOoSXg.roa (raw, json)
Hash identifier: vLeqoWkcvaFIxxwsN5IYW9u5a4BD9egBiGpD3nyj35k=
Subject key identifier: 62:80:3D:91:6C:72:8E:46:66:4E:B3:6C:21:5A:76:7C:A3:A8:49:78
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 04B6
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YoA9kWxyjkZmTrNsIVp2fKOoSXg.roa
Signing time: Tue 31 Mar 2026 08:13:06 +0000
ROA not before: Tue 31 Mar 2026 08:13:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9617
IP address blocks: 125.4.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 12:05:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206 (0x4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:13:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=62803D916C728E46664EB36C215A767CA3A84978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:28:d5:1a:19:99:23:19:fe:2a:a7:44:e1:
c8:93:9e:a2:0b:4e:7b:e1:f0:fc:06:9f:51:f6:ca:
e1:18:36:09:f2:13:a7:66:a4:0f:d4:be:21:05:99:
48:e2:26:f5:dc:3f:a7:4f:8b:fa:e7:2e:d2:42:33:
85:af:b0:b4:f6:51:92:a8:ab:6a:27:fc:d1:1a:0a:
fc:0a:58:a8:1c:ed:54:c1:64:85:0b:ee:f4:ba:7f:
0d:0a:0c:08:91:88:54:64:c3:0f:77:80:7e:0e:ac:
60:d6:1c:c9:f4:5d:08:79:d1:80:31:52:bb:6a:e3:
ea:53:ad:96:9f:b1:1b:a9:de:58:14:5a:83:64:6d:
86:77:f9:88:65:8c:ea:db:1c:b1:8a:e8:74:f7:62:
e1:40:84:4c:98:2b:08:52:54:b8:67:7b:67:e5:b8:
15:e7:96:d9:07:a6:7b:e0:e1:cc:65:f5:b2:a0:18:
f3:29:9b:d6:f3:cf:e0:a4:15:53:4d:31:d2:cc:41:
bc:a8:1b:49:46:e3:23:92:d0:1f:e1:dd:a2:1a:f4:
8a:10:48:d7:6a:e5:c5:da:82:9e:f8:44:42:61:0e:
74:a8:a6:6b:1d:b8:5e:cb:41:1b:4b:67:a7:45:5f:
bb:ec:08:83:23:2c:6c:ce:18:33:a0:06:9b:cb:a2:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:3D:91:6C:72:8E:46:66:4E:B3:6C:21:5A:76:7C:A3:A8:49:78
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/YoA9kWxyjkZmTrNsIVp2fKOoSXg.roa
sbgp-ipAddrBlock: critical
IPv4:
125.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ad:8c:00:75:19:9d:a1:f7:2d:7d:7f:3f:f9:62:9d:c7:46:e1:
71:ba:1d:5f:ae:44:e5:54:53:c5:56:27:6b:91:bc:fd:bc:f2:
a1:8e:d8:24:5f:db:2b:50:08:74:b2:76:bc:bb:10:a2:4d:3d:
f7:1f:d9:8b:fa:66:67:ee:63:86:25:a0:cc:0f:95:b9:cd:b6:
cb:19:ed:3d:a5:79:8f:7f:8d:a1:d1:22:ba:39:11:12:9d:41:
11:cb:5b:2f:b2:4c:4c:3c:f1:0a:d1:cf:53:10:b1:98:28:4c:
53:38:f9:95:55:b5:82:0a:db:be:0a:91:3b:1f:c0:26:f0:f4:
4f:e6:77:e1:a2:17:3b:b1:d4:99:73:30:4c:88:a8:65:e1:25:
11:2c:10:5d:89:9b:b2:b7:3a:ce:bb:f0:43:5d:ee:a6:d5:3f:
b3:d2:6f:f5:82:e9:7b:e3:24:97:b3:f5:64:f4:c2:46:6b:34:
68:bd:0e:4a:90:ec:8d:1e:2f:68:fa:e3:a3:d4:b8:2f:96:46:
88:dd:d4:63:b4:ae:7b:75:51:a8:fd:fc:d0:f2:82:bd:b5:cb:
96:53:26:31:ab:bd:f0:3c:e1:28:5f:c4:36:9f:b1:1c:64:3f:
ca:11:d0:7a:28:3d:16:cf:53:42:3c:97:f9:15:ac:f9:07:50:
f1:f3:19:b8
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEzMDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYyODAzRDkxNkM3MjhF
NDY2NjRFQjM2QzIxNUE3NjdDQTNBODQ5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6ECjVGhmZIxn+KqdE4ciTnqILTnvh8PwGn1H2yuEYNgnyE6dm
pA/UviEFmUjiJvXcP6dPi/rnLtJCM4WvsLT2UZKoq2on/NEaCvwKWKgc7VTBZIUL
7vS6fw0KDAiRiFRkww93gH4OrGDWHMn0XQh50YAxUrtq4+pTrZafsRup3lgUWoNk
bYZ3+YhljOrbHLGK6HT3YuFAhEyYKwhSVLhne2fluBXnltkHpnvg4cxl9bKgGPMp
m9bzz+CkFVNNMdLMQbyoG0lG4yOS0B/h3aIa9IoQSNdq5cXagp74REJhDnSopmsd
uF7LQRtLZ6dFX7vsCIMjLGzOGDOgBpvLokdPAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUYoA9kWxyjkZmTrNsIVp2fKOoSXgwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL1lvQTlrV3h5amtabVRyTnNJVnAyZktPb1NYZy5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB9BDANBgkqhkiG9w0BAQsFAAOCAQEA
rYwAdRmdofctfX8/+WKdx0bhcbodX65E5VRTxVYna5G8/bzyoY7YJF/bK1AIdLJ2
vLsQok099x/Zi/pmZ+5jhiWgzA+Vuc22yxntPaV5j3+NodEiujkREp1BEctbL7JM
TDzxCtHPUxCxmChMUzj5lVW1ggrbvgqROx/AJvD0T+Z34aIXO7HUmXMwTIioZeEl
ESwQXYmbsrc6zrvwQ13uptU/s9Jv9YLpe+Mkl7P1ZPTCRms0aL0OSpDsjR4vaPrj
o9S4L5ZGiN3UY7Sue3VRqP380PKCvbXLllMmMau98DzhKF/ENp+xHGQ/yhHQeig9
Fs9TQjyX+RWs+QdQ8fMZuA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:10 2026 by rpki-client