
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/k2fim1Nwk3u9fnNsJdTQuVl7eBY.roa
File: k2fim1Nwk3u9fnNsJdTQuVl7eBY.roa (raw, json)
Hash identifier: Ypm96Ki/2qT8rDAE0dQ5hqNpN+kacOmkWhxfxnc/IuI=
Subject key identifier: 93:67:E2:9B:53:70:93:7B:BD:7E:73:6C:25:D4:D0:B9:59:7B:78:16
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0476
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/k2fim1Nwk3u9fnNsJdTQuVl7eBY.roa
Signing time: Tue 31 Mar 2026 08:12:35 +0000
ROA not before: Tue 31 Mar 2026 08:12:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4721
IP address blocks: 175.41.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Mar 31 08:12:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9367E29B5370937BBD7E736C25D4D0B9597B7816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3b:0f:17:aa:b4:29:c3:3c:8d:0c:f3:9b:7a:
c9:b0:d3:a8:03:5c:e2:60:52:d0:d2:11:b1:7a:45:
4a:52:3a:01:6d:ae:e0:98:f5:90:7e:7d:45:07:4a:
2b:c5:9f:ac:d9:08:ce:68:bb:2e:60:88:33:6d:d0:
03:4b:b1:dd:ca:6c:db:9a:9c:67:5c:dd:86:ad:c7:
94:a5:24:cc:2e:13:20:a9:da:58:93:c1:ec:a2:6a:
ca:4e:bb:37:79:a1:40:e8:75:a9:08:c6:f5:42:a1:
88:c4:ca:11:8d:00:bb:8d:56:43:d2:04:d9:1f:4c:
d7:58:31:11:47:22:8b:9b:b7:27:0f:b2:60:b3:92:
0a:af:f4:97:db:68:d0:12:28:0f:ef:89:a3:fa:6c:
6a:8e:88:41:47:ec:2b:20:a6:71:22:86:db:24:8b:
e1:c1:b6:29:e0:25:99:e3:57:2e:dd:87:08:39:8e:
b3:63:fe:6c:37:2f:e4:4e:b9:8c:e4:0f:68:4b:21:
da:b7:4f:99:86:a6:6a:5c:fe:2a:1c:51:5e:ab:6a:
aa:1d:13:a5:da:67:19:f4:82:9a:53:a4:7e:db:b3:
96:af:c6:b1:8e:71:34:c3:7d:8e:c2:6b:3b:2d:ba:
9d:7b:cf:54:c3:9d:c7:b6:e4:ce:48:08:3b:0f:83:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:67:E2:9B:53:70:93:7B:BD:7E:73:6C:25:D4:D0:B9:59:7B:78:16
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/k2fim1Nwk3u9fnNsJdTQuVl7eBY.roa
sbgp-ipAddrBlock: critical
IPv4:
175.41.64.0/18
Signature Algorithm: sha256WithRSAEncryption
47:ec:30:52:be:ea:43:65:7a:4f:db:71:a1:88:1c:bf:1d:fc:
88:af:60:f0:48:b9:a8:be:be:b0:86:cb:83:26:13:9a:5f:6e:
6b:38:fd:d9:77:a2:90:b4:f4:86:aa:51:9c:67:07:08:1a:61:
2c:d7:4a:66:f5:9f:ac:f1:1f:e9:ac:70:5b:f5:9e:af:ae:df:
f5:b9:5d:b6:40:ec:2e:91:38:f7:a9:db:26:e3:aa:63:e8:ed:
e5:eb:3f:59:2a:79:16:08:1a:df:01:13:ca:fc:2a:65:db:b1:
f4:7e:d7:a3:9b:a1:77:22:30:7b:af:25:46:ed:b6:46:37:4d:
ab:be:7f:5f:08:ed:be:b9:73:5d:2d:c2:8a:a3:f1:d7:45:b7:
54:f8:07:79:71:b1:c2:9c:75:b6:a7:d6:7b:00:36:bc:87:42:
bd:e9:72:bf:7d:d5:73:db:fe:ca:f0:d7:48:22:bd:b8:22:8c:
27:e3:95:0d:49:e8:a9:6e:b7:2f:2a:38:34:6b:a2:04:f3:30:
43:e5:a7:42:c9:65:0f:c6:26:01:19:1d:11:c9:d0:c6:6e:f6:
a3:7b:1a:10:8b:f1:cb:b3:94:e2:de:27:3b:b9:5b:5e:0a:11:
03:e9:23:cc:d3:d8:4d:d5:10:05:62:4a:e6:46:ed:c9:08:5a:
dc:df:7f:05
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkzNjdFMjlCNTM3MDkz
N0JCRDdFNzM2QzI1RDREMEI5NTk3Qjc4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIOw8XqrQpwzyNDPObesmw06gDXOJgUtDSEbF6RUpSOgFtruCY
9ZB+fUUHSivFn6zZCM5ouy5giDNt0ANLsd3KbNuanGdc3Yatx5SlJMwuEyCp2liT
weyiaspOuzd5oUDodakIxvVCoYjEyhGNALuNVkPSBNkfTNdYMRFHIoubtycPsmCz
kgqv9JfbaNASKA/viaP6bGqOiEFH7CsgpnEihtski+HBtingJZnjVy7dhwg5jrNj
/mw3L+ROuYzkD2hLIdq3T5mGpmpc/iocUV6raqodE6XaZxn0gppTpH7bs5avxrGO
cTTDfY7Cazstup17z1TDnce25M5ICDsPg+TZAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUk2fim1Nwk3u9fnNsJdTQuVl7eBYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL2syZmltMU53azN1OWZuTnNKZFRRdVZsN2VCWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAavKUAwDQYJKoZIhvcNAQELBQADggEB
AEfsMFK+6kNlek/bcaGIHL8d/IivYPBIuai+vrCGy4MmE5pfbms4/dl3opC09Iaq
UZxnBwgaYSzXSmb1n6zxH+mscFv1nq+u3/W5XbZA7C6ROPep2ybjqmPo7eXrP1kq
eRYIGt8BE8r8KmXbsfR+16OboXciMHuvJUbttkY3Tau+f18I7b65c10twoqj8ddF
t1T4B3lxscKcdban1nsANryHQr3pcr991XPb/srw10givbgijCfjlQ1J6Kluty8q
ODRrogTzMEPlp0LJZQ/GJgEZHRHJ0MZu9qN7GhCL8cuzlOLeJzu5W14KEQPpI8zT
2E3VEAViSuZG7ckIWtzffwU=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:16 2026 by rpki-client