
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30039/FBId7qN6V-AByTrIuvayrePBGDA.roa
File: FBId7qN6V-AByTrIuvayrePBGDA.roa (raw, json)
Hash identifier: e0RO2gPPPo6yOvxd0ap5Mg1LMB+/Hno3PdsjIS9cKJQ=
Subject key identifier: 14:12:1D:EE:A3:7A:57:E0:01:C9:3A:C8:BA:F6:B2:AD:E3:C1:18:30
Certificate issuer: /CN=03B60C8F986C1F1DA04B86CC3E29BAE0067491C6
Certificate serial: 02
Authority key identifier: 03:B6:0C:8F:98:6C:1F:1D:A0:4B:86:CC:3E:29:BA:E0:06:74:91:C6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/FBId7qN6V-AByTrIuvayrePBGDA.roa
Signing time: Wed 25 Mar 2026 06:11:32 +0000
ROA not before: Wed 25 Mar 2026 06:11:32 +0000
ROA not after: Wed 24 Mar 2027 02:46:29 +0000
asID: 17511
IP address blocks: 2001:ce8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03B60C8F986C1F1DA04B86CC3E29BAE0067491C6
Validity
Not Before: Mar 25 06:11:32 2026 GMT
Not After : Mar 24 02:46:29 2027 GMT
Subject: CN=14121DEEA37A57E001C93AC8BAF6B2ADE3C11830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:00:e6:3a:f2:af:91:6c:39:87:c2:38:fc:8e:
4e:62:b1:1f:d4:f4:1a:10:6d:30:99:24:c7:3a:b8:
ef:cd:13:5c:7a:c8:57:aa:04:3f:6c:13:b5:d5:c8:
c8:9a:00:ad:75:0e:5b:7a:e0:3e:1f:83:0b:7c:8d:
70:34:fb:29:f2:40:ce:eb:fa:36:59:a8:96:3e:75:
df:de:2f:8b:58:24:fb:04:b3:ce:f7:ca:10:f8:01:
28:4c:3c:9e:5b:1d:2f:c9:4d:fa:de:7d:b6:2a:3a:
09:c9:de:42:10:c4:cf:ce:13:07:ea:d3:f2:3f:bd:
0f:c0:d6:fd:b1:54:87:43:7c:6a:50:10:93:ac:48:
bf:87:06:c1:59:9f:8a:7d:13:89:65:5b:33:e9:cb:
c2:3c:69:c5:23:2b:9e:01:64:6d:8c:9e:70:99:c7:
1c:b5:61:ed:f3:40:86:e1:76:c3:38:ed:1d:64:8c:
3b:6b:e3:66:f7:f4:b3:50:cb:b7:3e:ae:bc:f0:40:
ed:57:94:d6:15:f6:20:9f:a4:d9:57:5c:e3:54:cb:
5d:12:d7:22:a8:61:84:34:63:96:0e:28:14:11:82:
78:0d:85:1c:d5:1f:f7:e3:22:f2:cb:eb:09:4e:09:
c6:73:43:76:44:0c:0e:3b:eb:df:85:5a:d8:20:15:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:12:1D:EE:A3:7A:57:E0:01:C9:3A:C8:BA:F6:B2:AD:E3:C1:18:30
X509v3 Authority Key Identifier:
keyid:03:B6:0C:8F:98:6C:1F:1D:A0:4B:86:CC:3E:29:BA:E0:06:74:91:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/FBId7qN6V-AByTrIuvayrePBGDA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:ce8::/32
Signature Algorithm: sha256WithRSAEncryption
8a:c0:17:f5:1a:c8:db:33:48:b3:52:11:a7:f3:1b:b3:57:fb:
36:5f:70:31:65:6b:01:2e:40:ef:de:ed:61:ee:f2:87:db:22:
c2:22:e9:cd:a3:be:90:ae:8e:33:d3:97:3c:25:1c:1c:d4:b3:
4c:25:1d:80:a1:ab:7d:31:2f:40:92:b3:a4:f8:a7:98:f2:95:
8b:71:ff:82:3e:41:95:38:3f:8b:f4:5a:ee:18:bf:4f:aa:9a:
02:1f:a0:2e:48:07:c1:31:7e:c0:74:08:ee:ff:85:a6:9a:20:
4b:25:79:b4:63:51:52:5c:06:f0:1f:2b:2d:73:8c:83:bf:a1:
36:c5:9c:e0:23:f4:77:e2:95:6e:fe:a1:1d:3b:45:30:99:86:
99:f6:b7:c8:50:91:38:0b:69:a8:6d:90:a1:8c:60:f6:f3:20:
9a:1c:1a:67:89:fd:9c:15:05:f0:68:50:d8:63:25:a9:40:88:
9e:c5:cc:0c:0d:21:95:8d:7d:e2:b0:5f:bf:e2:d9:3f:bd:5a:
d5:6d:3f:8a:99:eb:3b:fe:bd:38:c4:af:23:d8:c4:13:25:71:
e9:a8:61:1d:59:25:e5:60:5e:ca:a4:b2:2a:1a:94:88:34:24:
0e:12:ee:ca:72:a7:39:21:e6:73:c0:0b:49:b9:c0:8a:b0:f3:
2b:77:52:9a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwM0I2
MEM4Rjk4NkMxRjFEQTA0Qjg2Q0MzRTI5QkFFMDA2NzQ5MUM2MB4XDTI2MDMyNTA2
MTEzMloXDTI3MDMyNDAyNDYyOVowMzExMC8GA1UEAxMoMTQxMjFERUVBMzdBNTdF
MDAxQzkzQUM4QkFGNkIyQURFM0MxMTgzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANsA5jryr5FsOYfCOPyOTmKxH9T0GhBtMJkkxzq4780TXHrIV6oE
P2wTtdXIyJoArXUOW3rgPh+DC3yNcDT7KfJAzuv6Nlmolj51394vi1gk+wSzzvfK
EPgBKEw8nlsdL8lN+t59tio6CcneQhDEz84TB+rT8j+9D8DW/bFUh0N8alAQk6xI
v4cGwVmfin0TiWVbM+nLwjxpxSMrngFkbYyecJnHHLVh7fNAhuF2wzjtHWSMO2vj
Zvf0s1DLtz6uvPBA7VeU1hX2IJ+k2Vdc41TLXRLXIqhhhDRjlg4oFBGCeA2FHNUf
9+Mi8svrCU4JxnNDdkQMDjvr34Va2CAVA5MCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQUEh3uo3pX4AHJOsi69rKt48EYMDAfBgNVHSMEGDAWgBQDtgyPmGwfHaBLhsw+
KbrgBnSRxjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMzkvQTdZTWo1aHNIeDJnUzRiTVBpbTY0QVowa2NZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQTdZTWo1aHNIeDJnUzRiTVBpbTY0
QVowa2NZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDM5L0ZCSWQ3cU42Vi1BQnlUckl1dmF5cmVQQkdEQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQzoMA0GCSqGSIb3DQEBCwUAA4IBAQCKwBf1GsjbM0izUhGn8xuz
V/s2X3AxZWsBLkDv3u1h7vKH2yLCIunNo76Qro4z05c8JRwc1LNMJR2Aoat9MS9A
krOk+KeY8pWLcf+CPkGVOD+L9FruGL9PqpoCH6AuSAfBMX7AdAju/4WmmiBLJXm0
Y1FSXAbwHystc4yDv6E2xZzgI/R34pVu/qEdO0UwmYaZ9rfIUJE4C2mobZChjGD2
8yCaHBpnif2cFQXwaFDYYyWpQIiexcwMDSGVjX3isF+/4tk/vVrVbT+Kmes7/r04
xK8j2MQTJXHpqGEdWSXlYF7KpLIqGpSINCQOEu7Kcqc5IeZzwAtJucCKsPMrd1Ka
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:08 2026 by rpki-client