
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/lf9yTkZWPaRDsDbmeNeC3XxlFFA.roa
File: lf9yTkZWPaRDsDbmeNeC3XxlFFA.roa (raw, json)
Hash identifier: xAPp6ozHSPH8+CNpyy0rHEGxrs+Y9UlXqIJxNRnnISw=
Subject key identifier: 95:FF:72:4E:46:56:3D:A4:43:B0:36:E6:78:D7:82:DD:7C:65:14:50
Certificate issuer: /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial: 80
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/lf9yTkZWPaRDsDbmeNeC3XxlFFA.roa
Signing time: Tue 31 Mar 2026 07:32:35 +0000
ROA not before: Tue 31 Mar 2026 07:32:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 202.209.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
Validity
Not Before: Mar 31 07:32:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=95FF724E46563DA443B036E678D782DD7C651450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:dd:0f:4d:ee:93:aa:5c:28:1a:7c:00:a4:
04:d6:8d:42:1c:30:f9:0d:de:34:d0:18:aa:4a:49:
d9:1e:26:93:23:fb:c9:ef:41:3f:3e:dd:9e:a3:55:
23:4c:e1:55:80:66:9a:0e:d0:7f:33:a6:56:ef:90:
27:90:da:06:66:d1:c3:e7:be:bd:4d:8c:92:ce:ce:
fb:64:80:b4:da:b7:5b:26:85:90:c0:92:8e:c1:d6:
47:ce:58:5b:c8:9c:81:96:9e:89:e9:59:e4:0e:b6:
7d:83:b3:af:9a:d2:e5:a0:dd:5c:ca:c7:5e:a9:c7:
d1:38:c8:ac:6c:ff:69:48:0e:9a:ac:ee:86:13:6a:
d8:fb:e9:ec:20:15:b7:46:7d:b4:b7:d4:0b:75:14:
f5:37:cf:c0:92:69:c9:de:ec:d6:95:27:ec:99:6b:
ad:86:3d:71:ff:ff:ed:64:1c:41:86:87:f0:0d:31:
ba:36:d9:09:f5:fe:7d:91:85:ce:2a:18:53:da:d6:
26:82:ba:04:6f:44:9d:a4:08:6f:47:84:7c:29:42:
19:e8:aa:7f:0c:af:90:7c:41:71:83:cf:11:b3:15:
8b:c4:8e:b2:5a:d7:6f:ae:1d:62:1b:06:61:e0:35:
35:cb:8c:5c:06:53:03:74:e7:f0:d2:53:96:f0:9a:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FF:72:4E:46:56:3D:A4:43:B0:36:E6:78:D7:82:DD:7C:65:14:50
X509v3 Authority Key Identifier:
keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/lf9yTkZWPaRDsDbmeNeC3XxlFFA.roa
sbgp-ipAddrBlock: critical
IPv4:
202.209.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:b8:9e:c9:75:8d:3e:20:e4:f7:50:6d:a9:45:c3:7e:b5:41:
e9:f4:d4:7b:02:15:a1:f5:99:3a:ee:31:e7:28:38:df:6e:96:
6e:c8:94:26:76:fa:04:cd:fd:b0:97:92:8f:c0:4c:ae:75:1c:
77:c8:eb:de:f1:a1:45:dc:3d:8c:45:05:5c:1b:24:64:38:d3:
10:0e:2f:a9:d9:3b:59:97:cd:4c:98:2c:53:a0:03:b0:6e:08:
f1:9e:e6:c2:72:7e:76:d4:cf:db:6b:6c:d7:df:6b:a9:b0:bd:
02:d1:ec:c2:89:06:74:59:a8:87:46:02:0b:6e:d6:01:62:ce:
bb:f3:26:b0:fd:ef:fa:90:8d:be:04:2e:cf:80:f1:47:46:b4:
6c:14:ff:b6:e5:e5:9f:90:41:4b:e4:f2:4f:2f:9a:25:9d:4a:
fa:d4:e4:8d:dc:55:75:93:9f:d1:dc:63:bd:4e:cb:f2:4b:9e:
dc:3a:9f:27:b6:c9:7e:77:16:61:61:ae:fe:d3:05:69:4c:62:
23:35:f4:e8:4b:6e:97:1a:03:36:ec:73:25:bc:a8:1d:b6:0c:
8c:9a:05:4f:10:7d:d2:df:f1:cf:5d:b8:4e:30:af:f8:85:da:
51:19:a4:53:dd:69:65:ed:c7:b1:54:c1:91:df:0f:59:d9:33:
95:4b:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:40:37 2026 by rpki-client