
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20219/FHEKF2UQkX-F5uX7Isusp-zKzAQ.roa
File: FHEKF2UQkX-F5uX7Isusp-zKzAQ.roa (raw, json)
Hash identifier: ELGMqruWmJyCfU3eydkM9gsal1fOqtVWTMc95I1ZScA=
Subject key identifier: 14:71:0A:17:65:10:91:7F:85:E6:E5:FB:22:CB:AC:A7:EC:CA:CC:04
Certificate issuer: /CN=2F6DF65BA24733C4B4EBC3FCD1D7F45AC2AB64AC
Certificate serial: 0A
Authority key identifier: 2F:6D:F6:5B:A2:47:33:C4:B4:EB:C3:FC:D1:D7:F4:5A:C2:AB:64:AC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/FHEKF2UQkX-F5uX7Isusp-zKzAQ.roa
Signing time: Tue 31 Mar 2026 08:32:33 +0000
ROA not before: Tue 31 Mar 2026 08:32:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63801
IP address blocks: 192.50.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F6DF65BA24733C4B4EBC3FCD1D7F45AC2AB64AC
Validity
Not Before: Mar 31 08:32:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=14710A176510917F85E6E5FB22CBACA7ECCACC04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:dc:f5:fb:be:c6:e6:95:68:f5:0e:b9:e4:
ce:65:11:bf:51:85:5c:b3:64:91:71:f7:19:1d:2f:
9e:b8:f2:a0:52:ee:d5:5b:60:da:0c:c8:cb:82:6d:
9f:4b:b6:b5:12:26:8e:4a:e6:d2:9e:32:3c:b8:8f:
c9:c2:80:d2:0d:f9:e8:c1:8c:f6:44:11:1e:e5:d6:
bf:cb:12:be:0f:bb:33:5b:91:6c:4e:ec:22:60:e3:
24:5c:1c:ef:8e:d9:c3:f4:9b:4c:62:1d:89:c1:e3:
6b:ad:39:0d:f6:4b:ee:72:2e:1b:03:65:92:17:13:
60:30:92:bc:3d:2a:ea:d7:8a:1d:84:06:53:e9:96:
76:77:74:ce:7a:94:2e:56:4a:b4:a3:9e:16:1f:eb:
c9:f0:13:c9:e0:11:34:20:21:7b:2b:cd:9e:62:63:
95:52:e2:c2:04:58:a8:60:4e:5d:30:47:3c:92:37:
25:a8:c8:42:aa:0c:10:7f:6d:b7:5b:c3:f3:13:af:
6f:4c:6b:a3:6e:52:76:8b:6d:0b:e6:1f:eb:8a:1d:
c6:cc:c8:df:6e:20:be:e1:59:2f:99:e1:90:db:16:
6b:0c:66:e0:6c:d1:98:da:18:07:0b:01:09:8d:e8:
91:51:e8:42:66:54:12:66:40:74:fd:8f:33:58:f1:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:71:0A:17:65:10:91:7F:85:E6:E5:FB:22:CB:AC:A7:EC:CA:CC:04
X509v3 Authority Key Identifier:
keyid:2F:6D:F6:5B:A2:47:33:C4:B4:EB:C3:FC:D1:D7:F4:5A:C2:AB:64:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/L232W6JHM8S068P80df0WsKrZKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L232W6JHM8S068P80df0WsKrZKw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20219/FHEKF2UQkX-F5uX7Isusp-zKzAQ.roa
sbgp-ipAddrBlock: critical
IPv4:
192.50.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:39:fb:7a:fb:12:f6:cb:28:4d:a8:0a:c4:6a:55:13:51:36:
df:55:ba:5b:69:49:03:d6:82:86:09:6f:c0:27:11:d5:b2:2b:
59:6b:48:dc:14:51:ce:74:9e:60:52:84:09:b1:56:8e:7e:8d:
91:7f:90:06:a9:2c:4f:ef:00:53:58:d1:0d:73:90:16:db:d1:
96:fd:6f:fd:f1:00:d2:e1:e9:d7:08:ec:1a:9e:df:48:23:a7:
75:bf:8b:77:fe:8d:4b:2a:65:f3:b2:7b:7a:9c:d8:4f:47:88:
fb:75:39:c5:4e:14:f2:0e:2a:bc:5d:2a:af:e1:6d:95:62:b2:
e9:4b:1d:33:f4:88:74:77:0a:4b:a2:3e:c5:23:3f:51:da:82:
a4:fb:58:b9:1e:64:b6:2e:66:56:c2:38:c2:0d:76:a4:d3:10:
66:34:52:58:24:2e:18:cb:ce:c1:51:6d:e4:4e:a4:21:92:6c:
e0:cd:21:51:1b:fb:92:4e:30:ac:f1:a0:4a:9f:f5:ff:71:65:
31:9a:7a:4c:7a:51:fa:64:19:72:e5:70:f5:cf:47:5c:89:73:
75:af:c1:a8:1d:7a:26:36:c2:b4:2a:79:94:da:f5:03:53:62:
56:9d:3c:f8:22:5f:47:2e:6c:35:ff:f3:28:c2:6e:b4:35:b1:
60:07:8a:33
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRjZE
RjY1QkEyNDczM0M0QjRFQkMzRkNEMUQ3RjQ1QUMyQUI2NEFDMB4XDTI2MDMzMTA4
MzIzM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTQ3MTBBMTc2NTEwOTE3
Rjg1RTZFNUZCMjJDQkFDQTdFQ0NBQ0MwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKsY3PX7vsbmlWj1DrnkzmURv1GFXLNkkXH3GR0vnrjyoFLu1Vtg
2gzIy4Jtn0u2tRImjkrm0p4yPLiPycKA0g356MGM9kQRHuXWv8sSvg+7M1uRbE7s
ImDjJFwc747Zw/SbTGIdicHja605DfZL7nIuGwNlkhcTYDCSvD0q6teKHYQGU+mW
dnd0znqULlZKtKOeFh/ryfATyeARNCAheyvNnmJjlVLiwgRYqGBOXTBHPJI3JajI
QqoMEH9tt1vD8xOvb0xro25SdottC+Yf64odxszI324gvuFZL5nhkNsWawxm4GzR
mNoYBwsBCY3okVHoQmZUEmZAdP2PM1jxoIMCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQUcQoXZRCRf4Xm5fsiy6yn7MrMBDAfBgNVHSMEGDAWgBQvbfZbokczxLTrw/zR
1/RawqtkrDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTkvTDIzMlc2SkhNOFMwNjhQODBkZjBXc0tyWkt3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTDIzMlc2SkhNOFMwNjhQODBkZjBX
c0tyWkt3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjE5L0ZIRUtGMlVRa1gtRjV1WDdJc3VzcC16S3pBUS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAMoQwDQYJKoZIhvcNAQELBQAD
ggEBADw5+3r7EvbLKE2oCsRqVRNRNt9VultpSQPWgoYJb8AnEdWyK1lrSNwUUc50
nmBShAmxVo5+jZF/kAapLE/vAFNY0Q1zkBbb0Zb9b/3xANLh6dcI7Bqe30gjp3W/
i3f+jUsqZfOye3qc2E9HiPt1OcVOFPIOKrxdKq/hbZVisulLHTP0iHR3CkuiPsUj
P1HagqT7WLkeZLYuZlbCOMINdqTTEGY0UlgkLhjLzsFRbeROpCGSbODNIVEb+5JO
MKzxoEqf9f9xZTGaekx6UfpkGXLlcPXPR1yJc3WvwagdeiY2wrQqeZTa9QNTYlad
PPgiX0cubDX/8yjCbrQ1sWAHijM=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:59 2026 by rpki-client