
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/fMCpU3Xynd15ONk6IEP5yrKgdyk.roa
File: fMCpU3Xynd15ONk6IEP5yrKgdyk.roa (raw, json)
Hash identifier: 6eJ3exhkMu6O95oHydjvsZk6Veff6PxUNDOY3inh2GA=
Subject key identifier: 7C:C0:A9:53:75:F2:9D:DD:79:38:D9:3A:20:43:F9:CA:B2:A0:77:29
Certificate issuer: /CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
Certificate serial: 1E
Authority key identifier: 14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/fMCpU3Xynd15ONk6IEP5yrKgdyk.roa
Signing time: Tue 31 Mar 2026 08:43:20 +0000
ROA not before: Tue 31 Mar 2026 08:43:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 150.99.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
Validity
Not Before: Mar 31 08:43:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7CC0A95375F29DDD7938D93A2043F9CAB2A07729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:fe:fb:bb:cf:bf:37:6e:e8:4b:5e:86:5f:
b6:ad:e4:50:f3:4b:1d:5e:15:54:e2:05:62:84:56:
ee:b8:7a:3b:9b:53:e3:7a:d1:90:60:d5:50:c6:68:
8f:df:69:a7:50:b2:c4:3b:83:bf:71:a1:87:3f:1a:
de:98:1b:30:84:62:b8:16:42:ca:1a:30:fc:26:3c:
fb:cb:43:a1:cb:4d:bc:8e:e1:5f:3c:75:28:6e:06:
87:bb:c6:71:b2:bb:52:ee:3c:19:83:47:87:e9:2f:
d9:f9:06:fc:07:51:f5:66:cf:bf:e8:bd:77:d9:09:
0b:bc:22:b9:04:ba:32:74:bc:4f:33:f8:4c:65:13:
ca:e2:ab:a1:39:fe:22:8a:4a:e9:b1:5f:f3:69:81:
46:a3:9b:43:7d:d8:e6:b7:b1:f0:dc:62:62:8f:43:
1e:66:bd:74:8a:cf:ee:9e:06:51:b6:23:04:e5:f4:
e2:4d:78:28:29:22:d2:ee:52:5e:88:69:11:7a:c9:
27:e9:6a:a9:1c:b5:00:6b:8d:e5:42:03:e2:46:05:
dd:a7:6b:b2:8f:e5:c5:71:89:10:65:32:e1:56:58:
1a:44:42:0b:e3:17:64:91:bf:c9:4b:2d:12:9c:b1:
5f:ca:1c:50:f1:fb:4d:1d:3e:2c:74:0f:a1:ed:9e:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C0:A9:53:75:F2:9D:DD:79:38:D9:3A:20:43:F9:CA:B2:A0:77:29
X509v3 Authority Key Identifier:
keyid:14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/fMCpU3Xynd15ONk6IEP5yrKgdyk.roa
sbgp-ipAddrBlock: critical
IPv4:
150.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a6:b5:8b:97:78:69:ae:39:bb:25:0e:33:45:34:03:43:f4:3f:
bb:ae:b4:87:da:cb:f0:f2:5b:93:92:d9:f2:37:94:0c:4e:74:
bc:df:cf:db:3f:7f:d8:1f:37:ed:af:3c:98:73:aa:a2:ee:e1:
e9:a8:98:84:97:a7:d2:18:07:7b:3c:1f:a2:90:5f:b7:ab:b5:
d9:bf:e1:77:09:26:1d:55:f8:98:71:cf:b7:c2:af:af:59:03:
0f:b0:9b:8d:d0:13:97:bf:26:10:22:61:96:ce:e0:9f:8c:f2:
f0:56:9e:09:70:24:24:1e:c6:0a:3f:32:d2:4c:0c:b5:bf:c8:
7f:b5:26:4e:67:de:a2:6f:5e:2b:99:0b:67:26:05:a8:ec:8a:
89:6f:de:de:bd:30:7b:82:42:cd:cb:b7:9b:a7:0f:5a:48:69:
d8:9d:09:34:8e:d5:71:08:3c:ab:64:a5:11:cb:1d:9d:35:6b:
29:c1:a0:a4:6f:f1:7f:52:fc:59:71:8a:e2:91:d4:c8:52:f6:
b7:79:9a:f3:bd:15:fe:89:5b:24:0b:50:c1:7d:25:76:90:37:
8d:cd:20:59:5c:c8:92:69:7b:89:73:60:14:0c:41:ff:8f:d0:
17:ab:eb:1d:4b:64:da:95:73:e4:7a:75:d4:e2:f7:df:d9:fd:
22:7b:68:44
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNEVD
REUzMzFEQjNFRDE0NTlEOUU0NzhENzMwMTcwRjRDNzBFOUI3MB4XDTI2MDMzMTA4
NDMyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0NDMEE5NTM3NUYyOURE
RDc5MzhEOTNBMjA0M0Y5Q0FCMkEwNzcyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMPA/vu7z783buhLXoZftq3kUPNLHV4VVOIFYoRW7rh6O5tT43rR
kGDVUMZoj99pp1CyxDuDv3Ghhz8a3pgbMIRiuBZCyhow/CY8+8tDoctNvI7hXzx1
KG4Gh7vGcbK7Uu48GYNHh+kv2fkG/AdR9WbPv+i9d9kJC7wiuQS6MnS8TzP4TGUT
yuKroTn+IopK6bFf82mBRqObQ33Y5rex8NxiYo9DHma9dIrP7p4GUbYjBOX04k14
KCki0u5SXohpEXrJJ+lqqRy1AGuN5UID4kYF3adrso/lxXGJEGUy4VZYGkRCC+MX
ZJG/yUstEpyxX8ocUPH7TR0+LHQPoe2eoncCAwEAAaOCAdowggHWMB0GA1UdDgQW
BBR8wKlTdfKd3Xk42TogQ/nKsqB3KTAfBgNVHSMEGDAWgBQU7N4zHbPtFFnZ5HjX
MBcPTHDptzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjE2Ni9GT3plTXgyejdSUloyZVI0MXpBWEQweHc2YmMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GT3plTXgyejdSUloyZVI0MXpBWEQw
eHc2YmMuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjE2Ni9mTUNwVTNYeW5kMTVPTms2SUVQNXlyS2dkeWsucm9hMB4G
CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlmMwDQYJKoZIhvcNAQELBQADggEB
AKa1i5d4aa45uyUOM0U0A0P0P7uutIfay/DyW5OS2fI3lAxOdLzfz9s/f9gfN+2v
PJhzqqLu4emomISXp9IYB3s8H6KQX7ertdm/4XcJJh1V+Jhxz7fCr69ZAw+wm43Q
E5e/JhAiYZbO4J+M8vBWnglwJCQexgo/MtJMDLW/yH+1Jk5n3qJvXiuZC2cmBajs
iolv3t69MHuCQs3Lt5unD1pIadidCTSO1XEIPKtkpRHLHZ01aynBoKRv8X9S/Flx
iuKR1MhS9rd5mvO9Ff6JWyQLUMF9JXaQN43NIFlcyJJpe4lzYBQMQf+P0Ber6x1L
ZNqVc+R6ddTi99/Z/SJ7aEQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:49 2026 by rpki-client