
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/1aaOOZBRjFbkERgzZLkyi-oMguo.roa
File: 1aaOOZBRjFbkERgzZLkyi-oMguo.roa (raw, json)
Hash identifier: wZKniyx4mArkLWh3g5EF4+11R+Q1IU1vlkgPSnuNSSk=
Subject key identifier: D5:A6:8E:39:90:51:8C:56:E4:11:18:33:64:B9:32:8B:EA:0C:82:EA
Certificate issuer: /CN=FBFBE00E03FC9290AE586EF8556391D165C2F1AD
Certificate serial: 41
Authority key identifier: FB:FB:E0:0E:03:FC:92:90:AE:58:6E:F8:55:63:91:D1:65:C2:F1:AD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/1aaOOZBRjFbkERgzZLkyi-oMguo.roa
Signing time: Fri 17 Apr 2026 02:24:49 +0000
ROA not before: Fri 17 Apr 2026 02:24:49 +0000
ROA not after: Thu 15 Apr 2027 01:30:02 +0000
asID: 9622
IP address blocks: 157.70.208.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBFBE00E03FC9290AE586EF8556391D165C2F1AD
Validity
Not Before: Apr 17 02:24:49 2026 GMT
Not After : Apr 15 01:30:02 2027 GMT
Subject: CN=D5A68E3990518C56E411183364B9328BEA0C82EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:15:8d:91:c6:f8:63:56:1f:90:a7:aa:44:
76:58:1b:5f:9d:2b:24:d6:26:43:11:cc:53:75:de:
97:f1:ad:eb:ec:e2:0d:f8:f4:d5:cd:35:bc:f0:97:
5e:85:ad:6d:2e:88:be:44:80:b3:53:58:5f:fb:ed:
c2:34:d4:61:0d:c9:a2:55:e1:e6:53:70:ff:63:a3:
f2:92:69:06:13:95:15:b3:34:d7:87:ff:2e:e0:ed:
1e:97:52:32:70:b8:0d:44:73:ed:f2:c8:0d:b4:ff:
31:57:22:4e:f0:71:a7:29:e6:0c:ee:31:ba:d9:f3:
a9:6b:6b:fb:9f:f6:31:d2:cf:2c:81:7f:de:a5:83:
6e:d9:7d:c6:ad:db:b9:e6:44:d2:7b:fe:7d:19:d1:
ff:be:27:d5:e5:cb:fb:10:35:7f:89:73:33:b2:c4:
1b:9e:31:17:3f:0d:e4:6b:9e:2d:e9:f0:f2:ad:40:
20:07:55:bb:a4:8f:ad:1a:ba:5e:3a:7a:28:b7:72:
d1:e3:cd:ae:a7:85:e9:f4:9f:7a:5e:3d:d4:c3:b5:
10:82:0b:14:6f:94:25:a1:ed:3a:f2:7a:6f:e4:1e:
f7:8f:97:aa:42:8b:e5:1a:91:62:37:35:ea:57:c3:
6b:d4:63:5e:f4:7a:b7:50:ae:46:20:06:6d:0c:33:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A6:8E:39:90:51:8C:56:E4:11:18:33:64:B9:32:8B:EA:0C:82:EA
X509v3 Authority Key Identifier:
keyid:FB:FB:E0:0E:03:FC:92:90:AE:58:6E:F8:55:63:91:D1:65:C2:F1:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/1aaOOZBRjFbkERgzZLkyi-oMguo.roa
sbgp-ipAddrBlock: critical
IPv4:
157.70.208.0/21
Signature Algorithm: sha256WithRSAEncryption
54:30:3d:96:91:97:b8:52:0a:89:24:03:d5:a7:88:ba:96:48:
27:9f:89:1d:a4:fd:24:62:40:c8:62:d0:6d:84:34:f9:b2:80:
12:ce:a1:b4:95:de:c3:5d:a8:bd:79:97:b3:a1:3b:53:37:5e:
7e:22:21:f8:27:a2:7b:67:c5:60:a1:2e:d7:ab:7a:14:c5:26:
9f:86:bc:b5:00:8c:3f:11:2b:26:67:1b:3f:9d:32:f4:41:da:
6d:66:03:08:95:75:34:d5:a8:87:2e:1b:18:31:c4:05:62:69:
fc:88:35:ba:32:46:1d:4e:c1:92:ea:e7:d2:16:de:ec:df:53:
fa:f8:79:a7:6a:49:1b:a9:f0:5d:7a:79:8e:02:8f:1f:ae:f0:
b0:3a:59:67:19:b1:06:ce:f8:c3:1b:54:e2:04:6d:88:20:c6:
59:b1:c9:a7:10:1d:0d:24:d6:bc:31:0f:1f:85:36:c6:1a:a4:
da:65:6c:9d:2f:7b:be:ca:6a:f7:d4:eb:32:00:5f:b8:ee:7e:
f4:b1:f7:c3:09:31:56:87:b0:e7:97:b5:e9:51:94:df:00:bf:
8d:68:cf:e7:4a:15:0b:0d:26:c1:01:d7:bd:98:5e:31:5c:9d:
63:06:9a:59:c8:57:29:39:e8:60:1e:49:9c:4d:dc:2e:ba:79:
54:c7:31:3b
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkZC
RTAwRTAzRkM5MjkwQUU1ODZFRjg1NTYzOTFEMTY1QzJGMUFEMB4XDTI2MDQxNzAy
MjQ0OVoXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRDVBNjhFMzk5MDUxOEM1
NkU0MTExODMzNjRCOTMyOEJFQTBDODJFQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALuYFY2RxvhjVh+Qp6pEdlgbX50rJNYmQxHMU3Xel/Gt6+ziDfj0
1c01vPCXXoWtbS6IvkSAs1NYX/vtwjTUYQ3JolXh5lNw/2Oj8pJpBhOVFbM014f/
LuDtHpdSMnC4DURz7fLIDbT/MVciTvBxpynmDO4xutnzqWtr+5/2MdLPLIF/3qWD
btl9xq3bueZE0nv+fRnR/74n1eXL+xA1f4lzM7LEG54xFz8N5GueLenw8q1AIAdV
u6SPrRq6Xjp6KLdy0ePNrqeF6fSfel491MO1EIILFG+UJaHtOvJ6b+Qe94+XqkKL
5RqRYjc16lfDa9RjXvR6t1CuRiAGbQwz5gECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTVpo45kFGMVuQRGDNkuTKL6gyC6jAfBgNVHSMEGDAWgBT7++AOA/ySkK5YbvhV
Y5HRZcLxrTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkzLy1fdmdEZ1A4a3BDdVdHNzRWV09SMFdYQzhhMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1fdmdEZ1A4a3BDdVdHNzRWV09SMFdY
QzhhMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zOTMvMWFhT09aQlJqRmJrRVJnelpMa3lpLW9NZ3VvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA51G0DANBgkqhkiG9w0BAQsFAAOCAQEA
VDA9lpGXuFIKiSQD1aeIupZIJ5+JHaT9JGJAyGLQbYQ0+bKAEs6htJXew12ovXmX
s6E7UzdefiIh+Ceie2fFYKEu16t6FMUmn4a8tQCMPxErJmcbP50y9EHabWYDCJV1
NNWohy4bGDHEBWJp/Ig1ujJGHU7Bkurn0hbe7N9T+vh5p2pJG6nwXXp5jgKPH67w
sDpZZxmxBs74wxtU4gRtiCDGWbHJpxAdDSTWvDEPH4U2xhqk2mVsnS97vspq99Tr
MgBfuO5+9LH3wwkxVoew55e16VGU3wC/jWjP50oVCw0mwQHXvZheMVydYwaaWchX
KTnoYB5JnE3cLrp5VMcxOw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:22 2026 by rpki-client