
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/uXrYOy32fWiKrHsQh6rJkIS3fMk.roa
File: uXrYOy32fWiKrHsQh6rJkIS3fMk.roa (raw, json)
Hash identifier: qWeieMG0TtMMOXhEfJJjS0r746w6nWUZrjZdt4j7hTs=
Subject key identifier: B9:7A:D8:3B:2D:F6:7D:68:8A:AC:7B:10:87:AA:C9:90:84:B7:7C:C9
Certificate issuer: /CN=FBFBE00E03FC9290AE586EF8556391D165C2F1AD
Certificate serial: 3E
Authority key identifier: FB:FB:E0:0E:03:FC:92:90:AE:58:6E:F8:55:63:91:D1:65:C2:F1:AD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/uXrYOy32fWiKrHsQh6rJkIS3fMk.roa
Signing time: Tue 31 Mar 2026 07:46:49 +0000
ROA not before: Tue 31 Mar 2026 07:46:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9622
IP address blocks: 157.70.208.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62 (0x3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBFBE00E03FC9290AE586EF8556391D165C2F1AD
Validity
Not Before: Mar 31 07:46:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B97AD83B2DF67D688AAC7B1087AAC99084B77CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:2f:a0:bc:62:48:9f:9d:4c:85:cd:65:0d:
ee:1a:bc:cc:ea:a2:63:0f:fe:92:1e:8a:25:d3:8f:
51:bb:8b:f2:0f:f9:73:32:5c:39:26:62:8a:f4:71:
08:29:9c:27:26:79:dd:61:8f:80:55:81:3c:ce:2d:
fe:47:6f:fe:ea:34:27:87:42:b8:64:ed:8e:5e:29:
8f:61:8e:c0:c0:ff:64:cb:94:9b:a4:84:58:6d:dc:
f8:23:78:5d:59:b5:b2:a0:f9:8e:74:e1:e6:ef:2d:
e6:f3:5f:de:de:df:30:14:af:16:ba:64:c4:73:b3:
16:ef:b1:60:a1:a0:c6:f1:3e:05:0d:dc:a4:59:77:
91:c7:97:11:d0:00:24:5a:90:7c:aa:5b:c3:d6:24:
06:83:b4:fa:f0:21:e4:27:d0:12:e4:44:5d:88:4d:
eb:09:c1:6b:ca:19:89:dc:d5:fa:28:cc:6d:6c:69:
cc:2b:40:bf:85:68:18:23:e3:a4:60:20:53:09:11:
1f:c9:16:4e:65:80:0a:9d:60:69:07:01:aa:a2:74:
6d:08:42:21:cd:9f:3b:99:ac:60:57:f3:96:03:9c:
ad:cc:88:bb:6f:db:e1:67:36:3d:b7:3e:8f:46:9e:
68:fe:5f:5d:02:26:d1:e3:c5:a6:39:f8:ab:cd:22:
55:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7A:D8:3B:2D:F6:7D:68:8A:AC:7B:10:87:AA:C9:90:84:B7:7C:C9
X509v3 Authority Key Identifier:
keyid:FB:FB:E0:0E:03:FC:92:90:AE:58:6E:F8:55:63:91:D1:65:C2:F1:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-_vgDgP8kpCuWG74VWOR0WXC8a0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-_vgDgP8kpCuWG74VWOR0WXC8a0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/uXrYOy32fWiKrHsQh6rJkIS3fMk.roa
sbgp-ipAddrBlock: critical
IPv4:
157.70.208.0/20
Signature Algorithm: sha256WithRSAEncryption
21:80:48:fe:7e:3e:ab:20:13:cf:d2:41:d7:fe:f3:9a:82:60:
00:a5:34:8e:79:c1:42:d0:2f:a8:43:e1:c5:67:8f:6b:cf:27:
88:bd:a8:25:bc:6a:e6:0e:98:aa:69:6c:af:8e:48:5d:cb:20:
ac:80:fc:99:cd:65:ec:53:cb:2f:29:a9:b1:cb:3c:6b:b7:3a:
2f:f0:da:74:39:b3:d6:ef:32:b2:e6:a3:7c:b0:5a:35:bf:02:
2d:67:95:5b:33:c5:91:b6:79:e0:72:94:9e:67:37:ce:a5:2e:
8e:08:42:21:24:2b:eb:68:e0:f8:7c:e1:6a:bb:d8:2d:57:eb:
cd:ca:32:9c:19:26:34:a7:44:33:9d:78:83:4e:c5:1e:20:22:
08:f7:4f:52:be:ad:12:d7:9e:97:af:e7:49:10:48:ac:4a:3f:
3f:47:24:0b:64:8c:4d:4e:82:04:e8:75:27:8f:fc:a9:c0:38:
a1:00:d4:17:a8:20:26:af:b0:70:66:37:2d:53:64:b6:ae:bd:
0b:40:b4:1c:d3:f8:77:a1:4d:1b:74:53:39:ea:73:e0:11:74:
78:07:ed:e8:98:e3:bd:af:f1:f3:85:6f:f1:e5:31:6e:6d:df:
0d:80:31:11:4f:ed:5b:0d:89:fa:66:16:a7:9c:97:c5:e2:ee:
53:7d:18:ed
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkZC
RTAwRTAzRkM5MjkwQUU1ODZFRjg1NTYzOTFEMTY1QzJGMUFEMB4XDTI2MDMzMTA3
NDY0OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjk3QUQ4M0IyREY2N0Q2
ODhBQUM3QjEwODdBQUM5OTA4NEI3N0NDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKyjL6C8YkifnUyFzWUN7hq8zOqiYw/+kh6KJdOPUbuL8g/5czJc
OSZiivRxCCmcJyZ53WGPgFWBPM4t/kdv/uo0J4dCuGTtjl4pj2GOwMD/ZMuUm6SE
WG3c+CN4XVm1sqD5jnTh5u8t5vNf3t7fMBSvFrpkxHOzFu+xYKGgxvE+BQ3cpFl3
kceXEdAAJFqQfKpbw9YkBoO0+vAh5CfQEuREXYhN6wnBa8oZidzV+ijMbWxpzCtA
v4VoGCPjpGAgUwkRH8kWTmWACp1gaQcBqqJ0bQhCIc2fO5msYFfzlgOcrcyIu2/b
4Wc2Pbc+j0aeaP5fXQIm0ePFpjn4q80iVcECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS5etg7LfZ9aIqsexCHqsmQhLd8yTAfBgNVHSMEGDAWgBT7++AOA/ySkK5YbvhV
Y5HRZcLxrTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkzLy1fdmdEZ1A4a3BDdVdHNzRWV09SMFdYQzhhMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1fdmdEZ1A4a3BDdVdHNzRWV09SMFdY
QzhhMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zOTMvdVhyWU95MzJmV2lLckhzUWg2ckprSVMzZk1rLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJ1G0DANBgkqhkiG9w0BAQsFAAOCAQEA
IYBI/n4+qyATz9JB1/7zmoJgAKU0jnnBQtAvqEPhxWePa88niL2oJbxq5g6Yqmls
r45IXcsgrID8mc1l7FPLLympscs8a7c6L/DadDmz1u8ysuajfLBaNb8CLWeVWzPF
kbZ54HKUnmc3zqUujghCISQr62jg+HzharvYLVfrzcoynBkmNKdEM514g07FHiAi
CPdPUr6tEteel6/nSRBIrEo/P0ckC2SMTU6CBOh1J4/8qcA4oQDUF6ggJq+wcGY3
LVNktq69C0C0HNP4d6FNG3RTOepz4BF0eAft6Jjjva/x84Vv8eUxbm3fDYAxEU/t
Ww2J+mYWp5yXxeLuU30Y7Q==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:41 2026 by rpki-client