
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/nFM15c1-A-wxbi04dKN01jFZ3ag.roa
File: nFM15c1-A-wxbi04dKN01jFZ3ag.roa (raw, json)
Hash identifier: gT8V9CtjXaSkQ38VjuPpV2UmXQE0uYCDxCcIkWESgmU=
Subject key identifier: 9C:53:35:E5:CD:7E:03:EC:31:6E:2D:38:74:A3:74:D6:31:59:DD:A8
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0597
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nFM15c1-A-wxbi04dKN01jFZ3ag.roa
Signing time: Tue 31 Mar 2026 08:20:27 +0000
ROA not before: Tue 31 Mar 2026 08:20:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4686
IP address blocks: 218.225.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431 (0x597)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Mar 31 08:20:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9C5335E5CD7E03EC316E2D3874A374D63159DDA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:48:a8:51:4f:79:9c:d3:98:ab:f0:bf:0e:
fd:f9:07:44:4c:f9:ad:d5:5d:75:cb:4b:0f:70:ca:
b0:82:2d:46:3d:62:3a:d8:e9:dc:e2:69:55:2f:43:
90:d6:fa:12:8a:e7:0f:53:9c:5a:0e:9b:e8:24:ea:
c4:b7:1b:80:47:fe:87:cc:39:4b:60:22:f1:05:54:
65:3f:89:61:f8:76:a0:89:98:b2:24:2a:d5:9a:f3:
dd:59:7c:fe:43:d4:31:61:41:aa:5a:b3:1e:02:12:
5b:8f:00:a3:d7:93:bb:b0:a8:1f:54:a5:9b:30:c3:
12:84:96:05:0f:38:59:87:28:69:23:43:9d:d1:6f:
f4:c3:91:e7:6a:63:5a:cc:56:b3:56:c6:3c:21:8d:
11:a6:a3:8b:b6:db:dc:5f:c2:cc:fe:32:61:e3:5b:
6b:3a:f4:11:1b:6a:fa:f6:8b:9d:7f:a9:9c:91:a7:
6c:74:f7:85:9a:b6:5e:a2:bb:1f:4a:63:f6:8a:b0:
5e:2a:d8:dc:07:5d:c7:02:98:98:4e:7b:f8:50:f0:
03:64:a2:f3:37:44:3c:b8:85:e0:e6:08:24:9a:32:
54:00:90:8f:7f:8c:1f:68:87:e7:84:a5:3f:d4:3b:
e7:56:15:1a:83:51:af:b2:f4:53:b9:ce:96:d6:0c:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:53:35:E5:CD:7E:03:EC:31:6E:2D:38:74:A3:74:D6:31:59:DD:A8
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/nFM15c1-A-wxbi04dKN01jFZ3ag.roa
sbgp-ipAddrBlock: critical
IPv4:
218.225.224.0/20
Signature Algorithm: sha256WithRSAEncryption
22:12:92:91:ec:be:d1:9c:7e:8a:68:d5:fd:5f:32:be:4e:9e:
e7:d8:7c:e4:89:47:19:4c:18:f7:1d:29:4f:b8:80:4a:6f:00:
94:f3:37:e3:35:71:9d:5c:e1:73:7e:b1:4c:ef:09:34:53:05:
cb:3c:38:c2:b7:4f:19:ba:4a:17:6e:40:46:f3:69:0d:50:bb:
8b:56:52:08:a4:3c:fc:5b:ec:42:43:3e:6f:13:eb:40:06:a7:
44:6c:a3:2b:7b:5e:2d:2b:73:d5:33:46:91:58:8e:8c:8a:0e:
79:79:6d:0e:85:f9:cf:72:be:a4:d4:fa:57:a5:4f:b8:f3:ca:
2b:94:ed:11:ca:2f:9f:53:30:51:c3:58:18:77:46:44:5d:a7:
4e:77:68:b6:82:5a:2b:c6:39:fa:50:20:81:0a:53:94:b5:a8:
9f:4c:27:19:f0:a5:25:ea:9b:33:d1:e9:ec:fb:82:8e:49:45:
9c:78:91:a7:8e:eb:29:60:7f:7d:44:25:ee:4b:c8:df:c7:7a:
9d:c1:0a:1d:e2:96:2f:c1:36:39:55:e9:65:cb:0f:d8:44:05:
8e:e5:6e:69:aa:99:20:37:a2:f2:62:f5:14:82:0d:9c:71:65:
55:29:34:1f:e5:fc:d5:51:7e:8b:7e:d8:73:9c:9a:29:19:ef:
57:88:6a:80
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIwMjdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlDNTMzNUU1Q0Q3RTAz
RUMzMTZFMkQzODc0QTM3NEQ2MzE1OUREQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC47EioUU95nNOYq/C/Dv35B0RM+a3VXXXLSw9wyrCCLUY9YjrY
6dziaVUvQ5DW+hKK5w9TnFoOm+gk6sS3G4BH/ofMOUtgIvEFVGU/iWH4dqCJmLIk
KtWa891ZfP5D1DFhQapasx4CEluPAKPXk7uwqB9UpZswwxKElgUPOFmHKGkjQ53R
b/TDkedqY1rMVrNWxjwhjRGmo4u229xfwsz+MmHjW2s69BEbavr2i51/qZyRp2x0
94Watl6iux9KY/aKsF4q2NwHXccCmJhOe/hQ8ANkovM3RDy4heDmCCSaMlQAkI9/
jB9oh+eEpT/UO+dWFRqDUa+y9FO5zpbWDCTfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUnFM15c1+A+wxbi04dKN01jFZ3agwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L25GTTE1YzEtQS13eGJpMDRkS04wMWpGWjNhZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATa4eAwDQYJKoZIhvcNAQELBQADggEB
ACISkpHsvtGcfopo1f1fMr5OnufYfOSJRxlMGPcdKU+4gEpvAJTzN+M1cZ1c4XN+
sUzvCTRTBcs8OMK3Txm6ShduQEbzaQ1Qu4tWUgikPPxb7EJDPm8T60AGp0Rsoyt7
Xi0rc9UzRpFYjoyKDnl5bQ6F+c9yvqTU+lelT7jzyiuU7RHKL59TMFHDWBh3RkRd
p053aLaCWivGOfpQIIEKU5S1qJ9MJxnwpSXqmzPR6ez7go5JRZx4kaeO6ylgf31E
Je5LyN/Hep3BCh3ili/BNjlV6WXLD9hEBY7lbmmqmSA3ovJi9RSCDZxxZVUpNB/l
/NVRfot+2HOcmikZ71eIaoA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:27 2026 by rpki-client