
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/X-ZPavQ2RNi4sqRWD8gSAB1AGiM.roa
File: X-ZPavQ2RNi4sqRWD8gSAB1AGiM.roa (raw, json)
Hash identifier: ftUJJDjvxhQXmDhtqgkLZ8iTNikaIZ7Ex8wak6i06ew=
Subject key identifier: 5F:E6:4F:6A:F4:36:44:D8:B8:B2:A4:56:0F:C8:12:00:1D:40:1A:23
Certificate issuer: /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial: 02B7
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/X-ZPavQ2RNi4sqRWD8gSAB1AGiM.roa
Signing time: Tue 31 Mar 2026 07:33:59 +0000
ROA not before: Tue 31 Mar 2026 07:33:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4713
IP address blocks: 36.52.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Validity
Not Before: Mar 31 07:33:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5FE64F6AF43644D8B8B2A4560FC812001D401A23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:92:08:56:eb:84:b7:73:98:10:1a:74:48:
7d:32:a9:03:80:38:a5:12:85:5a:d3:f1:f9:cb:ab:
97:99:11:99:cb:ce:f7:87:19:52:54:e7:3f:8f:1f:
3a:99:3a:9c:a7:ff:3c:29:e8:89:21:ab:6b:77:5b:
0d:ca:da:4e:98:00:c1:d7:e8:84:de:93:ac:c8:dd:
92:71:28:73:c4:50:e4:cf:c1:7b:6f:97:cf:f0:0a:
f9:f0:78:0f:16:f3:eb:56:07:af:e6:19:0c:fe:81:
af:aa:9d:7f:ac:91:e2:f1:eb:8c:87:84:89:87:7f:
1d:5a:f2:21:85:97:54:bd:63:ec:6d:37:1a:d9:7e:
6f:e1:09:39:19:b5:05:62:80:b0:8a:b7:96:7c:62:
f8:66:ec:8a:96:d7:ac:7e:0e:6a:e9:e6:3c:63:b3:
c1:07:36:fa:70:db:b0:b5:fb:34:21:8c:16:6b:25:
76:74:09:f4:18:49:09:55:d7:0a:a9:43:94:a7:fc:
62:54:e8:1f:b1:9b:d5:27:44:0f:6a:27:e8:77:73:
dc:0b:ca:c7:8e:90:82:3e:4d:16:9c:68:a2:73:8e:
0c:7c:c7:6f:33:37:67:dd:fa:61:74:02:3a:98:67:
ab:9e:a1:5e:4f:df:a1:57:5d:c1:7e:58:27:c0:53:
ee:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E6:4F:6A:F4:36:44:D8:B8:B2:A4:56:0F:C8:12:00:1D:40:1A:23
X509v3 Authority Key Identifier:
keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/X-ZPavQ2RNi4sqRWD8gSAB1AGiM.roa
sbgp-ipAddrBlock: critical
IPv4:
36.52.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a9:99:9e:05:d2:9d:f4:db:ed:5c:0d:5b:27:ab:3a:f7:57:
15:36:c7:1d:19:9d:b9:48:06:a0:58:79:ef:19:7f:69:cf:64:
5c:2e:0f:43:0c:60:92:5a:88:5c:b7:48:87:42:25:b3:ed:5e:
63:ad:dc:d7:cd:b2:5e:fb:2a:5b:33:3b:e8:77:73:b3:36:48:
71:86:f1:ae:f7:ab:93:34:d2:10:94:2e:38:49:26:dd:5b:f7:
06:64:62:5b:b9:02:7f:70:9c:21:41:19:af:7f:9a:00:b0:81:
9e:64:3a:8e:b5:b8:31:36:3b:b6:18:a3:11:b3:e2:60:1b:d0:
2e:91:6e:f0:9c:27:64:21:8f:d0:a2:43:2e:b2:d6:95:30:24:
9f:2c:01:ee:2a:ae:5f:d1:12:03:18:3d:80:d3:8e:fc:c4:b2:
8a:9e:bd:2c:b5:8a:7a:d0:18:d9:85:de:42:1a:fd:2b:8e:f7:
46:bd:c0:87:ed:ae:01:dd:03:0f:2f:45:d0:a0:46:e4:70:dd:
ce:b0:ed:c0:a4:db:5e:5a:a4:f0:2d:b6:ce:6d:ff:40:d7:9c:
1c:94:22:3d:f6:cd:94:ab:08:a9:14:9a:6f:03:77:10:f7:e5:
cb:58:42:e6:76:9a:ca:b0:55:50:79:f5:21:96:5b:10:f7:fa:
d5:5b:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:31 2026 by rpki-client