
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/ZlDCDkGamCsUyoygG1irDUnjLRg.roa
File: ZlDCDkGamCsUyoygG1irDUnjLRg.roa (raw, json)
Hash identifier: XqG5evlM/mYDOTDSfWksnfe8kGR0CznZt7DestsqNT4=
Subject key identifier: 66:50:C2:0E:41:9A:98:2B:14:CA:8C:A0:1B:58:AB:0D:49:E3:2D:18
Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial: 73
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/ZlDCDkGamCsUyoygG1irDUnjLRg.roa
Signing time: Tue 31 Mar 2026 07:48:43 +0000
ROA not before: Tue 31 Mar 2026 07:48:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2497
IP address blocks: 2001:240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 11:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Validity
Not Before: Mar 31 07:48:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=6650C20E419A982B14CA8CA01B58AB0D49E32D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:88:f6:6e:0a:6a:ee:e5:53:a6:60:67:9f:
9f:ea:fc:91:9d:fb:82:d1:5a:bf:7c:9f:a3:37:7a:
57:06:75:f8:02:e1:d2:f4:32:c2:64:3f:fc:0d:67:
9b:e5:7e:7c:6e:6c:bd:62:79:ee:7d:7d:d9:6d:48:
5b:6c:a2:d5:4e:eb:06:2e:a4:82:39:69:e8:44:53:
e7:c0:6e:32:ea:32:ce:8c:3c:15:b6:b7:2f:d3:b9:
3a:7b:a5:41:78:5b:7b:13:bb:14:e7:d0:e2:cf:35:
f9:37:f5:7e:db:3a:c5:be:5a:94:19:35:2e:a4:d5:
ea:42:78:52:20:22:6b:4c:8e:7c:5b:c0:0f:01:45:
67:41:04:a2:27:60:e0:0e:51:38:65:94:2e:34:b4:
1d:3d:be:cf:83:6b:e8:64:e8:6a:90:1a:ad:90:ef:
89:c8:52:8c:96:54:4a:80:43:23:1a:64:1c:a1:12:
41:cc:fd:a9:7d:6b:70:f4:a4:e9:c6:54:66:bd:21:
2c:03:1e:1b:1e:bf:a3:2b:12:e8:73:7a:ff:b3:c8:
3d:61:58:98:54:dd:aa:3e:68:c3:e6:28:63:96:54:
b3:18:0a:17:55:74:69:de:51:df:07:42:42:6b:ce:
c8:4f:62:e8:2f:f6:53:25:1f:47:78:11:6d:38:10:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:50:C2:0E:41:9A:98:2B:14:CA:8C:A0:1B:58:AB:0D:49:E3:2D:18
X509v3 Authority Key Identifier:
keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/ZlDCDkGamCsUyoygG1irDUnjLRg.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:240::/32
Signature Algorithm: sha256WithRSAEncryption
94:d5:f4:86:e9:89:c2:ad:1e:3c:ed:0a:89:0c:e2:cc:fa:23:
fb:e3:0c:dd:f9:e0:b4:29:9c:f4:25:76:4c:4a:a8:a4:8d:ad:
58:73:bc:85:2b:9d:d5:a9:a1:a8:2a:89:a3:2a:66:94:d8:55:
a5:1f:61:5c:c1:ca:58:1c:19:8e:dc:3e:fb:43:ab:06:94:c6:
03:88:f7:e7:89:09:1d:5a:4f:f4:f8:87:2e:e0:02:74:3c:49:
63:82:da:99:2d:2d:8d:06:0a:74:11:48:92:eb:a2:ff:3d:cd:
09:55:df:e9:c0:75:40:16:f7:1a:e7:bd:fc:ec:cb:71:a1:82:
3e:e8:ab:3d:3a:28:79:e5:60:0a:ec:db:18:ee:a6:53:5e:d5:
35:28:d7:e7:94:0e:12:3f:e7:e8:08:d2:90:d6:98:51:e5:56:
33:d0:04:69:73:d5:56:9d:30:13:8e:ac:b7:1c:9b:93:59:12:
a2:4f:e8:37:4d:fa:cb:c5:5e:70:44:ab:28:be:d3:a8:0e:12:
e3:6f:3b:ff:a8:70:91:c3:d8:75:b5:3c:ab:a6:e3:0d:c6:18:
b2:99:aa:31:56:4b:d7:cb:77:ab:e9:63:97:f4:3c:5f:9f:00:
46:1e:00:6d:0c:d7:59:91:97:2d:be:87:51:a3:01:2d:bc:7e:
ec:66:fb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:14 2026 by rpki-client