
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/T4YZDYEJzs9QFz5RUI8Kjyf2ltA.roa
File: T4YZDYEJzs9QFz5RUI8Kjyf2ltA.roa (raw, json)
Hash identifier: PFiUyegWvwgdYw5d0dQxmiRCx5LPB0/3/mkUyVkOKTY=
Subject key identifier: 4F:86:19:0D:81:09:CE:CF:50:17:3E:51:50:8F:0A:8F:27:F6:96:D0
Certificate issuer: /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial: 50
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/T4YZDYEJzs9QFz5RUI8Kjyf2ltA.roa
Signing time: Tue 31 Mar 2026 08:14:30 +0000
ROA not before: Tue 31 Mar 2026 08:14:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2001:2a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Validity
Not Before: Mar 31 08:14:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4F86190D8109CECF50173E51508F0A8F27F696D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:4e:d4:6e:01:5d:97:14:ad:63:92:9e:b5:
71:41:69:f9:ff:e0:3b:0a:5f:07:03:49:b8:0b:ff:
5f:c9:0d:63:98:bf:54:25:7c:af:54:01:f4:fc:65:
cb:bb:80:e6:34:07:9e:24:04:15:4a:00:33:fa:4f:
21:84:c3:9b:51:f6:22:21:d0:2b:19:29:ac:98:be:
59:fa:4d:4f:8d:20:62:95:9a:9c:cb:1c:2a:18:d1:
f5:f4:2b:b9:a1:a1:76:c6:eb:6d:96:36:7c:20:60:
18:5b:29:d2:df:4f:d0:90:93:b8:c4:c3:84:af:50:
2a:bc:88:35:5f:1c:e0:4f:37:e1:b1:b2:4d:07:a3:
1d:c5:91:1d:2a:38:ad:0f:b1:3c:d0:59:b0:95:a4:
9c:90:a2:f3:53:ad:17:4c:57:9c:08:de:07:71:05:
be:83:e1:37:50:ba:0b:02:00:fd:9e:ac:e3:35:aa:
95:73:7c:6d:4f:7a:92:78:a7:94:d4:66:41:65:7a:
b1:61:45:fe:81:a2:28:a0:56:9b:30:60:32:bf:45:
ec:e2:61:94:a6:a5:cb:e5:d7:50:65:a2:4a:0a:cb:
51:ba:2a:9e:fe:dc:59:67:a5:9a:c0:74:6e:75:c3:
40:39:9c:0b:d6:c5:83:31:50:00:ee:d9:72:b0:cc:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:19:0D:81:09:CE:CF:50:17:3E:51:50:8F:0A:8F:27:F6:96:D0
X509v3 Authority Key Identifier:
keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/T4YZDYEJzs9QFz5RUI8Kjyf2ltA.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:2a0::/32
Signature Algorithm: sha256WithRSAEncryption
46:f1:06:2e:51:5e:22:ba:b8:10:bd:82:45:19:9f:ab:44:2a:
67:c4:5d:c5:33:0e:fb:38:7d:fa:5a:02:fe:ba:3b:2b:3b:af:
67:af:c7:e7:e2:40:a0:e1:eb:8f:30:44:84:9c:f1:13:08:c9:
58:67:17:5d:20:54:33:3e:ae:69:36:23:b3:0a:f7:2f:c1:d0:
a2:b2:1f:40:f3:6f:75:54:c3:4c:09:7b:04:2b:a9:46:5a:d0:
de:bf:7b:46:bb:04:2f:c7:81:2d:8c:c9:3e:72:b8:3c:62:ca:
82:6c:2d:f3:fa:53:5b:ee:4e:02:f6:4e:f8:c2:e4:6a:d9:6d:
b9:26:9b:f8:89:bf:19:99:88:39:26:0e:ce:8a:a1:38:de:68:
29:21:4a:a4:9e:58:ec:23:d9:db:c2:58:5a:f5:88:fe:82:c3:
ca:0f:42:0e:05:23:20:a0:de:10:90:a1:82:eb:93:4d:d1:7e:
e5:90:d0:4e:69:6a:2c:d9:23:17:cc:0f:01:06:98:d3:a7:b7:
77:be:0d:e7:e7:80:a1:da:3e:bd:20:80:7d:ca:21:09:47:42:
0b:d3:ae:4b:d0:9a:1b:79:d8:43:e4:bc:6a:91:7e:0d:74:49:
c7:7f:15:1e:e2:87:93:8f:a2:17:bc:4f:e1:af:06:26:c6:3a:
17:ef:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:23 2026 by rpki-client