
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30033/GDjoiqPXaTJvmRopCV8EhrLoeFE.roa
File: GDjoiqPXaTJvmRopCV8EhrLoeFE.roa (raw, json)
Hash identifier: OUxx50uP8wdmrCgiVQS2oHneoSfgJx6lPUXagUSzVBM=
Subject key identifier: 18:38:E8:8A:A3:D7:69:32:6F:99:1A:29:09:5F:04:86:B2:E8:78:51
Certificate issuer: /CN=48DB1AE483E343093AB063037260FEB919514038
Certificate serial: 4A
Authority key identifier: 48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/GDjoiqPXaTJvmRopCV8EhrLoeFE.roa
Signing time: Tue 14 Jul 2026 04:08:37 +0000
ROA not before: Tue 14 Jul 2026 04:08:37 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 7671
IP address blocks: 2001:350::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 19:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48DB1AE483E343093AB063037260FEB919514038
Validity
Not Before: Jul 14 04:08:37 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=1838E88AA3D769326F991A29095F0486B2E87851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:f9:bc:b7:e3:d6:a1:8e:09:db:c2:51:3c:
14:de:2a:05:53:27:2d:7f:f7:85:f9:ad:ee:57:74:
2c:4c:14:af:f7:83:5c:e3:a8:b3:9f:4f:cd:fd:82:
4c:55:bc:1f:f5:fd:5d:25:fb:0d:52:73:5a:92:9e:
08:9f:3f:0e:01:bc:8e:c3:1c:bf:15:00:29:b5:0e:
9a:5f:f1:90:70:91:48:14:7c:df:b3:5b:64:b7:55:
57:fa:20:62:7e:54:db:12:62:12:17:e9:37:59:ea:
e3:95:e2:f2:ab:ae:a1:21:ef:b8:e2:dc:3a:f7:96:
8d:6c:dd:61:db:7e:49:51:14:c4:9d:79:7a:a1:18:
22:4d:ea:11:3f:92:3b:74:65:2a:9e:3c:b2:77:5f:
11:2f:32:e5:2e:37:fe:91:05:9e:33:2f:4d:59:60:
83:30:70:66:47:1f:40:0a:3d:52:82:39:00:53:51:
37:07:0c:f7:6e:e7:eb:5f:99:63:5c:52:7d:df:29:
06:ad:9b:d8:8b:ae:93:f8:c5:46:79:37:25:78:f9:
1e:7f:38:6e:b0:07:7e:7f:e2:08:df:d2:57:5c:56:
88:b1:31:2e:dc:a2:55:03:a4:5b:81:e0:65:10:bf:
d8:b9:6e:ff:d5:30:8c:84:c2:80:4c:8d:f4:15:fc:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:E8:8A:A3:D7:69:32:6F:99:1A:29:09:5F:04:86:B2:E8:78:51
X509v3 Authority Key Identifier:
keyid:48:DB:1A:E4:83:E3:43:09:3A:B0:63:03:72:60:FE:B9:19:51:40:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/SNsa5IPjQwk6sGMDcmD-uRlRQDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SNsa5IPjQwk6sGMDcmD-uRlRQDg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30033/GDjoiqPXaTJvmRopCV8EhrLoeFE.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:350::/32
Signature Algorithm: sha256WithRSAEncryption
66:1a:fa:68:03:75:ae:54:10:bc:c8:92:8a:77:77:8c:84:4f:
4d:2e:dd:dc:61:85:c5:61:9c:6d:a1:cd:a1:ea:33:83:bd:23:
1f:36:92:fa:3d:d2:05:c6:4c:ca:e4:81:38:71:4e:82:a8:d8:
fa:a7:ad:5c:e3:30:f0:51:f3:20:16:cc:a8:6e:ea:63:b1:c1:
af:bf:d3:e2:f6:51:42:0b:ed:7b:22:bf:bf:15:fd:e8:e0:1b:
37:af:0b:80:88:a4:7d:2e:27:be:60:07:d6:6f:bf:d1:12:84:
a9:49:af:9b:75:59:bf:b7:ad:80:95:a0:7e:82:81:fa:ad:64:
b4:d8:9c:84:b3:33:3c:05:e9:df:11:d9:7c:c0:a7:48:c9:d3:
5a:00:9f:d3:dd:92:1f:61:e5:74:e4:35:9f:8c:a0:30:76:86:
de:df:24:19:1b:ba:ac:43:e9:88:21:25:07:86:a7:9e:77:5c:
c1:2c:2f:78:c1:ef:83:9a:0b:eb:7c:f8:7e:78:7b:8c:5c:90:
07:e8:61:39:da:43:a2:71:b1:21:33:9e:d7:0c:1a:c1:51:b5:
98:8b:28:5a:a8:63:54:7d:13:87:c4:2c:c6:73:63:e7:a0:67:
1d:88:dd:60:c8:cd:ad:ae:1f:f1:1d:d5:f6:87:f5:3f:38:81:
b7:c4:49:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:49 2026 by rpki-client