
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/nZYiGSL4CpoQ73LIz2CWszwcVWc.roa
File: nZYiGSL4CpoQ73LIz2CWszwcVWc.roa (raw, json)
Hash identifier: bB2dQxAai+xnEi/IU5mDLRiueT8CYeI7md5CLX7jeJw=
Subject key identifier: 9D:96:22:19:22:F8:0A:9A:10:EF:72:C8:CF:60:96:B3:3C:1C:55:67
Certificate issuer: /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial: 43
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/nZYiGSL4CpoQ73LIz2CWszwcVWc.roa
Signing time: Tue 31 Mar 2026 08:15:26 +0000
ROA not before: Tue 31 Mar 2026 08:15:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17683
IP address blocks: 2001:f98::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Validity
Not Before: Mar 31 08:15:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9D96221922F80A9A10EF72C8CF6096B33C1C5567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:70:88:20:c2:7c:86:5c:79:7f:3a:d3:94:
84:9e:db:9d:72:0e:99:19:46:83:08:12:52:2e:70:
39:39:9f:6a:fa:1f:e2:65:03:c4:09:e9:46:a7:26:
d6:7e:5f:fc:20:b0:17:ff:36:63:96:f4:d4:6e:fe:
95:5a:d2:3f:92:ab:88:b7:83:60:f0:fd:81:f3:86:
e8:72:fd:e6:c8:77:62:07:41:3a:e6:e5:62:ca:ca:
15:2b:e6:b5:ab:80:3e:e7:f4:c1:b6:67:48:4a:32:
53:3e:00:79:48:a8:06:a9:19:e2:3c:f5:bc:3a:ca:
01:6c:e9:8d:ae:5f:6e:64:ba:ef:da:5f:42:bf:5f:
65:50:17:31:09:fa:0d:94:2b:72:e0:de:44:13:ed:
db:e5:0b:dc:75:87:1e:57:5b:77:33:d4:6f:3c:f9:
7b:5a:06:77:a4:35:2b:9e:21:be:fd:08:61:bd:16:
a4:87:11:0f:c7:44:1d:f1:d6:67:61:9a:7f:7a:b6:
ca:3a:c1:e2:2b:bd:f9:4c:90:fa:2b:67:a2:b6:59:
51:32:10:a0:aa:1d:95:3f:33:1f:f8:cd:06:23:da:
f9:29:99:39:35:04:c9:a2:d1:9f:c6:ab:14:95:f5:
f0:58:d0:dc:cb:05:3f:c9:5b:6d:ae:ae:9b:dc:41:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:22:19:22:F8:0A:9A:10:EF:72:C8:CF:60:96:B3:3C:1C:55:67
X509v3 Authority Key Identifier:
keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/nZYiGSL4CpoQ73LIz2CWszwcVWc.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:f98::/32
Signature Algorithm: sha256WithRSAEncryption
7e:5b:46:e0:a3:ff:50:d6:ef:78:4b:ab:f3:ad:da:53:e4:d5:
78:31:76:1f:58:37:a3:d2:99:6c:88:44:3c:2e:44:30:c0:c9:
f9:c6:72:3f:93:65:51:dc:9e:25:ff:84:b0:24:83:ac:95:12:
6d:6d:c5:91:a4:78:bf:a0:59:31:a5:b6:3d:f4:e9:49:ec:15:
4e:67:fb:cf:8c:64:69:7d:7e:b4:5d:14:a4:af:57:70:99:1d:
4e:3e:51:29:30:c1:bf:be:13:5b:19:a7:41:0f:53:0e:a3:1c:
64:c5:fa:09:0b:3c:02:e1:fc:34:d3:a1:1d:fa:b0:4a:00:47:
34:1f:68:13:93:7c:ab:95:c8:63:ba:36:ad:09:fa:e0:e0:ed:
20:a0:90:e5:92:ee:15:3e:78:8f:88:40:6d:9e:be:9a:a2:6d:
98:d0:6b:a2:30:a4:32:f3:5a:e6:b8:ba:66:93:ac:cd:82:12:
9c:ee:4a:99:76:a4:2b:f3:c7:8c:35:c1:a5:c2:02:49:60:ca:
25:94:99:c4:f2:2d:83:78:b5:2d:b4:9a:6d:fb:d9:13:57:81:
2d:70:ec:61:87:ef:4b:23:a5:0d:c6:1a:bf:6c:0e:fa:d9:00:
e0:32:fa:ad:06:52:de:66:0f:74:f1:dd:9d:3a:a6:73:06:a5:
3c:90:d5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:15 2026 by rpki-client