
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/RCnmtFiANc6TtxSU6-qISpvsgIc.roa
File: RCnmtFiANc6TtxSU6-qISpvsgIc.roa (raw, json)
Hash identifier: ux44cMTd1WkMeFYlzSAcO+NxR7Np2bFPUV7ExDj4vKs=
Subject key identifier: 44:29:E6:B4:58:80:35:CE:93:B7:14:94:EB:EA:88:4A:9B:EC:80:87
Certificate issuer: /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial: 69
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/RCnmtFiANc6TtxSU6-qISpvsgIc.roa
Signing time: Tue 31 Mar 2026 07:37:10 +0000
ROA not before: Tue 31 Mar 2026 07:37:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4713
IP address blocks: 2001:380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Validity
Not Before: Mar 31 07:37:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=4429E6B4588035CE93B71494EBEA884A9BEC8087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:5c:78:62:32:ce:0e:07:bc:76:5e:fd:82:
1f:3f:9a:45:7c:ba:27:bd:57:ab:58:86:83:df:d5:
b5:ad:cf:80:1f:cc:ae:fd:4f:b5:2d:1c:bd:14:63:
a1:6a:16:cf:72:1a:52:27:c5:54:8a:de:de:1a:5f:
8e:63:28:96:dc:92:ee:c0:cf:09:c5:4f:a8:3c:ad:
42:98:fe:35:74:44:32:36:f4:51:8f:9a:bb:bf:55:
3d:6c:e3:31:11:80:c2:34:71:11:12:44:1d:ca:88:
c7:f7:b3:68:3f:5d:83:21:c2:09:bc:18:32:44:78:
30:36:b2:1a:d9:69:e7:32:35:82:9e:73:cd:0b:b8:
01:57:e5:5b:67:7a:91:f0:01:59:fd:0a:90:26:a2:
ac:80:2d:01:2c:b8:2f:55:f4:45:42:88:c3:78:3d:
52:8d:fb:c7:00:66:fb:ae:5d:01:a5:8c:2a:d0:f8:
e0:de:ac:39:17:06:92:35:2d:8a:94:f9:a8:a4:a9:
4e:bd:14:c1:1e:23:ed:c8:4e:ef:c4:87:d0:42:6e:
3c:41:c2:2d:f7:a0:81:86:3c:d8:9b:d2:3f:23:e0:
1c:11:87:ec:84:ec:ef:31:aa:64:1e:4e:06:53:40:
c6:62:69:09:7a:b1:22:4f:3d:4a:4d:53:ae:c9:61:
d2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:29:E6:B4:58:80:35:CE:93:B7:14:94:EB:EA:88:4A:9B:EC:80:87
X509v3 Authority Key Identifier:
keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/RCnmtFiANc6TtxSU6-qISpvsgIc.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:380::/32
Signature Algorithm: sha256WithRSAEncryption
34:31:fd:c8:61:aa:8a:29:0d:b6:83:49:26:08:a5:69:e7:7f:
0c:13:15:3e:19:ba:36:02:a1:1c:e4:fd:1a:ef:e1:c8:c1:b0:
ee:48:b6:ba:2d:c1:d2:d8:fb:66:76:40:7b:93:2c:1b:32:44:
75:68:73:df:d2:d8:41:28:68:14:27:f5:3e:55:c8:e4:7d:34:
99:d4:74:71:37:4f:cb:8e:39:8a:7b:6b:c1:45:a7:91:ac:62:
cf:87:94:18:66:16:67:16:08:b4:d7:08:1f:dc:03:f0:c4:3d:
73:31:ab:11:09:db:cd:ed:bd:84:0b:e1:34:32:6b:82:be:f2:
d5:b1:e4:c4:ea:48:02:a9:07:89:2b:e8:6f:54:a6:ef:b3:02:
52:e7:7c:a2:a2:1d:4a:cc:cd:3f:1c:8c:b4:4c:f3:7b:bd:9e:
6d:a8:67:aa:de:f3:f7:be:31:8d:ee:fb:e4:73:c2:1d:b1:02:
32:ee:b9:5b:f1:65:9d:04:9d:ee:2a:55:62:8b:28:bc:dd:9e:
f5:00:00:61:93:60:3d:57:77:45:76:12:4d:6c:8f:03:fb:f2:
3d:ba:54:b0:a5:0f:f0:21:5e:c4:5e:0b:39:84:0d:f7:d2:71:
74:e2:3d:fd:f0:82:42:1b:fb:35:26:12:b6:53:21:1e:81:87:
d5:46:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:11 2026 by rpki-client