
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30080/wQH_Nt7m1c6TZ-hJLzPdV2YaIc8.roa
File: wQH_Nt7m1c6TZ-hJLzPdV2YaIc8.roa (raw, json)
Hash identifier: NswObEuBJT8H8UaVkCM/umFxoVntTHrKvcRQsr7xq1w=
Subject key identifier: C1:01:FF:36:DE:E6:D5:CE:93:67:E8:49:2F:33:DD:57:66:1A:21:CF
Certificate issuer: /CN=82B5396882AE787524B1D26734661DFCB9F25600
Certificate serial: 24
Authority key identifier: 82:B5:39:68:82:AE:78:75:24:B1:D2:67:34:66:1D:FC:B9:F2:56:00
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/wQH_Nt7m1c6TZ-hJLzPdV2YaIc8.roa
Signing time: Tue 31 Mar 2026 08:39:53 +0000
ROA not before: Tue 31 Mar 2026 08:39:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 17955
IP address blocks: 2406:8000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82B5396882AE787524B1D26734661DFCB9F25600
Validity
Not Before: Mar 31 08:39:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C101FF36DEE6D5CE9367E8492F33DD57661A21CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:35:be:f2:58:ae:04:29:4a:7a:d0:fa:4f:
0e:3c:ec:c0:09:33:d5:36:2c:0c:aa:4a:ff:1c:55:
d7:a0:66:15:10:d2:34:d9:d8:38:6f:21:48:fc:60:
a5:2a:10:d7:da:8c:91:c0:b8:38:6e:eb:29:92:1c:
8f:68:e6:a6:f5:40:ed:3e:72:b5:e1:26:9a:31:cd:
54:d2:50:7a:77:77:05:a9:ed:4f:96:89:c2:eb:26:
03:da:ad:f6:78:2f:7f:a5:0f:20:70:96:c7:54:6b:
e1:aa:a6:16:c7:55:d6:7f:b3:e1:01:be:0a:19:c1:
59:8d:4d:cb:30:00:62:c1:85:c7:a4:cb:40:1d:d7:
83:62:34:a9:f0:ea:65:80:77:1c:b6:a3:b9:ad:60:
1c:45:57:3f:6f:1d:b4:20:38:c1:51:53:ff:d6:bb:
20:5c:73:83:cd:0c:67:a4:4f:3a:b6:76:b2:c5:af:
16:9f:30:79:82:fe:f9:26:2a:84:26:46:b3:fb:8c:
57:31:18:76:a7:61:35:6e:0f:99:62:71:b5:56:d1:
7e:f1:cd:55:99:c5:1b:94:1a:58:33:0f:d5:77:43:
dc:c0:fc:fa:2b:1b:7f:b4:3b:17:6b:47:68:93:eb:
d5:b1:2d:3d:6e:f8:25:2c:b7:8a:c2:49:6e:a8:33:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:01:FF:36:DE:E6:D5:CE:93:67:E8:49:2F:33:DD:57:66:1A:21:CF
X509v3 Authority Key Identifier:
keyid:82:B5:39:68:82:AE:78:75:24:B1:D2:67:34:66:1D:FC:B9:F2:56:00
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/wQH_Nt7m1c6TZ-hJLzPdV2YaIc8.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:8000::/32
Signature Algorithm: sha256WithRSAEncryption
1c:5b:99:7a:80:dc:a5:33:48:ba:61:83:02:3f:5d:2b:fb:b0:
79:ba:65:68:fe:12:3d:02:2a:48:5e:88:0a:1d:ee:f1:f0:ee:
a3:71:76:fc:b3:5d:57:aa:d3:76:2d:0a:3b:2e:59:85:b4:12:
07:d3:97:1a:05:bc:36:84:79:7b:f8:41:55:39:89:c6:e5:3a:
26:06:08:51:fc:4d:13:5b:4c:35:27:ae:8a:fc:72:91:ca:66:
31:9a:7b:33:cf:44:41:aa:76:d7:5f:7e:b5:32:08:5d:7c:cd:
4b:a4:ad:7b:0f:b4:2a:a8:5f:49:53:95:e3:98:16:7f:d1:c9:
3b:45:7c:86:64:d1:6b:fb:5d:bf:59:4e:36:30:15:b4:5c:94:
4b:27:2a:34:d3:d3:91:62:a3:9f:b3:8c:4d:9f:d9:4c:3f:00:
65:a4:e8:58:4b:d7:6f:a9:47:c6:bc:f6:a3:e7:e9:b0:04:cf:
00:1a:92:be:12:92:b3:8d:76:07:9f:4a:58:55:f6:f5:b1:26:
3b:17:4e:19:d5:1d:2b:b4:c8:8e:2b:6a:19:bb:f4:39:e7:06:
65:a1:24:e0:e7:a2:4c:0a:63:3a:01:91:7d:7f:c9:0f:72:ac:
72:57:c7:16:1c:e0:3e:5b:91:fb:63:d4:dd:a0:c8:71:6b:e0:
e5:e0:d6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:08 2026 by rpki-client