
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30112/eemXEZ6WIwFlTSOIP75-MUrDcsE.roa
File: eemXEZ6WIwFlTSOIP75-MUrDcsE.roa (raw, json)
Hash identifier: 5DOZRwldGLcIrVIC1n8cUOfwBT91qQ41m6lUqRqf8xQ=
Subject key identifier: 79:E9:97:11:9E:96:23:01:65:4D:23:88:3F:BE:7E:31:4A:C3:72:C1
Certificate issuer: /CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B
Certificate serial: 25
Authority key identifier: E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/eemXEZ6WIwFlTSOIP75-MUrDcsE.roa
Signing time: Tue 31 Mar 2026 08:39:33 +0000
ROA not before: Tue 31 Mar 2026 08:39:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18129
IP address blocks: 2407:d800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B
Validity
Not Before: Mar 31 08:39:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=79E997119E962301654D23883FBE7E314AC372C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:9b:71:c3:13:be:a1:f9:27:ac:42:d6:8f:ed:
4e:94:fb:9d:23:b0:ef:8f:6e:b5:e9:29:70:85:6e:
80:eb:cc:51:a2:00:45:01:86:48:e5:d1:12:71:84:
aa:13:c8:23:1f:b0:6d:dc:6b:86:a3:13:b9:3f:28:
95:7d:54:cc:c0:54:77:be:5a:72:a2:29:f0:13:1e:
62:09:3a:ba:d7:a1:78:b9:e5:ec:e4:9f:60:e1:d2:
fd:d7:7a:94:ba:30:1b:2f:50:7d:52:1b:e8:aa:f8:
cd:40:28:f9:2f:0a:90:38:b0:59:f4:22:50:68:82:
21:2e:0c:6a:02:85:7e:5b:42:2b:0b:1a:bb:6f:7a:
fc:85:f3:1a:42:1f:1f:2e:e3:de:7a:55:4b:c6:9a:
7e:06:4a:3f:a8:7d:d2:02:36:40:9c:1c:be:27:25:
7e:7c:8f:6f:0b:ec:da:23:a2:da:d0:c4:70:df:0f:
c8:87:97:33:2a:a0:3f:3c:18:70:fc:fc:2a:bc:d3:
02:b3:a4:1b:04:4a:c4:2c:10:4e:ef:b9:04:77:ed:
9a:17:1b:8a:88:b5:28:8e:1e:35:48:17:c5:8d:1d:
b0:12:50:d4:a5:9c:60:03:1c:3a:1e:65:02:9c:2f:
5a:15:2f:a2:67:e1:a4:43:2c:07:42:87:94:4a:59:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E9:97:11:9E:96:23:01:65:4D:23:88:3F:BE:7E:31:4A:C3:72:C1
X509v3 Authority Key Identifier:
keyid:E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/eemXEZ6WIwFlTSOIP75-MUrDcsE.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:d800::/32
Signature Algorithm: sha256WithRSAEncryption
2f:f8:5c:eb:09:fd:db:1b:1f:a6:1a:36:ff:d8:52:db:b0:c4:
3e:42:a7:16:f9:20:ce:1a:8e:c7:34:66:fd:f9:8b:42:3f:f2:
db:77:8e:e6:b3:dd:29:0f:e2:dc:b7:d6:29:2b:87:3c:f1:23:
cc:25:33:9a:da:01:1c:6d:0b:2f:06:1b:87:96:d5:2f:97:d0:
ae:39:25:91:99:d3:61:cb:04:35:55:3d:1c:b9:c6:4b:ee:63:
95:31:96:66:e4:07:0b:c5:df:a1:db:e4:6a:eb:1a:8c:56:ea:
95:b7:b5:35:ed:1f:94:6c:68:1b:64:94:c3:11:0e:aa:c0:d6:
72:19:3c:c5:32:08:5e:db:38:82:e4:17:02:7c:5b:46:2e:6b:
2c:42:57:0f:8e:cd:8b:aa:70:6e:c9:66:71:25:0f:46:f8:bd:
da:44:05:c6:36:21:58:61:34:9f:b5:a1:49:c1:c5:dc:79:df:
c4:1c:f0:1e:9f:d5:75:80:30:34:a7:06:6b:48:f8:fa:9d:f1:
72:be:94:2d:3b:25:96:d1:14:e8:52:60:25:6d:ab:1b:b1:b6:
93:13:17:4f:72:10:26:b3:6b:fa:16:55:aa:ae:d3:8b:f1:60:
b4:8d:77:e3:57:8e:7c:62:30:2a:ea:30:a0:09:b7:6a:d4:e6:
48:77:90:f1
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw
MUMxNUYyQUUxMEZGRTFBMkRGQjkzOUZCQTMyMjIyQzgxRThCMB4XDTI2MDMzMTA4
MzkzM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzlFOTk3MTE5RTk2MjMw
MTY1NEQyMzg4M0ZCRTdFMzE0QUMzNzJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPGbccMTvqH5J6xC1o/tTpT7nSOw749utekpcIVugOvMUaIARQGG
SOXREnGEqhPIIx+wbdxrhqMTuT8olX1UzMBUd75acqIp8BMeYgk6uteheLnl7OSf
YOHS/dd6lLowGy9QfVIb6Kr4zUAo+S8KkDiwWfQiUGiCIS4MagKFfltCKwsau296
/IXzGkIfHy7j3npVS8aafgZKP6h90gI2QJwcviclfnyPbwvs2iOi2tDEcN8PyIeX
MyqgPzwYcPz8KrzTArOkGwRKxCwQTu+5BHftmhcbioi1KI4eNUgXxY0dsBJQ1KWc
YAMcOh5lApwvWhUvomfhpEMsB0KHlEpZqIkCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBR56ZcRnpYjAWVNI4g/vn4xSsNywTAfBgNVHSMEGDAWgBTioBwV8q4Q/+Gi37k5
+6MiIsgeizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMTIvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJaUxJSG9zLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJ
aUxJSG9zLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTEyL2VlbVhFWjZXSXdGbFRTT0lQNzUtTVVyRGNzRS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB9gAMA0GCSqGSIb3DQEBCwUA
A4IBAQAv+FzrCf3bGx+mGjb/2FLbsMQ+QqcW+SDOGo7HNGb9+YtCP/Lbd47ms90p
D+Lct9YpK4c88SPMJTOa2gEcbQsvBhuHltUvl9CuOSWRmdNhywQ1VT0cucZL7mOV
MZZm5AcLxd+h2+Rq6xqMVuqVt7U17R+UbGgbZJTDEQ6qwNZyGTzFMghe2ziC5BcC
fFtGLmssQlcPjs2LqnBuyWZxJQ9G+L3aRAXGNiFYYTSftaFJwcXced/EHPAen9V1
gDA0pwZrSPj6nfFyvpQtOyWW0RToUmAlbasbsbaTExdPchAms2v6FlWqrtOL8WC0
jXfjV458YjAq6jCgCbdq1OZId5Dx
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:02 2026 by rpki-client