
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/i67bohZvhtzwiFLY2AmxcyzmeBM.roa
File: i67bohZvhtzwiFLY2AmxcyzmeBM.roa (raw, json)
Hash identifier: nSYbppFw+A2pDL3/py7yK1dgWXA0kzPeCg9p/TuL61U=
Subject key identifier: 8B:AE:DB:A2:16:6F:86:DC:F0:88:52:D8:D8:09:B1:73:2C:E6:78:13
Certificate issuer: /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial: 37
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/i67bohZvhtzwiFLY2AmxcyzmeBM.roa
Signing time: Tue 31 Mar 2026 08:25:17 +0000
ROA not before: Tue 31 Mar 2026 08:25:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9374
IP address blocks: 2402:c200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Validity
Not Before: Mar 31 08:25:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8BAEDBA2166F86DCF08852D8D809B1732CE67813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:c4:78:58:8d:ec:94:0f:f5:de:bd:43:8d:
be:1f:c6:e7:5c:f2:ac:c3:89:81:91:6e:00:c1:4b:
41:5e:ed:56:38:9a:e8:88:2e:62:24:2f:c0:31:50:
75:1e:22:0b:74:ac:b0:30:18:eb:47:05:67:f8:df:
3b:7d:a4:6a:c8:74:df:e2:e7:4d:e2:9e:a0:75:47:
4a:97:15:8d:0b:be:c3:a0:f3:71:2d:fb:30:95:fa:
b5:c3:96:8b:51:09:8d:5d:99:ee:4e:5f:0f:d0:15:
86:14:67:8e:1f:6a:5b:64:8d:16:6d:12:2f:0d:1c:
0e:b3:9a:97:31:8a:82:c2:dc:bd:04:80:a5:9a:64:
eb:fe:04:6c:35:10:a7:3a:04:51:4d:f4:cb:86:6e:
83:98:6b:e1:d8:bb:55:18:6f:1f:12:d8:2a:56:bd:
67:51:7c:4b:08:88:5b:e6:bb:00:cd:e5:86:5b:65:
b6:71:20:89:2c:fb:af:d4:6b:b6:65:a5:1d:c3:0c:
26:2a:dd:ee:65:60:71:2f:de:89:92:ef:71:24:29:
08:22:28:7b:8c:47:d8:17:28:c2:77:cb:6e:ae:6f:
0c:9a:93:67:89:5b:25:bf:b1:19:2e:92:ff:4b:ad:
d5:81:5f:a8:02:65:95:bb:05:89:d4:ab:a0:2a:69:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AE:DB:A2:16:6F:86:DC:F0:88:52:D8:D8:09:B1:73:2C:E6:78:13
X509v3 Authority Key Identifier:
keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/i67bohZvhtzwiFLY2AmxcyzmeBM.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:c200::/32
Signature Algorithm: sha256WithRSAEncryption
36:f3:96:a3:82:26:20:10:49:82:7c:d0:38:f2:bd:8e:88:26:
42:33:71:1d:7a:22:c6:ed:54:9e:66:01:8f:31:f3:be:35:80:
87:97:09:14:8f:10:e5:7a:63:36:aa:cc:a4:44:c0:f1:81:1b:
bc:a6:8c:05:e2:46:79:31:17:37:62:da:39:6f:77:f8:54:3d:
19:bd:b4:95:53:e4:21:e5:0d:bb:13:4d:4a:b1:95:f6:19:35:
94:c6:e4:81:25:22:3f:82:f9:98:47:1d:9b:9c:a6:df:8e:20:
d4:23:b7:fe:50:b8:03:6f:3e:e1:6a:ce:b2:34:34:e7:2e:76:
f7:c5:08:1a:43:84:69:ce:b2:02:16:fc:da:a4:96:6e:ea:6f:
41:f8:a8:8d:a7:67:06:df:cd:5a:ef:d3:1f:cb:ca:cf:38:3a:
f8:14:93:fc:da:b8:f8:f7:85:cf:43:46:67:57:b9:76:09:84:
e1:e9:11:97:c0:0c:a7:d3:0c:07:52:2e:03:76:b8:1c:db:35:
24:4c:fe:ee:49:49:6f:92:d6:86:b6:ae:3d:57:51:21:1c:bf:
49:3f:73:a8:2e:bc:b3:96:38:1c:83:fd:78:c2:50:0f:9d:87:
84:a8:29:fe:d2:3b:1c:54:52:d7:67:73:31:de:58:d8:08:f6:
e9:7d:ae:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:51 2026 by rpki-client