
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30174/Gw1W6QaWAOsJSyjK8Nd36DcWSyI.roa
File: Gw1W6QaWAOsJSyjK8Nd36DcWSyI.roa (raw, json)
Hash identifier: WWhYTBG+JgG4QKy7eHNQ86TvGtAcy+nkvOkMwaIUoyU=
Subject key identifier: 1B:0D:56:E9:06:96:00:EB:09:4B:28:CA:F0:D7:77:E8:37:16:4B:22
Certificate issuer: /CN=9BAE2C031854C1BB113CA365128A6D488C1A99C3
Certificate serial: 25
Authority key identifier: 9B:AE:2C:03:18:54:C1:BB:11:3C:A3:65:12:8A:6D:48:8C:1A:99:C3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/Gw1W6QaWAOsJSyjK8Nd36DcWSyI.roa
Signing time: Tue 31 Mar 2026 08:38:39 +0000
ROA not before: Tue 31 Mar 2026 08:38:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23629
IP address blocks: 2406:d200::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BAE2C031854C1BB113CA365128A6D488C1A99C3
Validity
Not Before: Mar 31 08:38:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1B0D56E9069600EB094B28CAF0D777E837164B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:79:61:cd:38:c3:16:1a:57:77:79:3f:70:
ec:56:53:0e:aa:5d:b0:cc:6c:e0:5b:b7:24:98:c7:
1e:d7:da:d4:90:43:a5:20:75:62:e3:ed:54:75:6f:
ad:cf:b7:ad:6e:d5:8b:62:ff:7a:5b:18:a2:3d:09:
38:36:40:15:e4:5f:72:53:ed:ce:c4:5b:9d:1e:bb:
d3:49:9a:31:47:08:d1:16:f7:3e:b2:39:f0:b6:b8:
25:de:e3:2a:81:cc:2b:4f:da:20:cc:c1:77:08:25:
26:38:89:54:5e:69:09:85:d4:58:25:c5:78:41:aa:
8c:3f:bb:dd:61:c8:20:f0:61:ef:b6:0e:00:5d:1e:
18:9a:04:a8:17:7c:ff:51:e1:d4:1d:c3:6d:19:be:
f6:fa:d7:39:2b:8c:61:09:a2:fe:3f:ba:c8:cb:65:
b6:6f:c7:3f:7e:fc:58:66:ac:02:22:d4:e9:7c:88:
69:15:5d:5b:16:87:c8:2c:70:ba:24:af:c1:00:95:
a1:33:8c:9c:b0:6b:5d:58:9a:d0:6c:b7:a8:b6:4c:
89:73:b8:e8:68:8a:d4:d1:48:2a:5a:22:70:12:40:
e7:a8:27:28:e7:51:70:64:c8:a7:7e:71:a6:c0:b7:
14:e3:0c:23:d3:ba:a5:ae:3b:4c:a4:cc:5a:98:32:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0D:56:E9:06:96:00:EB:09:4B:28:CA:F0:D7:77:E8:37:16:4B:22
X509v3 Authority Key Identifier:
keyid:9B:AE:2C:03:18:54:C1:BB:11:3C:A3:65:12:8A:6D:48:8C:1A:99:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/Gw1W6QaWAOsJSyjK8Nd36DcWSyI.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:d200::/32
Signature Algorithm: sha256WithRSAEncryption
40:01:81:29:43:a2:f1:8c:cb:5a:68:0d:6a:89:da:78:9f:57:
7d:e9:08:01:06:cc:9b:c0:8d:28:7c:40:a0:23:8f:30:57:70:
ec:ed:80:4a:e8:f2:69:36:02:43:0f:f8:27:31:c9:ca:17:da:
db:61:14:67:b8:52:ca:d5:37:ee:1c:ce:c4:5f:97:d3:4b:ff:
40:fd:9d:e2:66:c2:37:e0:4f:e1:1f:b6:4c:e7:1e:2b:22:41:
12:91:dc:1e:45:ea:a5:38:e7:99:45:e1:28:9f:6d:9e:8c:80:
9b:9e:e3:33:ae:ef:46:45:9d:24:ec:b4:4f:74:b8:e4:34:71:
4e:68:6c:48:4c:9d:fc:2f:08:20:40:b0:0b:fb:40:31:7e:b7:
c8:84:45:e5:cf:63:cf:61:43:d4:97:7d:3b:e5:91:9d:b4:f0:
fb:56:82:0c:55:e9:5e:02:e3:f0:92:49:e4:bc:c3:d8:04:6a:
49:86:2c:63:3a:1f:6d:e9:b9:64:7a:f9:f9:61:8d:6b:ce:86:
51:96:44:6e:0a:38:51:22:97:ec:a0:78:2c:5d:a3:57:a2:f7:
54:7b:f9:9b:ad:8c:04:75:9e:e9:ff:b6:97:f3:f5:0b:f1:ea:
47:1b:37:09:7a:7e:51:2d:a9:aa:6d:2f:81:c5:9a:70:89:ec:
d7:8e:c9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:34 2026 by rpki-client