
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30211/dVDKCWXYH5ZYzuH9Qn2J2ktHyK4.roa
File: dVDKCWXYH5ZYzuH9Qn2J2ktHyK4.roa (raw, json)
Hash identifier: kpTGBpvcirJgMC17yFNVemQc7MXmAKSFYEY/5S3xGh0=
Subject key identifier: 75:50:CA:09:65:D8:1F:96:58:CE:E1:FD:42:7D:89:DA:4B:47:C8:AE
Certificate issuer: /CN=1467AF2FF272208CF75453CDC0122C4713D2CAB5
Certificate serial: 46
Authority key identifier: 14:67:AF:2F:F2:72:20:8C:F7:54:53:CD:C0:12:2C:47:13:D2:CA:B5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/dVDKCWXYH5ZYzuH9Qn2J2ktHyK4.roa
Signing time: Tue 31 Mar 2026 08:14:34 +0000
ROA not before: Tue 31 Mar 2026 08:14:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38648
IP address blocks: 2402:3b00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/FGevL_JyIIz3VFPNwBIsRxPSyrU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/FGevL_JyIIz3VFPNwBIsRxPSyrU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1467AF2FF272208CF75453CDC0122C4713D2CAB5
Validity
Not Before: Mar 31 08:14:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7550CA0965D81F9658CEE1FD427D89DA4B47C8AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:97:5c:bc:49:eb:f2:64:25:b1:36:fe:af:
b8:a9:f4:48:56:58:84:02:e9:55:61:c6:6d:31:2a:
57:e6:60:69:9d:8c:9d:36:e6:f6:dd:ca:21:19:4d:
36:1e:86:84:72:ba:78:51:91:bb:21:a2:61:a6:8b:
86:32:57:70:1c:54:64:77:1b:6e:4a:87:7b:a5:8b:
cf:67:b1:be:4b:a9:c2:6c:7e:bf:35:fd:59:d8:d2:
00:d5:87:4e:60:27:e5:d8:18:c1:a5:b0:bb:4f:40:
53:43:e9:1c:82:ec:2f:e4:dc:5b:8e:25:45:e0:eb:
6f:ec:07:d3:7b:7a:d1:96:8d:db:57:b7:e5:6a:f4:
41:2d:16:0d:06:06:32:7b:8d:70:26:7a:bb:fd:48:
78:07:b4:31:bb:fc:b9:2c:da:22:6d:f3:d1:4a:d2:
02:e3:f2:e5:30:c3:a9:03:09:8f:3c:1d:81:e2:8e:
c6:86:c3:1b:e3:82:95:19:94:3a:01:d6:cc:37:24:
f9:03:63:df:33:31:65:21:a5:cb:e6:d3:3d:0c:35:
fd:4e:13:86:c1:da:b4:67:1f:a5:67:86:e0:7f:e3:
b3:2d:13:50:e9:bc:70:93:7e:a4:94:d3:c6:37:74:
8d:81:78:43:f6:16:f5:aa:f4:a0:39:e0:06:5b:27:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:50:CA:09:65:D8:1F:96:58:CE:E1:FD:42:7D:89:DA:4B:47:C8:AE
X509v3 Authority Key Identifier:
keyid:14:67:AF:2F:F2:72:20:8C:F7:54:53:CD:C0:12:2C:47:13:D2:CA:B5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/FGevL_JyIIz3VFPNwBIsRxPSyrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FGevL_JyIIz3VFPNwBIsRxPSyrU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30211/dVDKCWXYH5ZYzuH9Qn2J2ktHyK4.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3b00::/32
Signature Algorithm: sha256WithRSAEncryption
20:ea:3a:18:38:27:56:45:1c:ad:1c:fd:1f:87:92:cf:f0:b6:
23:09:21:0a:98:35:39:3c:ad:f0:9c:79:94:07:e4:69:f8:3c:
8a:9e:48:43:af:bd:73:39:18:7c:2b:97:b0:67:78:10:65:2c:
cd:8a:e1:48:0c:70:9f:6d:d6:81:ea:ca:97:5e:39:75:e7:46:
05:3d:06:9b:43:2d:d0:54:4e:9b:03:0a:d8:fb:58:c0:e2:67:
47:c3:22:f6:d9:7c:a1:69:a1:9d:4d:e1:b1:39:e2:f5:2a:c3:
6b:46:06:ab:e1:8c:6f:7a:72:22:2a:b4:63:2e:d8:e0:05:c2:
8d:9b:1d:37:7b:0a:8e:aa:20:9f:fc:40:57:ff:65:e2:cf:7d:
43:18:0f:85:ec:20:08:c3:b0:00:75:fe:f4:20:5d:58:0d:17:
ef:22:ea:8e:82:16:73:d9:00:ae:85:0b:88:a3:58:9a:68:dc:
37:69:2d:86:eb:bc:36:ad:0b:30:fd:67:68:47:de:0f:a6:3f:
e4:87:aa:e9:89:64:c4:b9:16:55:15:5e:a0:b4:88:10:c8:f4:
04:28:c1:90:fa:dd:e5:76:f3:fc:29:79:60:d3:f2:92:f6:a7:
26:2e:65:0f:59:37:fe:a9:1c:98:6c:40:58:44:50:81:13:7c:
86:e2:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:10 2026 by rpki-client