
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30233/-Cf_s2w1XbuTtzsYKtJLkh9tjsA.roa
File: -Cf_s2w1XbuTtzsYKtJLkh9tjsA.roa (raw, json)
Hash identifier: EECTta/3QlzH8uWJ9RKgDOsFIqpgGtL0m8B01pJ2y3Y=
Subject key identifier: F8:27:FF:B3:6C:35:5D:BB:93:B7:3B:18:2A:D2:4B:92:1F:6D:8E:C0
Certificate issuer: /CN=4475F65D96CA68DCD8E730AB79BF21388EE48AD1
Certificate serial: 39
Authority key identifier: 44:75:F6:5D:96:CA:68:DC:D8:E7:30:AB:79:BF:21:38:8E:E4:8A:D1
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/-Cf_s2w1XbuTtzsYKtJLkh9tjsA.roa
Signing time: Tue 31 Mar 2026 08:23:42 +0000
ROA not before: Tue 31 Mar 2026 08:23:42 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55900
IP address blocks: 2404:2d00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4475F65D96CA68DCD8E730AB79BF21388EE48AD1
Validity
Not Before: Mar 31 08:23:42 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F827FFB36C355DBB93B73B182AD24B921F6D8EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:94:c4:d2:ba:dc:25:50:3f:d4:80:c7:b6:
64:20:a4:72:62:13:3f:f6:fb:8d:13:df:4b:3e:05:
bd:cd:7f:f9:ac:dd:38:78:3b:43:51:cd:2b:f6:e0:
b6:17:a1:54:82:0e:69:07:b2:cb:0e:75:e3:d9:92:
ec:1c:fd:5f:98:69:99:bb:a7:a8:87:6a:d0:99:b3:
09:bb:8d:ef:36:5d:32:36:a3:50:52:4a:5d:2c:42:
7e:52:53:09:09:41:6b:b9:1a:b5:56:54:e8:52:7c:
9a:94:a5:64:37:90:6d:7f:d8:2f:ac:f2:25:bd:b5:
e3:a8:3e:a1:ba:13:72:d2:33:d0:d9:46:9f:d9:97:
a0:1c:d7:a1:90:76:12:1b:5c:68:7d:c0:02:3f:f2:
13:34:94:ec:79:c2:a7:e3:e7:6a:9d:46:91:5a:bd:
d9:d3:07:ac:6a:7e:b1:8c:d7:8d:34:df:22:a7:74:
99:b7:30:36:2e:17:c5:46:f3:f0:2c:68:fa:04:d8:
ee:43:b7:56:a1:db:b4:dc:62:2e:8b:c4:d2:80:b3:
d9:aa:5d:86:d6:12:33:ba:d9:54:a9:90:f9:a8:ee:
24:21:6e:d5:7d:32:ce:e1:08:39:a8:5a:fb:d2:8d:
d4:fc:0f:d6:59:4e:45:2e:49:39:cf:5c:d3:1a:0c:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:FF:B3:6C:35:5D:BB:93:B7:3B:18:2A:D2:4B:92:1F:6D:8E:C0
X509v3 Authority Key Identifier:
keyid:44:75:F6:5D:96:CA:68:DC:D8:E7:30:AB:79:BF:21:38:8E:E4:8A:D1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/-Cf_s2w1XbuTtzsYKtJLkh9tjsA.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:2d00::/32
Signature Algorithm: sha256WithRSAEncryption
3a:0e:74:85:67:70:64:ab:ff:8b:66:f2:b2:be:68:49:0c:cb:
7d:3c:af:7e:d3:90:6b:38:47:33:c6:29:7a:90:bf:7f:cf:42:
75:b3:fa:f0:5d:45:4a:8a:91:a3:5d:e4:46:20:d1:87:ed:42:
b8:51:f8:be:b1:d1:41:cb:78:fa:45:30:72:7d:68:5b:09:01:
ab:4e:23:7b:4a:a9:b3:14:2c:03:ce:73:67:9e:86:fa:97:37:
0f:c1:20:09:40:e7:f4:dc:8f:b7:6b:de:75:59:3d:59:ef:82:
a5:2c:da:21:08:c0:72:35:02:0e:e5:f8:d6:fd:3d:2c:0b:ef:
4e:c5:a8:c1:d7:02:59:0d:de:ee:de:3b:c6:ee:72:c2:ab:63:
88:5c:bb:41:46:a4:6e:cc:9a:20:e9:30:a2:17:17:9b:11:59:
af:02:73:ef:50:97:a9:cd:21:c5:88:30:23:9c:7c:2d:6e:0a:
d6:ee:b7:ae:35:b5:73:6c:23:b9:e5:96:6b:8f:3e:0f:e9:46:
91:8f:d2:1e:fe:95:1c:92:2d:96:cb:96:36:0b:4d:ee:5c:fe:
e8:f1:f5:9b:7f:bd:11:e6:47:a4:26:92:38:9b:f8:aa:e9:c9:
ae:60:1c:2d:57:b1:76:7a:a5:ed:35:d2:ef:83:49:3b:6c:13:
5c:62:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:11 2026 by rpki-client