
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30274/qPqjDqrcx3VbKdHua40C7pP6mdI.roa
File: qPqjDqrcx3VbKdHua40C7pP6mdI.roa (raw, json)
Hash identifier: bA1bfvm3t8QSX55GLNFRpxh6yxpqaKK4TciHUOUzZps=
Subject key identifier: A8:FA:A3:0E:AA:DC:C7:75:5B:29:D1:EE:6B:8D:02:EE:93:FA:99:D2
Certificate issuer: /CN=D48114BF4928572B1E92F271003C6E0F2DC87E46
Certificate serial: 04
Authority key identifier: D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/qPqjDqrcx3VbKdHua40C7pP6mdI.roa
Signing time: Tue 31 Mar 2026 08:48:49 +0000
ROA not before: Tue 31 Mar 2026 08:48:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23791
IP address blocks: 2402:3880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D48114BF4928572B1E92F271003C6E0F2DC87E46
Validity
Not Before: Mar 31 08:48:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A8FAA30EAADCC7755B29D1EE6B8D02EE93FA99D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:04:23:6e:45:b6:02:8d:54:c8:e1:49:e7:
77:ea:1e:85:b1:a7:05:7d:95:4e:55:c2:c1:f5:6f:
35:e0:be:47:60:b8:81:f7:f0:fa:58:2c:84:db:a6:
0c:09:5d:2c:e2:a1:76:5c:d7:55:6b:0f:72:2e:b2:
e5:b2:dc:01:14:5a:45:37:20:97:b0:82:47:b8:59:
eb:b5:eb:91:9b:cb:ef:6e:1e:3a:c3:b4:de:8d:33:
54:23:26:e7:fb:aa:f2:f8:01:29:a8:c7:5a:9e:4f:
52:ef:64:59:bd:a0:8e:d8:e7:2f:24:0b:00:b8:77:
b1:4d:18:85:7d:7e:3a:f5:13:3e:4f:db:27:91:6d:
9e:c8:5a:96:ef:e9:34:3b:de:85:df:a5:25:ba:42:
f5:af:b0:ed:f6:66:64:9d:d4:9f:7e:ea:54:06:95:
35:de:3b:c5:ee:ac:52:51:23:d6:1b:64:a9:f0:22:
b8:85:8e:a9:20:2a:e2:38:24:84:89:c8:c9:63:26:
4a:f6:b9:37:63:33:8d:ef:27:ea:af:7f:f0:08:8c:
00:07:d7:6a:f5:da:b2:30:dd:81:f0:c2:05:d6:e2:
92:7c:dc:46:19:7c:5a:d1:7b:56:5e:93:22:3b:0c:
a0:c9:bf:95:63:1b:86:84:47:40:af:ab:e9:eb:f5:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:A3:0E:AA:DC:C7:75:5B:29:D1:EE:6B:8D:02:EE:93:FA:99:D2
X509v3 Authority Key Identifier:
keyid:D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/qPqjDqrcx3VbKdHua40C7pP6mdI.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:3880::/32
Signature Algorithm: sha256WithRSAEncryption
06:cb:0e:c9:95:62:0f:ff:7e:e1:5f:0d:89:3e:5f:d4:85:ec:
19:43:f0:4d:e5:06:2b:f2:28:a3:25:67:01:b3:6b:1c:27:2c:
2c:7d:5d:99:12:0c:9b:9e:8c:39:63:46:8f:b1:b8:30:f8:12:
57:fe:f6:85:93:a2:51:cc:a2:e3:0e:f0:ce:c4:ef:72:37:34:
9e:33:d7:c6:35:07:87:69:d5:28:5d:cc:1d:1d:9e:57:6c:41:
20:bf:d5:c4:43:69:b4:e6:70:25:b9:f8:44:7c:d4:ba:7a:8f:
08:94:da:94:3d:52:c2:10:3c:14:ea:2a:9b:91:aa:62:53:95:
37:0c:5e:5d:6b:d5:24:c4:56:7b:9a:0e:0e:ae:5d:3a:02:91:
70:85:67:dd:e1:1d:59:f5:53:9d:1f:05:23:fd:c5:c6:cf:53:
c2:44:6a:ac:5d:c0:27:10:5e:18:c2:d4:f3:52:3e:15:cd:3a:
8d:ce:74:af:ad:bb:e7:df:c0:39:30:f6:6e:61:58:09:1a:bb:
f2:d4:e1:02:96:94:97:93:ef:61:75:75:ac:97:e8:6f:30:7f:
3f:28:32:a7:43:c1:d8:1a:02:37:0d:ea:34:0f:57:14:cd:c7:
2d:3e:c2:4c:50:1b:fe:b8:d3:01:dd:b7:fd:b5:67:4b:68:4f:
f0:0f:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:59 2026 by rpki-client