
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa
File: zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa (raw, json)
Hash identifier: a+dIJCwT/4Uvu+2ayZ4vJzxd6tevHc4s7XS1t410DPQ=
Subject key identifier: CE:59:22:5A:5A:45:12:0B:4C:C6:37:E7:D9:B4:6F:F2:6F:5A:F2:5E
Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial: 3A
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa
Signing time: Tue 31 Mar 2026 08:32:49 +0000
ROA not before: Tue 31 Mar 2026 08:32:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131964
IP address blocks: 2400:a140:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Validity
Not Before: Mar 31 08:32:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CE59225A5A45120B4CC637E7D9B46FF26F5AF25E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:63:75:e0:1e:4b:b9:3f:d9:56:48:d3:3b:
b8:67:1e:df:3d:a2:83:54:63:a7:b6:de:dd:76:47:
99:c4:3b:00:7d:98:ae:a5:53:ec:22:17:41:a6:d3:
3b:21:cf:32:83:a2:c4:a6:d1:30:10:a8:d1:66:67:
99:5a:ff:03:a8:00:6b:9e:af:37:ad:9c:cf:6b:81:
48:2c:df:2a:41:44:94:b7:aa:6c:d6:1d:d4:af:16:
df:4e:75:b7:8e:d0:8b:81:c7:ee:4f:84:cd:af:9a:
34:de:2b:0d:1f:1c:43:e0:e5:a9:ba:e3:4d:22:33:
c7:a4:9c:1b:0a:77:68:2b:4e:99:f4:dd:97:a8:a8:
94:14:b3:ea:0e:75:5f:06:a6:65:c7:e6:af:98:a2:
e1:d9:81:f3:39:b1:ab:3d:99:b3:c4:ef:36:e7:23:
cb:9a:ec:d5:72:e9:d4:0c:aa:a8:b2:af:b0:9a:f4:
1e:97:83:f8:4a:43:7f:0d:42:f5:a7:eb:28:a4:bd:
bf:39:a0:49:bb:b7:55:cc:f1:cd:a5:fb:7f:d3:df:
18:d3:cb:d0:dc:f2:12:a1:a1:9f:de:45:c0:52:2f:
9f:86:ff:51:b5:46:86:b7:eb:2a:1f:99:18:e7:ba:
07:b1:44:8e:c6:8c:b8:f0:c3:e7:42:4d:e7:ce:43:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:22:5A:5A:45:12:0B:4C:C6:37:E7:D9:B4:6F:F2:6F:5A:F2:5E
X509v3 Authority Key Identifier:
keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/zlkiWlpFEgtMxjfn2bRv8m9a8l4.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:a140:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
0e:0e:73:9d:ea:32:cc:0c:9f:73:80:4c:e6:67:39:de:bd:8b:
17:da:9c:c9:22:af:7d:df:7f:ee:7b:98:11:cb:f8:b4:35:de:
f9:ce:70:f7:37:c7:0c:5c:14:11:51:7b:b0:8c:59:3f:8c:3e:
21:64:18:a3:51:c6:d7:28:96:e8:db:37:c4:bf:47:46:52:9d:
38:12:36:48:f4:78:f4:fa:6c:cc:4d:fe:aa:12:0a:f2:05:d8:
00:73:b8:d2:0f:6e:2d:fe:5d:d8:17:80:34:a6:28:d9:cc:f6:
af:56:1f:1c:57:e6:ad:48:44:a4:a8:00:80:4d:03:bb:3f:01:
7a:a1:36:8f:ce:31:e0:5e:32:7b:8d:11:a2:8a:f7:0a:61:b1:
cb:b1:ec:68:f8:7a:89:ec:4a:5e:b2:9c:f1:71:69:28:90:0d:
c5:c8:d0:b4:c4:a0:f6:26:fe:9b:7a:3f:45:52:f3:33:fd:2e:
cd:93:52:da:e4:93:cc:b2:49:81:58:e4:0e:0b:de:a2:c8:ed:
67:dd:1d:6b:a9:52:5f:c6:36:8c:0c:77:17:11:2c:09:c3:70:
3b:74:7c:16:70:7e:e3:08:6d:0f:ee:ed:1e:05:c5:45:e0:b2:
b8:c7:cc:8e:2e:09:61:21:a8:15:46:72:7e:34:af:fd:00:9d:
61:37:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:54 2026 by rpki-client