
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/QFufol4Utl3uQFMgW0bUmRTLGL0.roa
File: QFufol4Utl3uQFMgW0bUmRTLGL0.roa (raw, json)
Hash identifier: 8Kb4lOUi1xdtEzCaufdOvlkG6/eZkDW25QEvRqR7cQQ=
Subject key identifier: 40:5B:9F:A2:5E:14:B6:5D:EE:40:53:20:5B:46:D4:99:14:CB:18:BD
Certificate issuer: /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial: 36
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/QFufol4Utl3uQFMgW0bUmRTLGL0.roa
Signing time: Tue 31 Mar 2026 08:33:39 +0000
ROA not before: Tue 31 Mar 2026 08:33:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63778
IP address blocks: 2401:7641::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Validity
Not Before: Mar 31 08:33:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=405B9FA25E14B65DEE4053205B46D49914CB18BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:9e:cc:53:d8:f3:93:73:7d:e6:b2:80:a3:
70:d3:53:43:58:ee:33:7f:4e:cb:9a:1b:9d:23:f9:
28:8c:58:f6:e7:60:2f:b8:ed:25:b4:cb:2f:47:aa:
08:ed:01:4d:51:dd:a9:55:77:ab:99:40:c9:df:2e:
ed:57:fa:cf:36:7c:5a:a0:a6:7c:cb:52:f7:c6:70:
98:31:e0:51:1d:66:dd:40:50:42:d6:e3:c4:d3:fb:
bd:2f:26:84:13:ee:b7:78:9e:e7:f3:47:ed:a5:ef:
d6:ee:a8:8a:a4:12:fe:bd:a8:43:d7:78:f5:07:e5:
a5:6b:72:a7:05:84:1c:0d:fe:e2:0b:55:15:80:8e:
60:0e:43:bf:70:9d:81:a1:a5:2e:84:b1:a3:af:f6:
bb:5d:04:a5:bd:c2:fb:97:2c:99:91:05:c5:4d:ed:
7d:f8:ab:62:85:0e:b3:45:cb:4d:1a:d0:d2:82:94:
5b:65:94:8f:55:69:c2:f3:7e:4f:b0:bf:01:00:9b:
16:6c:52:03:1b:06:5f:e0:f3:74:74:ac:20:3d:22:
e6:f8:5b:21:20:d0:f3:af:f9:c6:95:34:fb:06:89:
bf:10:4c:12:66:f5:1e:04:ed:4e:ed:43:ac:a1:32:
63:d2:f4:08:cf:9f:4a:44:59:03:bc:06:46:dd:29:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5B:9F:A2:5E:14:B6:5D:EE:40:53:20:5B:46:D4:99:14:CB:18:BD
X509v3 Authority Key Identifier:
keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/QFufol4Utl3uQFMgW0bUmRTLGL0.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:7641::/32
Signature Algorithm: sha256WithRSAEncryption
86:a0:ff:68:2a:94:a1:fe:11:82:83:aa:88:5b:fd:ff:cd:83:
d9:ea:5a:3d:da:89:1e:1f:36:29:78:2d:41:64:5f:49:9a:ed:
8e:cd:72:f6:24:9e:f5:b5:20:d0:33:22:05:b1:67:b2:84:08:
18:59:f8:9f:ab:43:a0:6c:5d:a7:d6:c8:23:85:2f:9f:c2:53:
3a:cf:1d:38:8e:e4:ab:19:47:d0:e2:4f:80:e2:cb:4f:e1:f8:
59:e9:d5:b3:4f:c1:40:51:59:35:d4:88:ca:74:73:ab:3f:b5:
f0:9c:f8:4d:e8:ee:85:29:96:9b:e7:b3:a6:c7:12:ba:31:a2:
25:ab:49:eb:19:91:84:2f:d0:6f:37:17:19:b1:d8:b6:32:64:
e6:ab:d1:40:70:5a:9c:3b:f4:ad:7f:a0:30:31:2f:8e:e3:ef:
ba:85:f4:1f:54:c4:c8:ba:20:e2:13:b4:4b:89:31:47:1a:a5:
29:c1:2e:51:7b:17:a1:d4:35:40:23:9a:a8:d2:dd:8d:af:8f:
7c:be:63:dd:2a:d1:97:cc:59:91:91:00:31:77:c2:77:c2:dd:
0b:d2:e1:01:a1:1f:71:a1:f6:11:39:81:dd:eb:2e:17:d6:52:
94:7c:db:ab:b3:51:9b:93:d4:7c:59:8a:6f:f4:9d:d8:f4:8b:
3c:64:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:53 2026 by rpki-client