
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ONB76fVjhWcxTVC00qKqCwx-BOA.roa
File: ONB76fVjhWcxTVC00qKqCwx-BOA.roa (raw, json)
Hash identifier: GRvRUbcopNnrBQM26QBEEXyEvo9sdCwxb6BCtjXVwDk=
Subject key identifier: 38:D0:7B:E9:F5:63:85:67:31:4D:50:B4:D2:A2:AA:0B:0C:7E:04:E0
Certificate issuer: /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial: 79
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ONB76fVjhWcxTVC00qKqCwx-BOA.roa
Signing time: Tue 31 Mar 2026 08:32:20 +0000
ROA not before: Tue 31 Mar 2026 08:32:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59127
IP address blocks: 2401:7ec0:9000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Validity
Not Before: Mar 31 08:32:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=38D07BE9F5638567314D50B4D2A2AA0B0C7E04E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:53:7d:1d:d3:b3:60:b2:f0:79:98:45:54:
9f:aa:74:9c:ba:8b:f4:86:21:08:8a:3f:8c:06:3b:
b9:6f:0f:8d:bb:74:28:75:77:4b:65:07:c9:15:13:
53:45:17:cd:21:76:09:68:72:5c:76:a4:9d:53:ea:
81:54:a0:e9:3f:cc:c7:84:5b:a1:40:07:1c:87:48:
29:4d:8e:dd:0d:16:2e:87:b1:8f:49:2d:53:1c:fd:
a1:34:65:99:72:6b:db:f1:fa:38:fd:d9:4a:f0:ed:
08:3e:96:59:a9:ab:4f:67:ad:58:7f:2a:ae:48:62:
3d:3e:9f:bf:67:4e:77:d9:62:56:f0:d1:81:d5:85:
d3:34:7c:d0:d1:55:0d:f5:24:8f:4a:b8:62:74:77:
96:19:8d:8a:cc:b5:a5:fe:87:d0:91:4a:5f:e8:53:
ad:64:96:7e:d3:f6:ac:08:5b:13:dd:1f:7e:e6:db:
3e:0a:33:d1:62:43:4d:8e:08:76:1a:2a:49:68:f9:
c5:0a:f7:c4:d1:d8:bb:ff:dd:db:36:b6:26:fc:ba:
9f:18:12:6d:94:6a:79:f4:e1:ee:28:df:5f:7c:c8:
43:9c:59:8d:3c:2d:9e:08:b9:2a:a0:c0:60:6d:18:
72:d9:67:64:1b:4d:fb:26:f1:cd:b4:fc:2b:9a:37:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D0:7B:E9:F5:63:85:67:31:4D:50:B4:D2:A2:AA:0B:0C:7E:04:E0
X509v3 Authority Key Identifier:
keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/ONB76fVjhWcxTVC00qKqCwx-BOA.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:7ec0:9000::/36
Signature Algorithm: sha256WithRSAEncryption
12:6b:18:0b:e6:39:a7:94:9f:8e:a6:71:25:84:ee:bf:95:84:
f0:11:90:4e:9f:4e:3c:bb:a6:e9:cb:d7:a2:f6:e9:93:6c:44:
13:b0:f3:32:ae:c4:db:28:91:90:05:33:e4:38:5b:c3:9f:06:
c6:4b:69:7c:5c:31:b7:bc:5a:3c:02:21:e9:7b:88:8d:09:42:
f4:6d:5a:96:d9:42:87:99:6e:ec:49:b1:75:ff:72:63:16:ea:
cf:a6:fa:a7:63:8e:84:77:bb:a0:24:fd:dd:c3:68:b5:28:66:
3f:11:51:58:de:9a:42:0f:84:48:6f:b1:02:33:78:b3:84:cb:
fa:68:79:e0:9b:14:ab:24:76:23:c8:a3:11:4d:a4:e4:71:39:
88:37:1a:84:4c:15:8e:6a:b0:aa:b7:ac:ae:f2:60:5b:29:cc:
90:e3:f3:10:23:49:06:b3:9e:88:c0:1a:f4:6a:61:f1:01:86:
90:66:ef:06:eb:38:b6:ba:77:64:82:ec:fe:78:df:11:62:3b:
84:05:3b:ff:51:63:79:72:28:71:3e:78:a5:3e:9c:30:63:84:
51:b9:42:9c:79:33:67:a4:9d:9b:2b:4d:93:bc:cf:1a:89:4b:
f9:fe:4a:15:80:8b:af:53:12:72:ca:21:26:d6:b0:34:78:b2:
32:16:f1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:09 2026 by rpki-client