
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/jBvocr59mfgeVfUuuvDIvgBrBXc.roa
File: jBvocr59mfgeVfUuuvDIvgBrBXc.roa (raw, json)
Hash identifier: N0Pk1ivbl89CjXlzqKkXJaujODXpttbOfowuzXmiR4M=
Subject key identifier: 8C:1B:E8:72:BE:7D:99:F8:1E:55:F5:2E:BA:F0:C8:BE:00:6B:05:77
Certificate issuer: /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2
Certificate serial: 5E
Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/jBvocr59mfgeVfUuuvDIvgBrBXc.roa
Signing time: Tue 31 Mar 2026 07:33:00 +0000
ROA not before: Tue 31 Mar 2026 07:33:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63774
IP address blocks: 2402:b7c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2
Validity
Not Before: Mar 31 07:33:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8C1BE872BE7D99F81E55F52EBAF0C8BE006B0577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:8e:eb:e2:cb:8d:34:d2:e3:ce:aa:f8:11:
94:b2:ad:0c:5b:0f:49:78:1e:80:ca:ac:24:65:68:
00:52:5b:b4:ae:7d:a9:81:15:a7:b8:5a:89:10:10:
dc:fc:e1:b4:1d:cc:79:2d:58:b2:4b:d9:c5:bd:64:
32:cc:91:56:7c:bd:84:82:51:96:f5:aa:47:98:06:
4d:65:62:60:e5:67:01:45:d0:2f:96:dd:d8:31:67:
b8:00:c5:a4:18:ab:2d:0e:b2:a7:52:da:de:93:f5:
6b:02:d4:ef:fd:36:66:9d:d8:70:4f:c3:fc:1b:45:
94:04:b6:49:61:c8:08:d0:c2:2b:0b:38:0d:c7:e2:
23:dc:15:29:1b:a6:30:8c:cb:3d:eb:0b:9a:23:88:
13:c2:ff:f7:43:72:90:8b:a0:30:6f:2b:d2:f4:10:
80:24:d8:25:02:25:8f:07:74:d1:e7:24:73:71:2c:
05:5c:cc:4a:09:0b:01:2a:73:d5:5a:c0:dc:23:c2:
b4:97:6d:04:ba:1b:7a:8f:0f:e3:57:b1:b3:bb:0e:
51:90:da:55:86:88:14:b9:c4:60:3d:e6:6c:5d:2c:
75:b8:08:e1:78:3c:6d:8c:b5:e8:9c:1e:22:2e:62:
f3:7e:1f:cf:ec:a1:3b:93:a3:e9:e8:9b:90:0e:95:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1B:E8:72:BE:7D:99:F8:1E:55:F5:2E:BA:F0:C8:BE:00:6B:05:77
X509v3 Authority Key Identifier:
keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/jBvocr59mfgeVfUuuvDIvgBrBXc.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:6a:37:af:0e:87:5a:c5:22:98:9c:f9:e1:1a:94:4d:01:e6:
9d:20:e2:6d:20:30:4d:d8:b9:6e:b8:17:10:ff:38:d2:4e:a1:
2f:29:61:ba:0a:83:3e:62:e0:bd:6f:5f:fd:82:3f:c0:2d:23:
c7:86:a8:f8:1d:f7:af:e1:7f:75:5b:b6:7d:b7:e4:9e:55:98:
c5:d4:a2:79:6c:81:a2:9d:3a:21:2b:fe:95:ff:ac:77:fe:d3:
2d:69:19:87:ea:7a:30:61:c4:da:2f:a6:35:b3:48:69:a7:99:
7a:b8:b6:94:65:83:07:b5:b3:cc:38:1a:96:66:8a:74:6a:4f:
e1:e5:43:d0:c6:ec:2b:d5:d5:a1:6b:53:65:a1:d4:85:e3:dc:
df:e6:55:cb:7d:ad:1d:b8:76:71:db:14:77:59:cf:3b:90:e4:
ad:e6:5a:32:66:0e:6f:43:4b:e5:e0:68:ea:74:f9:0a:0f:94:
a3:59:60:e4:5e:27:1a:6d:c9:72:64:8d:0f:57:b3:75:1f:37:
43:67:ed:cc:5a:a1:76:ed:58:92:19:cf:59:c3:44:b9:9e:18:
87:e2:e8:4f:0f:5d:00:fe:a0:10:b7:8f:00:42:11:52:49:b5:
54:c2:99:9d:50:e6:cf:3e:13:d1:47:6a:ed:a4:60:2c:ef:10:
72:16:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:49 2026 by rpki-client