
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30323/Ra780q3frtXQOkD6GB08vlK_L2Y.roa
File: Ra780q3frtXQOkD6GB08vlK_L2Y.roa (raw, json)
Hash identifier: M+ancDlEI6k4ZLQDbOrkhEF4JY9o+Q/UNDqYSvn774U=
Subject key identifier: 45:AE:FC:D2:AD:DF:AE:D5:D0:3A:40:FA:18:1D:3C:BE:52:BF:2F:66
Certificate issuer: /CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Certificate serial: 25
Authority key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/Ra780q3frtXQOkD6GB08vlK_L2Y.roa
Signing time: Tue 31 Mar 2026 08:38:29 +0000
ROA not before: Tue 31 Mar 2026 08:38:29 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 37892
IP address blocks: 2402:c840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Validity
Not Before: Mar 31 08:38:29 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=45AEFCD2ADDFAED5D03A40FA181D3CBE52BF2F66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:33:e4:b3:3e:f6:f0:18:25:84:76:ac:85:
7a:e6:c2:4a:78:86:10:ad:58:49:b4:ac:54:f3:ba:
3e:4f:8b:93:6e:51:d4:f5:52:9f:17:22:2d:25:70:
8b:7f:c6:25:14:4e:82:e5:54:94:8b:91:fd:b0:bc:
a2:17:01:51:10:00:e1:c5:38:55:2a:36:9c:44:c2:
cf:8e:37:ed:97:22:22:82:60:9c:4a:6f:ea:2e:f5:
91:f6:8a:25:ab:40:07:c5:f3:34:9c:de:dd:f6:15:
9b:93:8c:fd:97:0e:07:75:7b:92:0a:48:07:87:be:
a3:76:82:b2:0c:86:2a:07:aa:84:aa:dd:17:1d:35:
80:f4:6a:3f:e0:37:5e:70:66:ac:77:e6:1a:70:49:
a6:9c:21:79:a3:f9:5d:49:b7:a2:77:ce:d7:ca:bc:
cb:9e:04:1f:2f:22:97:50:ac:80:b8:03:f4:ff:78:
3b:60:fc:56:e4:e1:25:cc:a9:f3:ab:00:f3:4f:0c:
d6:e3:a4:15:a9:51:da:93:9c:a1:ea:73:5d:97:4e:
25:9f:bc:f9:57:a7:ca:4a:65:3c:0e:85:10:e4:ea:
8d:60:68:09:f2:3b:28:80:b0:fe:85:94:c3:6e:84:
e5:58:2d:86:fb:b7:ee:7f:12:a0:8f:42:f5:41:d6:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AE:FC:D2:AD:DF:AE:D5:D0:3A:40:FA:18:1D:3C:BE:52:BF:2F:66
X509v3 Authority Key Identifier:
keyid:AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/Ra780q3frtXQOkD6GB08vlK_L2Y.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:c840::/32
Signature Algorithm: sha256WithRSAEncryption
7c:6e:4e:37:cd:c5:0e:4d:1a:aa:ef:df:8b:a3:fc:50:87:37:
fc:94:bd:96:81:c2:07:7b:0e:5a:6b:d7:cb:d1:64:1e:e0:89:
a7:33:6f:bd:ea:93:e4:0f:5e:ee:2e:ca:89:a9:1d:6d:1e:5c:
4c:36:e6:cf:cc:ed:a4:38:47:79:8d:d1:e6:1f:d6:b4:35:4b:
14:c3:08:56:58:d5:63:33:be:8c:1c:c1:18:38:5c:63:ef:cf:
23:15:fb:eb:ad:4b:f1:98:0d:26:4c:ed:19:c9:6f:6e:fc:4d:
fd:3d:bc:2a:51:ad:c6:47:56:1a:77:b3:e4:97:8a:40:49:7d:
62:12:87:36:a7:d6:98:a7:50:e4:8e:ce:f4:58:ca:fc:af:50:
1c:47:5a:0f:e5:ea:fa:8b:b9:a2:80:0b:5e:a5:7c:43:5d:f3:
70:49:51:5a:e2:40:88:be:a6:2d:ae:44:2c:27:07:86:ad:d5:
ea:0b:51:02:6f:ce:20:c4:0f:17:44:96:39:73:95:5f:23:60:
c8:36:63:71:a6:99:2f:a8:1d:b4:9d:c0:d1:60:2d:f1:ab:fe:
be:6e:21:57:f5:82:e4:6e:4d:a0:fd:a7:dd:1f:7d:fb:c0:6d:
af:6e:59:b7:14:a2:bf:89:9d:1c:06:0c:e2:43:30:65:36:a1:
01:9d:58:fd
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjZD
ODQ2NEIwNTJCNzIwRjVEMkMwMDIwRTY0MjZCNkM3RUQxODZCMB4XDTI2MDMzMTA4
MzgyOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDVBRUZDRDJBRERGQUVE
NUQwM0E0MEZBMTgxRDNDQkU1MkJGMkY2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANc1M+SzPvbwGCWEdqyFeubCSniGEK1YSbSsVPO6Pk+Lk25R1PVS
nxciLSVwi3/GJRROguVUlIuR/bC8ohcBURAA4cU4VSo2nETCz4437ZciIoJgnEpv
6i71kfaKJatAB8XzNJze3fYVm5OM/ZcOB3V7kgpIB4e+o3aCsgyGKgeqhKrdFx01
gPRqP+A3XnBmrHfmGnBJppwheaP5XUm3onfO18q8y54EHy8il1CsgLgD9P94O2D8
VuThJcyp86sA808M1uOkFalR2pOcoepzXZdOJZ+8+VenykplPA6FEOTqjWBoCfI7
KICw/oWUw26E5Vgthvu37n8SoI9C9UHW1pECAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBRFrvzSrd+u1dA6QPoYHTy+Ur8vZjAfBgNVHSMEGDAWgBSrbIRksFK3IPXSwAIO
ZCa2x+0YazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMjMvcTJ5RVpMQlN0eUQxMHNBQ0RtUW10c2Z0R0dzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcTJ5RVpMQlN0eUQxMHNBQ0RtUW10
c2Z0R0dzLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzIzL1JhNzgwcTNmcnRYUU9rRDZHQjA4dmxLX0wyWS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAshAMA0GCSqGSIb3DQEBCwUA
A4IBAQB8bk43zcUOTRqq79+Lo/xQhzf8lL2WgcIHew5aa9fL0WQe4ImnM2+96pPk
D17uLsqJqR1tHlxMNubPzO2kOEd5jdHmH9a0NUsUwwhWWNVjM76MHMEYOFxj788j
FfvrrUvxmA0mTO0ZyW9u/E39PbwqUa3GR1Yad7Pkl4pASX1iEoc2p9aYp1Dkjs70
WMr8r1AcR1oP5er6i7migAtepXxDXfNwSVFa4kCIvqYtrkQsJweGrdXqC1ECb84g
xA8XRJY5c5VfI2DINmNxppkvqB20ncDRYC3xq/6+biFX9YLkbk2g/afdH337wG2v
blm3FKK/iZ0cBgziQzBlNqEBnVj9
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:05 2026 by rpki-client