
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/2Ni7_EzHFl0dwq60DFbr26decbU.roa
File: 2Ni7_EzHFl0dwq60DFbr26decbU.roa (raw, json)
Hash identifier: z8HFSBFdtM+6qgHSl94BepF/6Dt6kwASZzkWmjFttJ0=
Subject key identifier: D8:D8:BB:FC:4C:C7:16:5D:1D:C2:AE:B4:0C:56:EB:DB:A7:5E:71:B5
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 79
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/2Ni7_EzHFl0dwq60DFbr26decbU.roa
Signing time: Tue 31 Mar 2026 08:42:57 +0000
ROA not before: Tue 31 Mar 2026 08:42:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131969
IP address blocks: 2405:25c0:a200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Mar 31 08:42:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D8D8BBFC4CC7165D1DC2AEB40C56EBDBA75E71B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6b:87:3c:2b:cf:05:ae:e7:3f:1f:93:38:6b:
72:36:f6:d2:c2:96:44:08:80:d9:88:17:54:fe:be:
6a:34:98:1f:6c:9a:d4:80:da:e1:1f:dc:3c:53:0a:
64:b3:cb:9e:c3:0c:76:c8:ab:cf:2d:0f:89:9e:25:
98:81:ef:34:0b:b7:9b:a5:d0:c6:3e:09:3a:1e:d1:
93:ff:2c:cd:52:81:f5:b9:36:a9:47:72:4c:82:17:
0f:25:5d:3e:ad:bf:63:3b:69:0e:81:09:d0:72:44:
05:08:9a:57:90:ce:3b:f2:85:99:04:22:96:c0:b9:
03:a3:9c:ef:87:0a:41:a7:ab:f6:46:07:81:72:b7:
bf:c2:29:f8:97:d6:80:7d:07:6b:61:f2:4d:d8:aa:
ac:91:42:9c:1c:fa:44:ae:77:cd:ab:4a:43:1f:02:
75:63:b4:d7:49:5c:48:ab:ce:69:e5:2c:45:d1:9f:
46:4f:51:01:1d:20:a1:8d:9a:fe:af:73:df:64:fe:
2b:a9:b1:9b:d3:3c:17:4a:4b:cf:81:8a:aa:6e:71:
7b:84:d8:38:cf:85:1e:1b:42:60:fa:50:46:c3:a6:
44:8f:f6:61:04:ed:eb:20:9b:d6:7d:15:8f:ac:2e:
62:0c:4b:e1:dc:bf:c2:e4:23:c4:42:2f:e1:5b:41:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:BB:FC:4C:C7:16:5D:1D:C2:AE:B4:0C:56:EB:DB:A7:5E:71:B5
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/2Ni7_EzHFl0dwq60DFbr26decbU.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:a200::/40
Signature Algorithm: sha256WithRSAEncryption
c1:d7:4f:e6:8b:c2:e8:b5:36:72:6a:5b:32:c3:47:e5:de:da:
4a:b5:87:30:30:e4:48:0d:19:be:31:90:8e:af:4a:ed:a5:36:
e0:28:0f:cf:c5:bb:ea:bb:c1:3c:6c:5a:a7:af:f0:75:42:da:
fa:53:c4:f7:a1:79:9e:72:d6:56:28:04:9f:a5:40:6a:5d:1e:
b3:ff:0c:35:f1:f5:d7:fb:00:7e:28:fc:03:af:52:58:f8:3f:
c0:e3:15:5e:b4:87:e8:d3:3a:9b:f5:3b:6a:19:2c:75:3c:e2:
e4:ca:22:48:e5:6d:5c:ca:7f:42:a0:57:be:84:aa:1a:b5:82:
8c:09:20:61:e3:6a:df:89:16:b3:56:11:2c:01:18:e8:d2:27:
96:75:df:21:c2:31:e3:1f:50:5d:59:56:48:98:8d:72:11:6d:
60:8e:ed:c0:3c:f4:ed:eb:a0:3e:f1:55:d1:43:f3:13:53:bc:
5c:d3:8d:d3:8f:ac:9c:be:7b:c5:c1:dd:0c:54:fc:41:d8:ad:
29:85:36:b0:1d:82:d9:52:92:44:c3:63:da:39:17:98:d7:a1:
3e:6c:18:d1:02:8d:c7:2d:9e:92:1f:90:9f:2c:21:65:20:d6:
43:92:74:38:f7:80:9f:b6:f2:2f:8f:76:55:2e:93:b0:ff:bb:
5c:81:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:38 2026 by rpki-client