
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/CB2Y2TtUd3rLWh5w54huDjQipx0.roa
File: CB2Y2TtUd3rLWh5w54huDjQipx0.roa (raw, json)
Hash identifier: XC1Am4+jmMSBYzmBacX/8Z4OiRLoG+Gok68KshciFQY=
Subject key identifier: 08:1D:98:D9:3B:54:77:7A:CB:5A:1E:70:E7:88:6E:0E:34:22:A7:1D
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 76
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/CB2Y2TtUd3rLWh5w54huDjQipx0.roa
Signing time: Tue 31 Mar 2026 08:42:56 +0000
ROA not before: Tue 31 Mar 2026 08:42:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2405:25c0:e000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Mar 31 08:42:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=081D98D93B54777ACB5A1E70E7886E0E3422A71D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:cf:f6:ee:37:0f:c5:18:e8:d5:65:71:fd:
c4:87:62:ba:2b:f1:66:11:46:65:37:16:08:67:38:
c1:a0:bc:09:e6:ba:fa:08:e2:ce:32:ef:79:b4:c3:
1e:56:b0:a9:c9:f9:6c:09:7b:42:2e:8e:ea:f2:d7:
51:88:2c:99:35:ea:1b:a7:d8:b7:3c:cb:04:ff:65:
98:2e:57:b7:15:cb:05:ee:28:ff:fc:69:fb:6e:2c:
42:47:4e:b0:a2:87:f5:1a:fa:61:fd:2b:cb:9c:41:
4a:8f:a9:71:75:57:24:f5:b4:69:8c:b8:83:35:1f:
80:95:93:fd:69:c5:a2:d3:91:b2:6d:08:1d:09:31:
86:48:32:39:d2:92:31:60:1b:0c:75:10:2a:d0:45:
b8:f9:c5:f5:83:c4:c2:ac:d1:b9:80:de:8f:f8:35:
b5:31:95:a9:12:e8:0b:89:f0:61:9c:ad:79:4c:b3:
bb:e4:40:d6:bd:8c:5e:b4:de:67:a3:84:30:cf:71:
17:46:10:2f:27:28:fd:69:b9:e8:11:1a:cb:ac:7d:
8c:9f:a3:77:c9:f8:dd:ab:f1:72:96:8e:61:03:a5:
70:e0:f3:01:b0:66:17:eb:38:cf:e6:f3:16:fb:a2:
19:04:9f:d8:c5:7c:17:8e:21:87:c9:05:39:ed:f4:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1D:98:D9:3B:54:77:7A:CB:5A:1E:70:E7:88:6E:0E:34:22:A7:1D
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/CB2Y2TtUd3rLWh5w54huDjQipx0.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:e000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:db:3a:38:f3:fb:ab:63:99:22:29:f6:88:dd:03:b6:00:38:
2c:2b:7a:ec:4f:e3:01:25:2f:f7:dc:77:be:3d:49:43:af:d3:
56:5a:d8:17:81:5d:ef:92:c9:cf:13:8a:7c:fa:46:2e:03:fe:
02:70:0d:8a:ea:ee:03:43:0a:16:6d:6a:38:88:b0:16:0a:83:
58:b6:7c:d6:2c:5b:27:29:a7:51:d9:d3:11:97:3b:39:ef:8b:
6b:54:45:97:56:16:0e:6d:e2:da:e6:49:58:2f:65:12:1f:bd:
de:4f:bb:ba:4d:fa:f7:29:a0:5b:79:1d:6b:00:96:7b:b7:35:
12:fd:51:18:e6:7a:0b:2a:38:23:35:f6:fc:52:bc:55:40:28:
02:eb:8b:55:d1:87:83:77:b3:fc:43:d9:fb:48:4e:fe:52:34:
9f:47:54:78:30:3a:63:c4:18:89:e6:5f:db:b7:ba:6a:f8:d5:
d0:b3:24:02:a9:bd:36:ee:fd:61:b0:87:f8:11:29:18:ea:6d:
86:52:22:b2:0c:72:29:82:16:03:31:ae:a4:c5:82:f5:c5:f8:
48:f3:7e:0f:46:17:9b:cb:47:c6:fe:fb:9c:b2:78:e4:2e:a0:
cc:44:84:a7:f6:74:62:2e:cc:91:a8:d1:9c:54:4e:91:54:3f:
4a:5f:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:11 2026 by rpki-client