
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ngQk8RUNyCcdmVzhV8fw033fbko.roa
File: ngQk8RUNyCcdmVzhV8fw033fbko.roa (raw, json)
Hash identifier: BgJdlCrXPmUvBw51q0KCIjJtTCD12MaBBvgzEbpSWVo=
Subject key identifier: 9E:04:24:F1:15:0D:C8:27:1D:99:5C:E1:57:C7:F0:D3:7D:DF:6E:4A
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 60
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ngQk8RUNyCcdmVzhV8fw033fbko.roa
Signing time: Tue 31 Mar 2026 08:42:44 +0000
ROA not before: Tue 31 Mar 2026 08:42:44 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2405:25c0:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Mar 31 08:42:44 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9E0424F1150DC8271D995CE157C7F0D37DDF6E4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:4b:ed:89:72:ad:20:ab:bf:8f:52:94:13:
67:bc:4a:f3:6c:c7:0a:9d:65:83:c5:bd:12:fc:cd:
2a:c1:94:96:f1:d5:21:45:ad:38:0e:1f:a2:3b:7e:
95:42:1f:4b:7e:79:f7:6b:9b:9a:83:7a:32:64:54:
45:b7:fa:03:8a:4b:eb:a0:0c:c9:25:d6:87:f9:18:
6b:8e:27:e4:23:17:52:c5:23:af:24:c9:3f:6e:9f:
d3:4c:9f:27:7f:a5:cc:f9:5f:cd:7e:4c:da:6b:d3:
90:3f:8d:22:9d:89:bc:1c:b9:0b:ac:b7:9e:96:48:
c0:ba:5d:63:1f:10:15:4c:6b:f4:53:2d:42:ba:9a:
9d:6f:7d:c6:bc:e3:0f:d2:fd:a3:8d:62:8e:b5:b8:
41:1e:7e:81:00:e9:9b:0f:ea:ec:a8:db:6f:76:06:
33:90:41:ee:ff:26:71:ae:e1:9c:45:e9:11:8d:f5:
ca:1f:54:12:d7:16:7d:1c:2f:06:df:9e:cc:ee:10:
c1:b2:26:e3:b7:c4:6f:f4:20:93:1e:79:bf:e0:53:
52:d6:0e:81:4e:d6:19:79:ab:44:57:d6:f8:2e:f6:
8a:4e:9c:4a:ac:e7:25:29:41:ac:46:fc:85:8f:28:
b1:fc:6f:1e:bb:c6:da:6f:a6:77:ba:06:79:23:de:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:04:24:F1:15:0D:C8:27:1D:99:5C:E1:57:C7:F0:D3:7D:DF:6E:4A
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ngQk8RUNyCcdmVzhV8fw033fbko.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:3000::/36
Signature Algorithm: sha256WithRSAEncryption
74:e9:a4:09:ce:52:9a:80:60:ba:19:59:bf:9b:96:5c:b9:c3:
ce:9c:81:a1:90:0a:0f:26:8b:0f:ad:83:97:1d:93:1c:1a:e4:
5e:e7:ab:1a:39:8e:da:74:9c:c0:0a:9e:23:94:df:ac:83:3c:
ba:97:be:79:10:a7:90:3b:b1:0b:ed:5c:9a:d2:1c:4d:2b:0a:
e1:76:a3:0e:72:22:57:38:f9:10:0b:48:d0:24:52:a4:ba:bd:
a9:81:1b:44:8c:52:eb:5b:84:4d:50:0d:cc:e7:52:cf:32:89:
cf:38:6c:ee:7a:ba:0d:6b:d2:8e:ef:c1:db:1f:ba:d9:5e:b5:
9e:03:79:f9:0a:5a:26:c3:8c:ed:eb:d8:3f:13:38:3d:00:a3:
49:ae:f1:75:79:7d:36:14:0a:3d:35:aa:9e:da:2a:48:8b:3e:
a6:17:5b:ef:be:1b:e2:94:9c:c8:55:16:a0:4e:a2:ea:76:6b:
36:6b:9c:8a:60:e5:20:16:bb:3b:64:1b:42:b5:0c:45:aa:70:
ea:b1:7a:ed:79:7e:02:9e:f8:eb:12:b1:5a:c2:82:73:73:51:
96:86:7a:ce:1c:9c:2a:39:2a:b0:f9:24:a5:fd:c9:7b:4f:7a:
fd:50:a3:ac:75:dc:a4:f8:68:7f:f9:7f:02:0e:d5:8a:85:e5:
28:c3:1e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:47 2026 by rpki-client