
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/qaGO0Em9mcvvnWF7Nz8mirONTYk.roa
File: qaGO0Em9mcvvnWF7Nz8mirONTYk.roa (raw, json)
Hash identifier: F+IAdmo/czbVAqizMG49O6tOpZTC7CL0gF2d9vndl6A=
Subject key identifier: A9:A1:8E:D0:49:BD:99:CB:EF:9D:61:7B:37:3F:26:8A:B3:8D:4D:89
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 63
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/qaGO0Em9mcvvnWF7Nz8mirONTYk.roa
Signing time: Tue 31 Mar 2026 08:42:46 +0000
ROA not before: Tue 31 Mar 2026 08:42:46 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2405:25c0:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Mar 31 08:42:46 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A9A18ED049BD99CBEF9D617B373F268AB38D4D89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:61:70:58:b6:41:83:55:23:03:6a:dc:5e:
57:72:67:8f:de:81:ae:9d:44:0c:75:14:82:0f:6c:
00:50:9b:94:f7:46:81:b4:2c:e8:88:39:c9:39:3c:
0b:45:ba:c5:f6:a7:c8:8d:4f:53:a6:0c:46:74:ed:
7d:c6:d4:d5:34:bd:3e:5d:7d:96:6d:e3:8d:ee:d5:
f7:8c:7b:5e:66:52:d9:17:c4:6f:48:6d:aa:af:e0:
85:8d:6d:c8:ed:9c:0d:19:53:ac:c1:ac:f6:6b:cb:
4f:26:29:a9:bf:d0:86:c6:de:2c:e7:c4:f6:8b:7e:
23:e9:a0:bc:8a:11:7e:bf:1a:0c:ca:ac:46:af:b7:
4c:a8:93:54:0e:3c:41:62:7c:d3:e4:58:dd:3c:59:
89:f4:a6:1b:6b:84:6c:1c:18:21:40:ed:56:f4:68:
ca:97:05:ef:90:0e:5f:d6:85:b0:93:16:3d:1a:28:
e6:41:c3:2c:74:41:62:ca:67:46:bb:56:a3:34:41:
c6:b8:ba:0c:2b:44:4a:05:91:a2:a9:48:67:56:b3:
d0:23:18:9b:85:d3:23:92:a0:dc:05:b2:f6:33:7f:
50:1d:ef:08:88:1b:58:d8:93:92:22:f2:31:b3:63:
67:3f:2e:9a:12:c2:fc:64:01:c5:45:77:88:c2:0e:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:8E:D0:49:BD:99:CB:EF:9D:61:7B:37:3F:26:8A:B3:8D:4D:89
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/qaGO0Em9mcvvnWF7Nz8mirONTYk.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:6000::/36
Signature Algorithm: sha256WithRSAEncryption
26:c7:4f:c5:0b:c7:95:53:93:39:6f:7d:41:6f:29:7f:21:7f:
62:9e:58:8b:4b:f9:6f:41:e8:0b:4d:42:36:f5:c3:80:fd:07:
5b:42:98:2a:36:6a:6d:37:a7:fc:97:1a:22:41:72:c7:1d:9f:
a7:45:11:49:52:ad:cb:7d:ee:2c:d4:45:c8:73:0a:5b:33:d2:
e1:c0:d3:eb:07:04:08:a9:34:8b:d0:c9:8f:fa:af:37:e4:0c:
8e:ae:8b:3a:0f:e7:03:ed:8e:28:60:45:c2:31:14:6b:1f:5e:
09:0d:5e:7d:2d:a7:2b:9f:cd:4e:6c:a9:41:aa:ad:3d:07:a1:
16:d3:4a:70:bf:e0:54:fc:50:de:d9:2c:e0:c9:7b:4a:63:96:
99:17:75:b1:39:e7:20:8f:29:07:d1:a1:ed:39:0f:a0:e5:ac:
df:2a:7b:b9:a6:87:6a:e1:92:e2:6f:f8:78:ad:00:c8:ac:5a:
da:eb:2b:da:08:25:1f:db:71:9a:c9:0e:b4:ae:7d:d3:5a:40:
ed:81:21:be:8d:f1:7d:63:f0:f9:69:4a:0c:4f:61:89:dc:66:
37:5e:ca:d2:57:84:76:ee:3d:d5:99:76:6c:10:75:15:13:30:
a9:9b:4e:ec:c3:24:22:d3:0a:63:02:7e:15:67:34:49:f8:fa:
da:85:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:21 2026 by rpki-client