
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/rkO7S3tc0HhMomuetsfbl1nb4fc.roa
File: rkO7S3tc0HhMomuetsfbl1nb4fc.roa (raw, json)
Hash identifier: Rhgrkixdbx03k+o9yH8jnh8W4NszlAennE0NMot/43U=
Subject key identifier: AE:43:BB:4B:7B:5C:D0:78:4C:A2:6B:9E:B6:C7:DB:97:59:DB:E1:F7
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 6D
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/rkO7S3tc0HhMomuetsfbl1nb4fc.roa
Signing time: Tue 31 Mar 2026 08:42:51 +0000
ROA not before: Tue 31 Mar 2026 08:42:51 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2405:25c0:aa00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Mar 31 08:42:51 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AE43BB4B7B5CD0784CA26B9EB6C7DB9759DBE1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:9d:b5:2f:e4:1f:a8:fd:f0:0a:b1:58:62:
68:73:d6:d2:5e:5a:bf:d1:fc:a8:60:b4:91:10:3e:
2b:3b:a0:db:6f:cd:b8:2c:81:6e:6a:23:85:f6:52:
8c:90:fc:54:57:c7:dc:17:b6:09:24:4a:cd:80:01:
e1:68:cc:33:0d:0c:dc:a2:34:0f:3b:59:0c:11:93:
2c:25:5e:6d:62:c7:8d:47:ea:9a:5d:27:c9:fb:fc:
d1:f3:ba:53:2e:a2:a5:da:c8:45:6d:5d:81:d8:d0:
35:ed:da:8e:08:70:bf:b9:50:17:87:c8:68:42:24:
65:13:48:28:40:e4:52:7d:46:cb:4f:de:62:da:f7:
b8:87:8b:6a:18:52:e8:a2:f1:f0:da:e0:52:e6:7d:
c8:f3:de:58:c9:15:ed:1b:cf:1b:b7:1b:b5:8d:f5:
2e:d0:4b:20:a1:e7:c4:a8:18:32:3a:7c:69:0d:34:
cf:7c:ca:4d:17:93:05:5a:8f:1e:68:93:f0:f4:f5:
6a:e9:ad:37:b0:12:1f:4b:cb:32:3e:89:fb:15:70:
99:30:3a:4c:bc:4f:69:b6:9e:43:0e:c3:5c:b3:99:
8a:cf:57:ee:7b:72:93:40:f5:a3:04:d4:d9:c6:52:
75:ca:00:8b:72:77:a3:03:94:5c:01:52:a6:fd:6b:
51:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:BB:4B:7B:5C:D0:78:4C:A2:6B:9E:B6:C7:DB:97:59:DB:E1:F7
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/rkO7S3tc0HhMomuetsfbl1nb4fc.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:aa00::/40
Signature Algorithm: sha256WithRSAEncryption
58:84:0c:2b:bf:e5:c0:d8:21:d1:af:fa:3b:24:bd:37:4e:9d:
da:51:7e:eb:3b:39:fe:ad:5d:51:ec:37:28:96:3d:3e:89:e4:
f0:01:49:d6:28:ad:31:9b:05:2a:01:5f:70:5c:f0:3f:4c:b7:
d0:93:62:52:64:d3:b5:d8:ba:2b:83:c5:df:7b:45:b6:91:6d:
4a:b9:e1:2e:b9:b9:b9:49:41:b8:2f:33:68:23:a9:16:45:72:
52:dc:71:55:f8:14:2c:54:7c:33:d0:6e:b0:5e:78:6e:b4:31:
95:74:21:92:6b:8c:67:a2:46:92:72:43:d8:39:68:d3:b4:fc:
26:b4:7c:ab:0c:0c:08:4b:f5:2d:1d:d2:51:63:8c:64:3e:4f:
5e:73:f9:24:c5:91:c9:7f:d3:ca:82:ca:a8:bc:13:9f:70:4a:
d2:51:1b:a1:5e:99:ce:ff:48:26:60:69:e4:ea:07:d6:90:36:
0b:96:2c:d5:d7:13:ed:f2:7c:16:59:10:0d:5f:bc:2e:9d:97:
67:81:1a:d8:1c:d1:56:2d:7c:1e:fc:cf:fc:53:b2:a7:1e:ff:
28:5d:a7:d1:0f:cd:e2:93:b4:28:cf:71:bb:78:5e:c1:5e:fa:
96:71:c8:e7:6e:88:8b:d3:2c:94:55:a0:f1:ef:c0:1a:55:50:
39:a4:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client