
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/tCm1UUgaTG6XCsl5jAOuRAIwZlY.roa
File: tCm1UUgaTG6XCsl5jAOuRAIwZlY.roa (raw, json)
Hash identifier: FXrnCDbl/zaAaf79zvil8/iLc3Mw5qCk2xjteOBhKrs=
Subject key identifier: B4:29:B5:51:48:1A:4C:6E:97:0A:C9:79:8C:03:AE:44:02:30:66:56
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 72
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/tCm1UUgaTG6XCsl5jAOuRAIwZlY.roa
Signing time: Tue 31 Mar 2026 08:42:53 +0000
ROA not before: Tue 31 Mar 2026 08:42:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2405:25c0:af00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Mar 31 08:42:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B429B551481A4C6E970AC9798C03AE4402306656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:e3:60:59:c7:3b:fb:9f:5a:8b:c7:36:5b:
a0:eb:08:7e:f9:4b:29:31:10:0c:93:2a:0b:8d:8e:
64:87:0d:46:c5:42:a3:aa:ef:5d:de:cd:f2:e2:7f:
04:c6:e5:23:37:71:3c:07:0c:a2:f3:ea:70:08:ed:
d2:cf:4a:f6:be:7f:98:49:ff:09:c0:45:16:50:ad:
40:78:ea:4b:53:53:50:b8:96:3b:5d:3a:1f:59:53:
a1:06:21:83:4b:40:e8:35:c9:fe:bb:47:5b:a6:a5:
8b:1d:9b:ce:ec:18:3c:73:f8:b6:c5:e5:6d:9d:e2:
7f:59:94:5b:f8:75:bc:ed:26:ff:9f:c3:0d:6c:17:
87:53:01:48:b3:07:a7:fb:2d:14:59:5c:c1:fa:46:
06:06:40:dc:43:4e:07:e0:85:ca:9f:a0:40:c0:b4:
64:b1:20:54:c8:e4:f6:0b:a7:a2:60:60:db:ce:2c:
35:05:64:09:c0:60:2c:12:b5:46:8a:f2:3b:a1:9b:
f6:d2:30:0c:7a:e5:1a:02:02:4e:ae:bb:64:b2:a4:
95:fc:f9:e2:f3:47:39:b8:73:26:71:f5:34:6c:a0:
52:d5:5d:3d:19:bc:3a:20:4c:0c:cc:6b:b1:a4:53:
61:7f:1b:0d:59:83:ef:15:48:b8:f8:c6:16:b9:01:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:B5:51:48:1A:4C:6E:97:0A:C9:79:8C:03:AE:44:02:30:66:56
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/tCm1UUgaTG6XCsl5jAOuRAIwZlY.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:af00::/40
Signature Algorithm: sha256WithRSAEncryption
81:57:34:1a:42:4e:a7:b2:4b:02:09:6c:ed:88:18:3c:04:3d:
b4:08:d4:1f:04:da:75:e5:a5:89:24:16:b1:ab:9e:22:1c:9d:
fb:94:1a:0d:45:da:ba:22:72:a1:73:c7:e0:dc:5f:2c:f3:70:
dc:d1:0d:28:23:eb:03:f9:37:7f:66:0d:96:f1:c0:93:be:a7:
f7:03:c6:33:17:70:4a:c8:02:aa:15:a8:18:4b:eb:21:bc:bf:
de:a6:86:0e:4e:d1:0a:4b:57:c2:9c:8d:f5:53:31:19:64:c5:
a2:fe:63:ca:4b:77:f3:c1:d4:22:22:21:68:d7:fd:bc:06:41:
8e:de:6e:ed:dd:e4:0f:02:8d:15:59:fe:3a:c7:66:3e:ea:40:
24:dc:8d:4a:df:32:b2:ef:9f:3b:1d:bf:eb:85:5b:30:54:9a:
9e:ab:e2:f5:e4:fe:7a:92:5b:2a:a2:55:8d:ea:8b:db:3e:60:
41:74:e2:5a:be:81:72:12:65:7b:9f:d5:f3:23:20:1d:af:ba:
1c:97:b6:c9:78:7c:78:b5:f4:79:de:3f:b0:ab:d6:e7:2e:23:
a1:db:72:df:2e:60:82:bf:73:88:c1:ee:23:55:d8:7a:da:cd:
76:ce:15:82:fa:98:4f:8e:d8:00:e7:62:56:ed:d4:90:ff:a6:
dc:55:c0:26
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB
MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI2MDMzMTA4
NDI1M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjQyOUI1NTE0ODFBNEM2
RTk3MEFDOTc5OEMwM0FFNDQwMjMwNjY1NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKtj42BZxzv7n1qLxzZboOsIfvlLKTEQDJMqC42OZIcNRsVCo6rv
Xd7N8uJ/BMblIzdxPAcMovPqcAjt0s9K9r5/mEn/CcBFFlCtQHjqS1NTULiWO106
H1lToQYhg0tA6DXJ/rtHW6alix2bzuwYPHP4tsXlbZ3if1mUW/h1vO0m/5/DDWwX
h1MBSLMHp/stFFlcwfpGBgZA3ENOB+CFyp+gQMC0ZLEgVMjk9gunomBg284sNQVk
CcBgLBK1RoryO6Gb9tIwDHrlGgICTq67ZLKklfz54vNHObhzJnH1NGygUtVdPRm8
OiBMDMxrsaRTYX8bDVmD7xVIuPjGFrkBEokCAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBS0KbVRSBpMbpcKyXmMA65EAjBmVjAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6
Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm
cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzQ5L3RDbTFVVWdhVEc2WENzbDVqQU91UkFJd1psWS5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAkBSXArzANBgkqhkiG9w0BAQsF
AAOCAQEAgVc0GkJOp7JLAgls7YgYPAQ9tAjUHwTadeWliSQWsaueIhyd+5QaDUXa
uiJyoXPH4NxfLPNw3NENKCPrA/k3f2YNlvHAk76n9wPGMxdwSsgCqhWoGEvrIby/
3qaGDk7RCktXwpyN9VMxGWTFov5jykt388HUIiIhaNf9vAZBjt5u7d3kDwKNFVn+
OsdmPupAJNyNSt8ysu+fOx2/64VbMFSanqvi9eT+epJbKqJVjeqL2z5gQXTiWr6B
chJle5/V8yMgHa+6HJe2yXh8eLX0ed4/sKvW5y4jodty3y5ggr9ziMHuI1XYetrN
ds4VgvqYT47YAOdiVu3UkP+m3FXAJg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:51 2026 by rpki-client