
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30375/MTM5fFTcQhtZAnG0cgaETIUqGtU.roa
File: MTM5fFTcQhtZAnG0cgaETIUqGtU.roa (raw, json)
Hash identifier: DjllOVpN5XiTpVFIQlRDXKnZhUN3SScnCA6AW9phGVg=
Subject key identifier: 31:33:39:7C:54:DC:42:1B:59:02:71:B4:72:06:84:4C:85:2A:1A:D5
Certificate issuer: /CN=574DBC2ACDCD6986DC737FB2D5C810394C4C074D
Certificate serial: 1D
Authority key identifier: 57:4D:BC:2A:CD:CD:69:86:DC:73:7F:B2:D5:C8:10:39:4C:4C:07:4D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/MTM5fFTcQhtZAnG0cgaETIUqGtU.roa
Signing time: Tue 31 Mar 2026 08:42:41 +0000
ROA not before: Tue 31 Mar 2026 08:42:41 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131986
IP address blocks: 2407:61c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574DBC2ACDCD6986DC737FB2D5C810394C4C074D
Validity
Not Before: Mar 31 08:42:41 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3133397C54DC421B590271B47206844C852A1AD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:91:19:50:6b:e1:5e:4a:bc:da:a6:3c:c0:2d:
f0:71:e2:77:1b:a2:cf:62:f9:67:90:f9:25:e9:b9:
51:d1:2a:25:58:a3:a4:be:b3:30:bc:1f:85:88:90:
56:62:c5:c9:37:a7:ff:57:cb:81:b3:df:12:d0:55:
14:4d:4a:e6:2c:93:bb:2d:35:56:d9:35:d7:50:2e:
02:b0:2a:89:03:75:9d:93:2d:9f:3b:49:37:c7:11:
2c:5d:34:fc:9b:97:a6:ff:9c:59:c8:bf:51:ab:7f:
d7:3f:6d:99:95:1d:b7:6e:57:bd:47:3e:3c:88:26:
72:22:21:f0:f0:a3:7f:db:45:b7:24:5b:21:87:6d:
cc:f1:08:60:bf:2b:33:d6:7b:dd:9b:03:d0:ef:c7:
79:67:e5:4b:ae:b8:63:83:50:af:f2:1d:d6:37:69:
94:c1:e7:44:2d:fc:8f:0f:06:52:d5:fb:de:2d:6b:
9a:74:0b:f0:bd:57:3d:07:ea:a6:87:ae:07:69:aa:
ee:08:22:e4:4e:b1:25:fa:b4:4c:c6:0a:fa:42:d4:
c6:3a:34:29:ec:b7:b6:d8:13:93:74:cc:ed:d8:b9:
9a:2b:63:7c:4a:5b:da:28:21:50:ab:b8:09:c9:67:
6b:c1:9b:cb:6f:a9:36:e8:3d:7b:cc:7f:f4:7b:15:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:33:39:7C:54:DC:42:1B:59:02:71:B4:72:06:84:4C:85:2A:1A:D5
X509v3 Authority Key Identifier:
keyid:57:4D:BC:2A:CD:CD:69:86:DC:73:7F:B2:D5:C8:10:39:4C:4C:07:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/V028Ks3NaYbcc3-y1cgQOUxMB00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/V028Ks3NaYbcc3-y1cgQOUxMB00.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30375/MTM5fFTcQhtZAnG0cgaETIUqGtU.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:61c0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:8e:fe:ad:68:df:23:9d:99:f5:fc:0d:9c:f8:5e:3d:fa:1d:
6f:fe:07:aa:ea:6b:3d:22:81:4b:ea:31:29:2d:69:cd:1e:51:
7a:68:bd:88:93:0d:51:88:f3:f4:ac:b5:0e:c4:83:7e:33:be:
44:7a:dc:67:90:c4:0b:47:b2:7f:01:96:52:68:2e:92:65:76:
4d:83:b0:8e:56:bc:a9:45:43:98:19:45:a8:e2:ee:a0:d2:7a:
e3:fa:be:a0:9c:a2:9a:e6:d3:7c:97:23:eb:7c:91:4b:c7:49:
85:25:5e:84:cf:11:48:1e:e2:32:8e:4f:c6:c6:fa:a8:fb:15:
c8:55:6f:b1:2d:bf:4e:df:97:2e:ed:12:79:a6:55:23:c5:6a:
fc:7b:10:83:b9:c2:80:fa:12:44:86:46:7f:54:5b:f3:59:90:
63:b6:54:8e:cd:93:2d:63:81:6f:fc:2c:3a:c9:8b:4e:80:44:
a1:17:32:1e:34:4b:56:3a:4a:35:fd:6b:a2:2c:60:9c:63:de:
4a:f8:70:35:e8:77:18:44:ba:5d:b6:38:a0:8a:1c:41:a0:d1:
d8:a3:54:3e:f1:13:92:02:3a:be:82:ce:e9:5a:e4:77:40:4c:
1f:7c:45:5f:a6:f9:32:4c:9a:16:3d:18:86:ec:54:7c:66:e5:
3d:be:49:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:20 2026 by rpki-client