
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30381/kq2-rcUj-SjqIiD9sTq3lEWtUeA.roa
File: kq2-rcUj-SjqIiD9sTq3lEWtUeA.roa (raw, json)
Hash identifier: tnPlIQIOYGvMzjkWIfYsdsZ7IGfD+KZvCWwmmi1tfrQ=
Subject key identifier: 92:AD:BE:AD:C5:23:F9:28:EA:22:20:FD:B1:3A:B7:94:45:AD:51:E0
Certificate issuer: /CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149
Certificate serial: 37
Authority key identifier: 79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/kq2-rcUj-SjqIiD9sTq3lEWtUeA.roa
Signing time: Tue 31 Mar 2026 08:24:50 +0000
ROA not before: Tue 31 Mar 2026 08:24:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131988
IP address blocks: 2407:b0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149
Validity
Not Before: Mar 31 08:24:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=92ADBEADC523F928EA2220FDB13AB79445AD51E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:eb:50:29:35:d0:52:df:6b:21:d9:d0:45:
8d:e7:44:6d:86:4c:0f:eb:f1:72:15:16:b5:81:37:
73:3a:04:b2:ae:73:45:20:b6:b1:45:d3:47:00:14:
de:8b:b8:07:82:b8:f5:7b:b9:3a:20:f1:47:3d:49:
3f:15:bd:06:e2:cc:dc:6a:ff:a5:b8:df:67:d4:aa:
8f:5d:c8:a7:60:fb:50:b2:35:87:df:b9:44:79:85:
92:0c:01:1b:ab:32:0d:b5:75:38:cb:49:41:46:cf:
eb:71:f8:f3:65:8f:bc:da:a4:34:ba:86:2b:4f:da:
92:23:82:29:42:ab:31:e9:4f:8a:7e:e9:e4:ac:ee:
fe:80:9a:24:17:18:8d:3c:22:21:d5:37:29:31:0b:
ae:9b:cc:f1:f7:f2:3c:bd:2a:34:6d:69:81:4c:a2:
1d:a0:4d:e2:5e:fb:6a:7d:bd:57:da:56:69:39:82:
8b:d0:95:ad:7f:f8:e6:4f:42:1a:00:d9:4d:57:ef:
ff:6e:19:16:0b:4e:87:d1:aa:1a:17:88:fa:39:e5:
09:cd:21:45:95:66:0e:d5:ce:57:4f:ba:d0:82:be:
cb:af:41:ed:9f:47:80:8b:df:6b:3a:c1:47:fa:14:
75:49:e4:7c:93:6b:09:43:84:85:18:58:07:5b:72:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:BE:AD:C5:23:F9:28:EA:22:20:FD:B1:3A:B7:94:45:AD:51:E0
X509v3 Authority Key Identifier:
keyid:79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/kq2-rcUj-SjqIiD9sTq3lEWtUeA.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:b0c0::/32
Signature Algorithm: sha256WithRSAEncryption
22:ba:52:32:77:70:05:4a:a9:ea:ff:71:44:20:31:d6:ea:3f:
7c:4b:1f:b7:5f:fd:a5:76:fb:fe:1b:29:77:d7:ae:2c:93:fe:
84:ac:82:5d:f6:fd:e7:9a:bb:80:a7:28:c6:c1:e6:e6:e2:67:
ef:c3:16:e9:20:80:41:5c:14:18:10:61:33:eb:61:e7:8e:8f:
e6:71:72:7f:15:ff:25:98:66:5d:b9:f3:cc:db:81:34:23:1d:
eb:8f:e2:67:fd:69:7e:56:8f:23:74:8e:0a:ab:f5:c0:69:dc:
de:bd:13:43:cd:9b:82:fc:70:b4:e4:6b:11:83:f6:a8:37:9e:
3e:ed:ba:ab:e0:9a:b9:64:fc:ca:c9:0c:9d:54:94:ec:32:43:
33:14:52:4b:b9:ba:b4:60:8f:d6:b1:f9:fb:d1:2b:35:39:53:
4a:33:1e:a5:27:70:10:ed:5d:a7:91:2a:c4:d0:fe:29:2d:ab:
0d:0d:57:0c:c5:df:00:f9:86:00:cd:c4:0e:0a:3f:4b:fd:d4:
1f:32:92:c8:9f:36:3c:30:cd:cb:21:37:15:21:02:34:fe:91:
bd:a7:bc:ea:bd:bc:b8:71:cc:91:0d:61:21:ff:ce:fd:fd:30:
09:ef:be:10:19:a9:1b:97:1b:f8:9c:6b:b5:6c:a0:a3:3a:f2:
43:63:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:16 2026 by rpki-client