
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30424/pWcapu_Cvw1UyU-7C6iSAJsCXCc.roa
File: pWcapu_Cvw1UyU-7C6iSAJsCXCc.roa (raw, json)
Hash identifier: yJ4/I3fy9kNf8BxBiGm7V5rk0LvNxDjTGqAl+m+fqoQ=
Subject key identifier: A5:67:1A:A6:EF:C2:BF:0D:54:C9:4F:BB:0B:A8:92:00:9B:02:5C:27
Certificate issuer: /CN=452C90B8EB6AA8142ADC8038EE66B271638D1059
Certificate serial: 14
Authority key identifier: 45:2C:90:B8:EB:6A:A8:14:2A:DC:80:38:EE:66:B2:71:63:8D:10:59
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/pWcapu_Cvw1UyU-7C6iSAJsCXCc.roa
Signing time: Tue 31 Mar 2026 08:45:43 +0000
ROA not before: Tue 31 Mar 2026 08:45:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 63805
IP address blocks: 2401:1b20::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452C90B8EB6AA8142ADC8038EE66B271638D1059
Validity
Not Before: Mar 31 08:45:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A5671AA6EFC2BF0D54C94FBB0BA892009B025C27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:f9:09:a6:71:b1:6f:2f:be:39:fe:86:82:
21:29:79:fc:c4:0b:bb:25:98:61:f4:43:52:1e:41:
07:cd:ac:30:07:7d:b8:01:0e:16:a9:a9:03:26:60:
64:c7:f2:d6:ae:24:5c:d6:1f:77:c4:1d:91:7c:bb:
1b:9d:32:fb:5c:89:f6:17:62:b9:12:e8:eb:05:3f:
f3:0e:c0:ca:e7:d8:3d:bf:5f:3c:47:69:b9:cd:ff:
fa:21:6d:45:fc:fe:e2:da:e3:46:3e:b8:5f:de:d2:
27:16:f5:a5:be:6b:7e:24:0b:98:04:d1:8d:35:26:
bd:b8:9f:14:6f:07:c2:7a:c3:64:a3:9c:37:31:e6:
b9:ea:ee:bc:61:81:8d:95:a1:8c:4d:3b:ab:f1:29:
83:dc:d7:c8:c0:41:2f:aa:ad:47:83:97:98:74:97:
7c:fd:e5:bd:e3:69:d6:2f:18:54:74:7e:35:bf:08:
28:ee:6f:87:4f:d3:d8:08:75:77:8b:0a:7a:27:4d:
a8:8f:e6:a3:54:f5:7b:01:33:a7:08:4b:70:7a:01:
f0:0c:c5:4e:97:08:a9:b4:4e:5f:f3:4e:03:2e:07:
ce:33:26:9d:86:d7:8c:69:ab:7c:ca:4f:29:df:a5:
49:21:73:53:78:1a:2c:5a:3e:79:cf:60:b9:50:3c:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:1A:A6:EF:C2:BF:0D:54:C9:4F:BB:0B:A8:92:00:9B:02:5C:27
X509v3 Authority Key Identifier:
keyid:45:2C:90:B8:EB:6A:A8:14:2A:DC:80:38:EE:66:B2:71:63:8D:10:59
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/RSyQuOtqqBQq3IA47maycWONEFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RSyQuOtqqBQq3IA47maycWONEFk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30424/pWcapu_Cvw1UyU-7C6iSAJsCXCc.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:1b20::/32
Signature Algorithm: sha256WithRSAEncryption
9a:71:6d:b5:5a:ae:26:d8:51:2c:2d:33:07:99:b8:c4:9d:c9:
78:3f:05:f2:b4:52:6e:82:85:cc:db:71:1d:4b:d1:28:cc:32:
0d:c0:d2:20:1a:34:9b:18:ee:7d:c7:21:b1:53:d5:c1:e7:26:
20:e1:ba:56:24:f4:d3:14:8b:98:fc:08:f5:a7:83:0f:af:72:
f3:b5:54:52:6f:bf:8f:72:1a:5a:26:b7:a3:99:4a:01:1a:6c:
4c:cf:2e:29:a3:eb:68:51:31:eb:be:0f:f8:d7:34:a0:7f:2f:
4a:e5:e0:f2:af:30:c9:ed:0a:9d:17:94:99:9b:65:74:43:fc:
1b:32:6e:d1:38:58:e8:e0:3b:23:9f:a0:33:da:50:82:aa:85:
f9:35:f7:3e:5d:10:91:41:22:39:e4:c8:7c:9a:e9:68:70:37:
b2:35:b7:f7:72:5e:86:eb:aa:ca:e0:2e:40:90:9a:2b:e8:ce:
ee:82:fe:bd:58:a9:27:d4:c8:e6:98:18:7f:67:c9:1c:ae:82:
12:10:dd:71:d7:c6:35:f4:85:cb:33:ae:79:a2:2d:4f:f5:7a:
da:cc:96:16:a8:a9:8a:90:b8:69:9e:0d:b2:49:05:7f:da:f2:
5a:1b:41:7b:82:bd:53:cd:2e:29:d5:38:fd:37:4e:68:2d:7b:
09:28:82:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:48 2026 by rpki-client