
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30443/I6I5TZC2jeES-EFnY31PEmJQWK8.roa
File: I6I5TZC2jeES-EFnY31PEmJQWK8.roa (raw, json)
Hash identifier: 2HFpCttjo0wnU05QZZZD9fPfl+gRW4XgLzSOtJm4yc0=
Subject key identifier: 23:A2:39:4D:90:B6:8D:E1:12:F8:41:67:63:7D:4F:12:62:50:58:AF
Certificate issuer: /CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491
Certificate serial: 18
Authority key identifier: DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/I6I5TZC2jeES-EFnY31PEmJQWK8.roa
Signing time: Tue 31 Mar 2026 08:45:38 +0000
ROA not before: Tue 31 Mar 2026 08:45:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131973
IP address blocks: 2401:d0a0::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491
Validity
Not Before: Mar 31 08:45:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=23A2394D90B68DE112F84167637D4F12625058AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:65:3f:54:76:89:38:9b:cc:7a:ae:8b:fc:4e:
c2:5a:7a:9f:a3:6f:72:d9:6a:6f:3c:eb:96:bd:9f:
e2:bf:07:d9:ff:3a:d1:3d:f3:ad:69:88:d7:58:fc:
76:bd:56:0a:6e:b9:8a:85:61:c7:f6:f0:89:f5:3c:
e8:c9:b7:06:c9:50:e6:09:be:e7:f5:e9:0c:48:7b:
4e:0a:b6:93:0b:f6:78:38:bc:48:c5:fe:6c:78:ed:
61:f3:54:7b:12:31:c9:9d:ae:1c:27:d9:e5:8d:c1:
aa:50:6f:26:35:20:6c:f6:ad:37:58:f2:7a:99:eb:
11:04:7d:f9:7f:07:30:e8:d1:c0:46:cd:d0:99:a1:
b1:8f:e4:ec:74:d1:06:c2:0c:b9:24:ff:84:0b:cf:
e1:84:a6:17:2d:8a:ee:db:66:02:00:31:b3:1b:b1:
1d:f0:be:f0:25:e9:8a:ad:3b:4d:00:82:4c:86:a0:
76:0d:7f:0a:61:66:af:4f:7c:b8:cc:98:3a:73:28:
65:ac:96:a4:a8:47:c0:3b:06:0e:25:79:d4:c1:38:
23:2e:be:f0:0f:33:5c:98:bb:bc:fc:3d:68:e5:f3:
98:58:d3:53:e0:d1:9e:f9:95:63:32:f0:63:38:68:
95:55:71:cc:79:13:71:52:64:c7:83:ce:67:e2:6a:
1d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A2:39:4D:90:B6:8D:E1:12:F8:41:67:63:7D:4F:12:62:50:58:AF
X509v3 Authority Key Identifier:
keyid:DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/I6I5TZC2jeES-EFnY31PEmJQWK8.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:d0a0::/34
Signature Algorithm: sha256WithRSAEncryption
67:bd:ee:17:e6:7c:e3:55:ae:19:30:b9:bc:36:06:76:ed:b9:
41:46:30:c7:0e:5c:4b:75:43:b5:78:9c:46:68:a2:76:c8:3b:
89:19:a0:57:14:69:0b:64:a1:ef:f3:46:c1:92:ae:37:f5:e6:
ce:06:a8:f0:6b:06:7c:db:47:c9:f8:a5:7b:67:dd:8e:78:d4:
92:72:c2:67:f6:9a:73:c3:bb:80:8a:f4:8a:35:10:92:f5:87:
61:f9:f5:d2:aa:97:d8:19:fe:09:0e:df:62:c8:7a:3f:37:c7:
9c:ac:ef:da:ba:c4:c7:c1:4e:61:ca:2a:8e:3e:be:d8:12:cd:
c3:6f:98:09:35:3b:e7:74:86:4e:6d:9f:06:20:da:12:28:f0:
b0:79:8f:51:ad:57:ec:6b:54:7d:e3:9f:5e:43:2c:b9:42:b4:
95:93:ff:22:5c:bc:6f:c5:17:ed:dd:0a:4f:76:ee:09:72:6e:
6c:5d:54:ca:a2:34:c7:8b:cf:56:f2:c0:54:49:4a:0b:25:f4:
38:3e:84:35:f3:ed:aa:98:c8:82:8d:ae:89:1d:b0:27:36:8b:
a8:d4:39:39:c3:fb:c9:7c:9e:a1:5b:44:0f:bd:a4:d9:4a:e4:
a7:47:61:68:53:a5:0d:28:c8:f1:7e:32:4b:f3:12:03:26:32:
05:63:d4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:48 2026 by rpki-client