
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30443/KqChVdblZJCIpn_NETK3OU9CttE.roa
File: KqChVdblZJCIpn_NETK3OU9CttE.roa (raw, json)
Hash identifier: 7r/9x6SaaXH1RG5cpoo9/7PLReoSs/J3ojThcOZ/D98=
Subject key identifier: 2A:A0:A1:55:D6:E5:64:90:88:A6:7F:CD:11:32:B7:39:4F:42:B6:D1
Certificate issuer: /CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491
Certificate serial: 19
Authority key identifier: DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/KqChVdblZJCIpn_NETK3OU9CttE.roa
Signing time: Tue 31 Mar 2026 08:45:38 +0000
ROA not before: Tue 31 Mar 2026 08:45:38 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2401:d0a0:4000::/34 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491
Validity
Not Before: Mar 31 08:45:38 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2AA0A155D6E5649088A67FCD1132B7394F42B6D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c6:07:d9:0f:a4:cf:b3:6d:cd:3f:b5:2b:b0:
8d:bc:d0:cf:b5:8d:e2:1c:ed:dc:c4:89:4d:5f:6c:
cd:bf:b9:db:f7:75:5c:98:46:4a:34:31:71:3a:de:
4a:df:05:2d:66:09:ee:bb:52:7e:34:e8:64:11:7a:
88:fc:0a:f7:4c:7c:f1:4f:12:22:01:fc:e2:cf:79:
e3:da:9c:d6:1a:66:5f:31:9f:b9:b8:55:df:58:33:
bb:ca:3b:6f:9d:f0:d7:8a:00:84:e5:8c:db:b4:b8:
43:c3:45:c9:1b:73:2e:d8:21:0a:2a:ce:1a:98:e0:
61:d0:aa:33:91:56:cc:3a:90:6f:c1:e9:de:93:99:
41:f0:b3:cb:04:d3:09:2c:b3:25:15:a8:95:bd:bf:
68:c0:90:ec:6f:25:a1:55:29:a3:a0:39:50:7a:a1:
43:32:3d:b0:7d:a0:89:40:76:09:e4:38:e1:d5:82:
6e:91:fd:0d:bd:c5:43:9c:16:73:10:26:77:36:12:
b8:c0:e9:14:2f:86:ac:80:97:92:ec:81:34:2e:fc:
95:f0:1e:f7:e8:81:aa:17:34:a0:58:da:51:78:20:
73:40:48:01:56:20:5d:fe:82:77:e7:3b:44:4b:4c:
9d:45:34:06:49:bf:09:42:e0:e6:99:64:56:76:c7:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:A1:55:D6:E5:64:90:88:A6:7F:CD:11:32:B7:39:4F:42:B6:D1
X509v3 Authority Key Identifier:
keyid:DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/KqChVdblZJCIpn_NETK3OU9CttE.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:d0a0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
55:e4:ab:1f:6b:11:23:ba:59:a0:44:a9:81:4f:b8:e8:23:83:
c9:02:73:28:53:93:f2:e5:ce:57:09:42:a8:ef:14:86:77:af:
b7:eb:04:03:28:dd:4e:98:54:8a:27:33:64:25:1b:2a:d9:74:
aa:16:ca:de:be:85:d1:77:71:69:19:45:62:cb:36:fd:e9:d1:
90:20:6c:d5:dd:35:38:97:0f:55:24:3b:fa:11:77:9d:29:b0:
41:12:bf:e9:59:54:11:a9:75:f4:6f:24:47:d4:1a:bd:0d:18:
ce:ed:67:9e:3d:89:d0:a4:8b:87:19:ae:98:67:3f:8e:c2:e3:
4e:9c:4c:20:1e:3a:6e:f8:e4:bc:ed:ab:e5:e3:14:f0:ef:f0:
90:d2:e9:11:59:73:88:9b:1b:2b:b9:61:69:df:6f:0d:82:f3:
0b:5a:2d:c4:9e:3c:18:5b:f5:c9:c8:3a:0d:27:e7:11:ed:d3:
64:75:66:5d:13:23:fe:05:0d:4b:08:84:b2:61:bf:d1:ca:67:
9a:5f:7d:62:a0:44:8a:71:77:a2:52:f3:91:3d:b8:58:71:21:
a3:45:82:cb:a4:d3:04:29:60:e3:09:b8:c2:f8:36:60:b6:8b:
78:e7:37:9e:28:9a:e0:8f:fa:8f:a5:37:a0:5b:08:66:8e:8b:
09:5b:b3:e3
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQUY4
REEwQ0VCOUE0QTRFNjYzN0Q2MTlBRTRFNzEyREE5MUFGNDkxMB4XDTI2MDMzMTA4
NDUzOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMkFBMEExNTVENkU1NjQ5
MDg4QTY3RkNEMTEzMkI3Mzk0RjQyQjZEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOjGB9kPpM+zbc0/tSuwjbzQz7WN4hzt3MSJTV9szb+52/d1XJhG
SjQxcTreSt8FLWYJ7rtSfjToZBF6iPwK90x88U8SIgH84s9549qc1hpmXzGfubhV
31gzu8o7b53w14oAhOWM27S4Q8NFyRtzLtghCirOGpjgYdCqM5FWzDqQb8Hp3pOZ
QfCzywTTCSyzJRWolb2/aMCQ7G8loVUpo6A5UHqhQzI9sH2giUB2CeQ44dWCbpH9
Db3FQ5wWcxAmdzYSuMDpFC+GrICXkuyBNC78lfAe9+iBqhc0oFjaUXggc0BIAVYg
Xf6Cd+c7REtMnUU0Bkm/CULg5plkVnbH3DkCAwEAAaOCAd8wggHbMB0GA1UdDgQW
BBQqoKFV1uVkkIimf80RMrc5T0K20TAfBgNVHSMEGDAWgBTa+NoM65pKTmY31hmu
TnEtqRr0kTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NDMvMnZqYURPdWFTazVtTjlZWnJrNXhMYWthOUpFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMnZqYURPdWFTazVtTjlZWnJrNXhM
YWthOUpFLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDQzL0txQ2hWZGJsWkpDSXBuX05FVEszT1U5Q3R0RS5yb2Ew
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYkAdCgQDANBgkqhkiG9w0BAQsF
AAOCAQEAVeSrH2sRI7pZoESpgU+46CODyQJzKFOT8uXOVwlCqO8Uhnevt+sEAyjd
TphUiiczZCUbKtl0qhbK3r6F0XdxaRlFYss2/enRkCBs1d01OJcPVSQ7+hF3nSmw
QRK/6VlUEal19G8kR9QavQ0Yzu1nnj2J0KSLhxmumGc/jsLjTpxMIB46bvjkvO2r
5eMU8O/wkNLpEVlziJsbK7lhad9vDYLzC1otxJ48GFv1ycg6DSfnEe3TZHVmXRMj
/gUNSwiEsmG/0cpnml99YqBEinF3olLzkT24WHEho0WCy6TTBClg4wm4wvg2YLaL
eOc3niia4I/6j6U3oFsIZo6LCVuz4w==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:19 2026 by rpki-client