
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30454/vfHzIxtHWJFV0z_7FI0WJg6ZfQw.roa
File: vfHzIxtHWJFV0z_7FI0WJg6ZfQw.roa (raw, json)
Hash identifier: K4nzOVc9YBg1V4KH60RAkQ+fYDoirOn3EtVAftJJPQo=
Subject key identifier: BD:F1:F3:23:1B:47:58:91:55:D3:3F:FB:14:8D:16:26:0E:99:7D:0C
Certificate issuer: /CN=61F3D1AA19F49E6C8B8BDE2B37B58EFB54904500
Certificate serial: 04
Authority key identifier: 61:F3:D1:AA:19:F4:9E:6C:8B:8B:DE:2B:37:B5:8E:FB:54:90:45:00
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/vfHzIxtHWJFV0z_7FI0WJg6ZfQw.roa
Signing time: Tue 31 Mar 2026 08:48:56 +0000
ROA not before: Tue 31 Mar 2026 08:48:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 152877
IP address blocks: 2402:4ee0::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61F3D1AA19F49E6C8B8BDE2B37B58EFB54904500
Validity
Not Before: Mar 31 08:48:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BDF1F3231B47589155D33FFB148D16260E997D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:6c:00:85:94:60:d7:3d:2a:95:2d:50:9b:
89:6b:07:1e:30:1d:6a:67:bf:7c:4d:ce:f4:fc:70:
f0:d0:9e:60:96:99:bd:28:28:42:71:2f:2e:37:7b:
4a:9a:80:79:c1:a1:59:82:21:cd:18:85:37:90:76:
91:b2:ea:3d:37:c2:b0:a8:62:5b:d5:4c:df:16:fe:
31:69:ad:9d:2b:0d:3e:76:9e:3c:c1:34:9a:94:ec:
3d:5c:fb:05:62:3e:1d:8d:e0:b0:90:45:42:c4:ea:
2b:8d:35:0c:e9:57:9e:20:2a:1d:a0:cc:0f:bc:20:
29:68:82:d2:7f:4d:f3:7e:df:01:56:44:1e:84:48:
a8:af:d8:aa:a9:ac:cf:cf:e2:b8:66:b1:aa:bb:eb:
40:c8:dc:09:c5:ce:45:53:96:88:bd:b0:df:02:25:
fa:d1:2a:9a:1c:8a:e1:39:d7:c5:9d:be:96:20:32:
b1:9b:14:7b:40:37:10:fa:b2:f2:8a:24:13:fb:1b:
61:08:0f:17:33:9b:84:2c:9d:bb:61:9c:6c:c6:1b:
73:8a:a7:06:b5:3d:01:38:ee:43:12:ae:43:a8:34:
dc:99:32:86:69:01:3c:8f:21:5c:b7:43:e0:49:55:
70:8c:80:37:76:ed:c8:4b:a0:92:61:4a:36:83:22:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:F3:23:1B:47:58:91:55:D3:3F:FB:14:8D:16:26:0E:99:7D:0C
X509v3 Authority Key Identifier:
keyid:61:F3:D1:AA:19:F4:9E:6C:8B:8B:DE:2B:37:B5:8E:FB:54:90:45:00
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/vfHzIxtHWJFV0z_7FI0WJg6ZfQw.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:4ee0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:09:cd:dd:96:06:58:67:3c:eb:4f:d7:bc:e0:d8:ba:0c:e9:
88:40:9b:9c:ee:fc:f3:fc:5a:1b:cb:95:ec:28:20:b2:9a:8c:
43:3b:6f:59:89:ca:a1:a4:f2:59:b8:14:e2:e3:0d:6c:85:b9:
1f:3e:39:e6:a7:76:95:2c:d1:5c:3f:b4:bd:0e:91:a9:f6:80:
4a:fb:05:24:81:7d:95:7c:60:bd:95:fd:20:65:c5:5f:da:c2:
13:9c:72:22:55:8d:ee:12:d8:b3:65:26:69:13:11:ea:74:a5:
e8:e4:43:f3:96:69:52:13:a0:53:ae:1a:0b:14:8b:bd:b9:8b:
c3:d1:49:b1:59:17:29:bf:83:c9:e4:41:73:5a:f8:df:5f:f0:
5d:b9:7c:3e:2e:99:c6:24:ce:4c:de:b0:4f:77:22:03:61:0d:
4a:a3:a2:2b:6c:8b:ff:79:5c:82:dd:e0:77:34:9f:c8:4d:c7:
d9:f7:71:48:fb:ee:7c:08:74:ca:6b:bb:0f:b5:2f:e1:ac:37:
41:04:cb:e5:84:2c:2f:1b:0d:02:e4:bf:36:a4:9c:df:21:5e:
98:2c:3d:13:51:30:a3:0f:cf:98:81:52:4f:7d:5a:d6:7c:a1:
08:74:a3:8d:22:74:0e:95:36:37:9e:05:09:45:8c:66:ed:da:
70:6b:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:34:01 2026 by rpki-client