
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/L4QzvvcldD6jmFlyUYeHtK37xG0.roa
File: L4QzvvcldD6jmFlyUYeHtK37xG0.roa (raw, json)
Hash identifier: 0eYEDUUhfMJQBTxAl5qziJMYtf6fjNyaMbykqUb0CPM=
Subject key identifier: 2F:84:33:BE:F7:25:74:3E:A3:98:59:72:51:87:87:B4:AD:FB:C4:6D
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 0157
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/L4QzvvcldD6jmFlyUYeHtK37xG0.roa
Signing time: Tue 31 Mar 2026 07:30:26 +0000
ROA not before: Tue 31 Mar 2026 07:30:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9607
IP address blocks: 211.14.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Mar 31 07:30:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2F8433BEF725743EA3985972518787B4ADFBC46D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:4c:ed:e1:69:50:e6:dc:bd:3d:42:46:06:
6f:fe:fc:f3:14:dc:c5:c0:a6:db:4b:db:dc:b3:d5:
3d:19:b7:f9:c6:43:40:11:05:17:36:b4:6a:5b:b1:
ac:86:c7:13:fe:c2:8b:74:7e:78:2d:9b:86:db:df:
c0:cd:31:94:0c:43:54:be:9a:da:56:41:26:07:03:
5a:16:3a:d3:31:b7:52:c0:a5:16:d0:2b:9e:7d:e9:
64:ef:ed:ed:8b:37:26:73:ee:20:cb:6f:f9:41:a5:
e4:af:0c:09:c3:9d:8c:c8:7b:5a:c6:64:b5:96:3a:
66:a2:7e:8c:ae:9e:09:18:32:80:2b:84:a5:ac:93:
f5:eb:52:51:8e:87:2b:2a:a1:12:b5:b1:0d:ac:3a:
ed:e7:28:16:c0:e7:f8:64:1f:b5:8b:fc:f9:45:d3:
9c:c2:40:42:f4:b9:36:85:4c:7c:97:cf:7d:2d:1d:
48:bb:70:d5:59:4c:18:e8:10:22:e6:af:ee:34:84:
81:5a:1a:0c:9f:bb:b2:4f:89:aa:a7:43:ad:33:bc:
11:a9:21:38:e6:76:ca:15:83:79:28:15:84:fe:d9:
10:72:45:c9:b8:dd:1f:09:54:28:74:85:4d:20:ba:
73:1f:94:3b:74:4d:25:7e:fc:49:26:59:6c:33:83:
c8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:84:33:BE:F7:25:74:3E:A3:98:59:72:51:87:87:B4:AD:FB:C4:6D
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/L4QzvvcldD6jmFlyUYeHtK37xG0.roa
sbgp-ipAddrBlock: critical
IPv4:
211.14.30.0/23
Signature Algorithm: sha256WithRSAEncryption
15:bf:2c:51:c4:6a:15:3b:67:8b:3e:be:54:a2:09:a2:12:15:
5b:1b:e5:b7:48:14:b4:ba:8d:a4:c4:bc:12:87:0e:75:19:1f:
83:27:9c:70:b8:80:90:fc:aa:3b:ec:fb:a9:c6:38:47:09:d8:
07:a7:dc:05:8f:5b:86:53:d2:72:17:ec:96:67:4d:29:45:e4:
2d:d9:f1:b2:55:96:e5:ba:37:3a:fa:0f:62:33:81:d8:53:a7:
ff:dc:cc:13:86:cc:49:90:79:7e:1f:2d:98:81:f6:ce:31:c4:
20:e3:87:2d:67:eb:09:32:d1:a9:da:c9:dc:44:33:0f:3a:4c:
fd:93:77:e0:5e:53:5e:96:a4:a9:12:72:be:b4:a7:ff:f1:8d:
1c:16:cd:43:a5:d3:06:7e:f0:88:57:07:6e:68:5a:51:67:49:
dc:7c:7f:b4:46:08:c0:31:7a:f5:2a:8f:cd:bf:08:7a:7a:19:
5c:75:0f:90:85:e2:5f:6a:34:92:e0:a3:95:26:98:e1:5b:97:
5e:a8:9a:6c:9d:04:3a:58:01:e4:52:7e:b2:0e:49:24:99:6a:
ff:0e:eb:26:7a:c4:2e:24:a6:06:d2:5a:f1:f0:c4:ab:a2:49:
35:e2:03:b3:06:d3:3e:a9:47:49:6f:f3:ad:46:7f:21:96:ed:
5e:48:9d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:32 2026 by rpki-client