
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39061/XLKXElO0L2Lg1XrTzLa96WDbVyc.roa
File: XLKXElO0L2Lg1XrTzLa96WDbVyc.roa (raw, json)
Hash identifier: XWzLjtQ8K2c5jfQrdG+GJal4XqyokwwtRPc4vMfBXHM=
Subject key identifier: 5C:B2:97:12:53:B4:2F:62:E0:D5:7A:D3:CC:B6:BD:E9:60:DB:57:27
Certificate issuer: /CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
Certificate serial: 3C
Authority key identifier: F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/XLKXElO0L2Lg1XrTzLa96WDbVyc.roa
Signing time: Tue 31 Mar 2026 08:18:18 +0000
ROA not before: Tue 31 Mar 2026 08:18:18 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131948
IP address blocks: 2001:df0:2440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
Validity
Not Before: Mar 31 08:18:18 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5CB2971253B42F62E0D57AD3CCB6BDE960DB5727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:72:e1:bc:86:e7:ef:55:8a:4e:24:20:70:
33:58:2c:76:35:96:83:21:fb:55:85:c1:23:9c:fb:
d0:72:91:15:5a:a9:4c:f1:4a:d0:85:7a:86:62:ca:
01:a5:35:f4:66:26:3d:d6:eb:c4:9d:ed:46:fa:4e:
52:9b:8d:41:26:10:ab:94:da:32:95:64:4f:95:f1:
17:f9:85:88:89:d4:3e:47:4b:51:1d:c4:4d:9a:7e:
e1:28:46:56:f2:9d:1f:93:8e:f8:5d:71:b2:0a:ce:
0b:5e:96:04:7b:32:6e:a4:32:25:b7:8f:2c:83:e0:
3a:20:d6:d5:77:8f:69:22:7f:ef:d9:3c:a1:98:a7:
61:33:7f:1b:05:12:ec:a2:45:9b:a2:96:4c:15:d0:
c3:52:85:2b:29:e7:7f:32:71:73:54:92:4c:d4:91:
12:9f:db:58:16:a6:6f:06:e6:77:4c:a1:bb:0d:ae:
86:7a:55:e2:b7:37:8a:79:ed:61:e3:6f:7d:5e:46:
a9:c3:54:3d:81:01:51:a2:d2:05:a1:e8:40:06:7f:
8f:e8:84:92:b0:14:6d:b2:e9:b8:83:0c:72:18:d5:
d4:9c:75:b1:53:df:85:05:18:42:d9:49:ca:89:1e:
98:4c:6d:20:77:67:f5:c0:11:11:cc:74:52:fb:8e:
8a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:97:12:53:B4:2F:62:E0:D5:7A:D3:CC:B6:BD:E9:60:DB:57:27
X509v3 Authority Key Identifier:
keyid:F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/XLKXElO0L2Lg1XrTzLa96WDbVyc.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df0:2440::/48
Signature Algorithm: sha256WithRSAEncryption
00:bb:f9:68:45:45:ae:55:22:09:87:e9:79:fb:9d:a8:44:61:
bc:bb:71:e4:78:5c:9e:0e:cf:30:56:8e:9a:e8:73:42:66:ab:
a7:a6:50:93:a4:79:a6:9c:60:15:38:ba:73:34:63:1e:e4:c2:
a6:63:a9:ca:84:90:34:ad:35:b4:49:6d:d7:70:37:8a:34:de:
60:20:bb:c1:38:4c:33:a5:03:e1:59:fe:e7:9f:74:bd:43:7f:
c6:59:69:a9:fa:60:b9:b6:f5:f1:fc:fd:b3:f8:eb:19:a4:30:
e4:7d:b8:f2:ad:0b:3d:ba:60:6d:99:54:f5:59:b6:45:3b:cc:
c8:6e:35:cb:d8:99:dc:dc:75:a1:1f:37:a6:aa:b0:4d:0c:26:
ad:38:85:65:51:57:38:f6:aa:be:30:f5:eb:10:48:0b:8c:d4:
ce:5d:55:1e:19:01:3e:ab:bf:68:d0:db:ec:7d:cc:6c:cb:79:
a9:8f:be:30:c7:b1:7a:58:ca:81:41:82:69:10:24:0d:e4:af:
d0:8d:ec:ac:86:74:6c:35:9d:7b:d1:8a:37:a0:82:58:6c:00:
04:b2:20:09:eb:c5:4f:4b:30:91:63:6f:10:83:6c:30:26:4f:
7e:40:64:c0:1f:cf:db:2a:94:99:87:d6:d6:ea:b1:c9:71:9a:
2d:ca:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:10 2026 by rpki-client