
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/30tPl69056traOGJH4Ob9nl2keE.roa
File: 30tPl69056traOGJH4Ob9nl2keE.roa (raw, json)
Hash identifier: rkXWLnzAgLJSxPXU0KwalcIuXV74TRLnNkXNl16LCEM=
Subject key identifier: DF:4B:4F:97:AF:74:E7:AB:6B:68:E1:89:1F:83:9B:F6:79:76:91:E1
Certificate issuer: /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial: 58
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/30tPl69056traOGJH4Ob9nl2keE.roa
Signing time: Tue 31 Mar 2026 08:16:15 +0000
ROA not before: Tue 31 Mar 2026 08:16:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 23618
IP address blocks: 117.18.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Validity
Not Before: Mar 31 08:16:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DF4B4F97AF74E7AB6B68E1891F839BF6797691E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:be:2e:09:14:aa:ef:60:11:46:4e:74:c4:
10:d0:3a:9d:bb:c6:71:f6:f1:70:f7:2f:60:bf:1f:
d0:fc:bf:26:c3:40:89:87:13:6e:05:40:c5:44:3b:
9d:4d:7d:20:b4:a7:69:7b:76:45:db:27:ae:ec:4d:
43:42:23:31:f5:ad:f4:41:96:ad:17:02:11:6c:b3:
c7:c9:e5:8f:4b:1f:5a:c0:d6:97:5c:af:98:37:68:
d4:cd:eb:9c:1a:87:a4:aa:bc:d5:f8:dd:ad:51:c1:
15:87:76:b9:7d:f1:78:ac:d4:2b:8f:b1:d0:e6:2f:
36:8d:4e:bc:f8:61:a2:15:99:59:31:16:69:5d:a0:
6a:fa:13:95:ae:a7:4f:be:0e:23:07:8f:04:35:2d:
17:09:c2:4e:3c:7c:79:ca:da:f9:49:8e:de:32:ab:
d3:c6:a2:2e:fe:d7:d4:c7:a5:19:e2:37:bf:86:03:
41:77:e6:a6:a6:61:bc:c1:80:8c:ef:0f:07:36:dd:
19:75:0b:0e:0d:8e:9d:36:b4:fe:44:9e:ee:0d:88:
52:b9:4f:57:b7:3b:93:0c:72:a2:2f:ec:4c:98:aa:
8d:c1:ab:b4:39:92:c9:ce:92:05:d2:7c:4a:07:db:
50:6a:4d:c2:9b:3f:d6:ff:2b:e4:34:61:5f:d0:89:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:4F:97:AF:74:E7:AB:6B:68:E1:89:1F:83:9B:F6:79:76:91:E1
X509v3 Authority Key Identifier:
keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/30tPl69056traOGJH4Ob9nl2keE.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.24.0/21
Signature Algorithm: sha256WithRSAEncryption
52:f3:85:29:d7:aa:34:97:ea:58:e3:fc:21:78:5d:a9:52:66:
3e:55:9c:4e:23:6d:7b:1a:92:f1:d0:2a:da:ab:f9:15:71:b3:
53:9a:b4:1c:f3:b4:23:94:02:74:c1:2f:41:7d:65:50:6f:dd:
46:96:39:a9:29:a1:f7:71:1b:10:95:a1:8f:e2:93:db:16:98:
39:24:3d:2e:7e:74:cb:a9:c5:14:4c:cc:c3:c5:64:a2:b3:e5:
b9:b9:10:34:50:ba:cd:c9:0c:be:bc:fb:a5:dd:72:b4:3a:20:
4a:a9:e5:32:9e:d6:06:59:6e:b2:21:f6:dc:b9:a0:94:79:b4:
85:7b:92:51:45:11:7c:d7:d8:ac:b4:8e:e2:9e:06:77:fa:58:
49:49:af:a0:5c:07:b1:56:92:2d:7e:82:0e:1a:f4:f6:dd:c3:
1d:05:f5:bb:44:bc:fd:2b:04:09:65:7d:1e:fb:ce:2f:85:06:
34:c2:d5:25:62:a4:35:f4:18:de:56:b6:ac:32:84:70:a6:24:
cd:5c:9c:5d:b0:9e:13:54:d2:c9:7d:75:40:01:15:9e:cd:6e:
fb:b8:65:e1:04:fd:23:56:8f:92:02:89:98:34:e6:c4:aa:e2:
67:c5:6c:a6:0d:e1:c9:62:bc:c9:48:d2:24:ea:e6:5f:45:67:
f0:28:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:47 2026 by rpki-client