
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zrCsQi_FsIJ-gQqkesIhOr5-HGE.roa
File: zrCsQi_FsIJ-gQqkesIhOr5-HGE.roa (raw, json)
Hash identifier: rZlvhstVWEDbAhxtDBpJTZWBhzonuekGNeUDD+K0jDM=
Subject key identifier: CE:B0:AC:42:2F:C5:B0:82:7E:81:0A:A4:7A:C2:21:3A:BE:7E:1C:61
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: A9
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zrCsQi_FsIJ-gQqkesIhOr5-HGE.roa
Signing time: Tue 31 Mar 2026 07:48:55 +0000
ROA not before: Tue 31 Mar 2026 07:48:55 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 38631
IP address blocks: 103.2.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Mar 31 07:48:55 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CEB0AC422FC5B0827E810AA47AC2213ABE7E1C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:9c:d3:4d:f3:2b:60:b4:86:6e:8b:f7:0c:
28:88:3d:af:9a:ba:46:eb:92:35:b3:71:a4:f9:cf:
65:c8:eb:47:02:55:d1:1d:45:30:c8:66:9a:df:c2:
ba:fc:c4:61:1b:6e:81:f7:4d:9b:80:8b:da:10:f7:
05:c1:93:81:b7:90:6c:f1:79:6f:e7:3d:1f:eb:ec:
7c:fe:a0:4b:9c:d8:ab:7a:60:a5:11:92:c5:16:12:
6d:6c:84:0a:dd:13:40:d6:7f:b0:99:f0:49:cc:2b:
da:e2:03:15:dd:ce:7f:2e:b0:6d:1c:14:2b:5f:18:
01:ce:98:dc:d1:72:2c:c1:03:8a:79:48:f3:e3:10:
5f:40:17:07:a0:37:0b:4b:79:4b:54:80:a8:ef:5a:
2f:ab:3c:8d:f4:5e:18:6e:6d:f0:bc:f3:50:e5:51:
bc:4b:9f:76:d1:ed:2f:bb:50:90:56:bb:ac:4d:cc:
38:4b:f0:45:5b:91:11:93:29:0c:7f:16:55:a0:db:
28:3b:2d:c6:21:3d:9e:0c:76:45:d0:92:98:ef:37:
12:0e:54:15:13:4a:eb:e2:3f:8a:3d:b0:d9:de:91:
e8:77:0a:82:b5:5a:d6:6e:36:03:73:89:34:8e:5a:
5a:a8:9c:66:d2:0a:43:1b:5d:73:6c:81:fe:d3:16:
bc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:AC:42:2F:C5:B0:82:7E:81:0A:A4:7A:C2:21:3A:BE:7E:1C:61
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zrCsQi_FsIJ-gQqkesIhOr5-HGE.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.30.0/23
Signature Algorithm: sha256WithRSAEncryption
49:de:c4:eb:90:99:2c:33:76:f4:cc:67:36:43:52:78:c2:57:
00:16:5e:50:06:76:1b:a6:43:4d:38:0d:8f:73:e7:f9:69:c5:
81:b7:eb:73:9c:e3:fb:93:d4:59:1c:c8:54:0b:f9:6c:6d:b1:
7d:df:c3:c0:f7:23:1d:a2:02:fd:60:4a:bd:56:15:51:d3:b5:
3c:fe:8e:2e:5e:f3:e6:d2:4b:5f:cb:ea:83:f7:8a:4d:5b:06:
e4:7d:b5:8d:6b:8f:fd:54:9a:ef:70:5a:a8:39:e3:91:c4:c5:
35:06:fc:f9:de:c3:15:ee:9a:41:5f:25:e6:3e:04:31:77:b5:
57:32:dd:4a:1c:38:36:6a:a9:08:37:af:e3:c5:30:f8:58:13:
e1:92:e4:fe:53:ad:38:e0:b4:69:1a:72:6e:db:53:e1:a3:58:
76:77:c2:51:99:63:83:09:e2:bc:3a:d7:f7:82:e8:86:e9:aa:
a1:00:b0:bd:9f:35:e3:a0:8a:10:3b:e4:9e:74:32:61:48:d3:
aa:53:5a:d6:b8:4e:1b:63:7c:a4:49:c3:dc:27:1a:81:5e:8b:
18:13:54:7f:89:fb:30:72:80:9c:af:e8:7e:45:cf:f3:a7:42:
0c:74:98:df:90:ef:8c:d2:61:37:e3:b1:7e:bd:98:3c:ab:68:
4d:78:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 02:07:20 2026 by rpki-client