
$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/fZQRz8UEmndaWZSVtynyCvYEjUU.roa
File: fZQRz8UEmndaWZSVtynyCvYEjUU.roa (raw, json)
Hash identifier: ty1imKAvaZjtEMzQtxdRsEOh9u4e+mVxpNw75v7oCDI=
Subject key identifier: 7D:94:11:CF:C5:04:9A:77:5A:59:94:95:B7:29:F2:0A:F6:04:8D:45
Certificate issuer: /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial: 59
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/fZQRz8UEmndaWZSVtynyCvYEjUU.roa
Signing time: Thu 20 Aug 2026 09:44:52 +0000
ROA not before: Thu 20 Aug 2026 09:44:52 +0000
ROA not after: Sun 15 Aug 2027 01:30:02 +0000
asID: 2516
IP address blocks: 2001:268::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Validity
Not Before: Aug 20 09:44:52 2026 GMT
Not After : Aug 15 01:30:02 2027 GMT
Subject: CN=7D9411CFC5049A775A599495B729F20AF6048D45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:37:6e:47:a2:f2:dd:db:aa:b2:4e:68:f2:
c6:61:1c:f0:cd:a7:e0:7d:72:fb:e5:1a:52:77:26:
71:43:5d:27:95:f3:fd:90:fe:e3:ab:8c:8c:e1:1c:
b7:ce:03:9d:06:10:ad:80:6a:6f:fd:46:8b:98:ae:
13:e1:a2:0f:c2:b6:d5:85:75:cd:33:f9:72:4b:7b:
c4:aa:ce:44:d6:d9:66:1d:0b:8f:01:b3:2e:de:8f:
09:12:85:e2:ed:e4:06:78:0e:8e:c4:7d:fb:14:2d:
31:5b:25:cc:ea:e2:36:34:6d:55:57:b1:a6:db:e7:
53:b2:7f:bf:00:62:ff:d2:55:a4:f9:c6:c1:b4:72:
2b:2c:d2:fe:f7:2e:66:a9:1f:a0:e6:7c:c2:05:16:
47:91:69:33:08:e4:44:a8:b9:59:7b:f6:c6:17:21:
bb:e0:65:dd:b2:7a:4e:cd:92:76:ad:b4:ec:2f:24:
24:78:da:89:d8:94:57:dd:e6:b0:3c:b7:c3:82:4e:
4c:cf:9a:f1:b6:61:ba:64:36:be:93:71:b1:34:d0:
9d:5e:85:28:55:26:e8:b7:e9:59:0e:8c:df:7e:9d:
43:ca:8c:00:f0:d4:57:15:4b:50:72:0b:0a:09:1f:
5e:28:2c:e7:95:5c:a8:69:5b:59:3b:8f:cf:72:f2:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:94:11:CF:C5:04:9A:77:5A:59:94:95:B7:29:F2:0A:F6:04:8D:45
X509v3 Authority Key Identifier:
keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/fZQRz8UEmndaWZSVtynyCvYEjUU.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:268::/32
Signature Algorithm: sha256WithRSAEncryption
30:47:87:b9:45:a5:5a:44:b5:07:72:9a:2b:09:c1:fb:0d:a6:
01:b4:56:d6:8b:d5:87:15:32:8d:a8:f6:c4:6a:82:8f:be:78:
4e:ab:5a:bc:a8:f0:9f:3e:c7:17:28:11:ab:12:ed:ed:16:4a:
f0:57:4e:3c:0c:4e:30:44:bd:fd:db:39:39:3a:9e:c7:d8:39:
98:bc:67:9f:44:8f:41:15:68:36:fa:c4:06:2b:af:c5:87:e0:
1a:cc:d6:c7:e5:c2:24:be:02:0a:cf:87:76:7d:24:57:80:e0:
f7:20:d3:47:f2:11:02:2e:74:9a:1c:16:17:7a:7e:37:7c:14:
68:4d:62:a3:6d:85:0b:b8:38:0c:e5:99:41:1e:a0:d0:6e:ab:
7b:0b:42:53:3e:8c:e7:32:6c:07:23:be:e0:39:b8:d4:6c:d6:
59:05:f0:62:17:07:be:c6:93:7e:46:42:95:90:c7:aa:a0:15:
05:11:6e:26:76:59:e4:96:24:f4:5d:b0:f4:ec:94:c8:c5:91:
52:ec:9b:af:8e:4b:68:99:3a:65:f2:8c:ba:52:42:7b:a2:55:
42:0c:35:3f:43:cd:20:d5:70:d7:f4:50:7d:49:e1:2c:ed:f7:
63:59:d7:28:7f:51:89:97:dd:6d:7e:25:f5:37:2a:a9:87:54:
b4:8b:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:53:14 2026 by rpki-client