
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/jjUiO6Vn-kfmqIMSL4Db2qNHKSA.roa
File: jjUiO6Vn-kfmqIMSL4Db2qNHKSA.roa (raw, json)
Hash identifier: J9OFVASw58DHINCVoVKjpqjz19raAE6wWB/fxdzEqTg=
Subject key identifier: 8E:35:22:3B:A5:67:FA:47:E6:A8:83:12:2F:80:DB:DA:A3:47:29:20
Certificate issuer: /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial: 49
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/jjUiO6Vn-kfmqIMSL4Db2qNHKSA.roa
Signing time: Tue 31 Mar 2026 08:14:21 +0000
ROA not before: Tue 31 Mar 2026 08:14:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9617
IP address blocks: 2400:3800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Validity
Not Before: Mar 31 08:14:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=8E35223BA567FA47E6A883122F80DBDAA3472920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:fe:8b:c2:ea:67:73:8a:3b:ec:cd:2e:27:
64:5e:ee:be:68:ef:24:25:48:de:60:b9:62:0b:25:
e2:43:7a:89:20:a2:8b:01:25:d5:ca:27:58:c8:1a:
a9:96:7c:14:61:28:b2:f8:fc:ea:75:6f:8a:0e:32:
b7:ce:7e:d2:46:9b:a4:b9:e6:61:5e:4d:ce:3d:36:
11:bb:79:29:69:fe:d3:99:f6:27:c9:6e:d9:fa:43:
45:4f:6d:84:d4:25:c1:3c:61:d6:42:22:76:8b:2c:
b8:d5:84:d4:15:87:9a:76:e0:3f:a2:50:9d:b0:5f:
7e:62:c7:ee:7a:01:cc:05:b1:4d:6e:7d:5a:52:48:
5a:ad:8e:fa:69:78:30:fa:f5:bd:a2:a0:e4:e6:d8:
69:09:91:b1:4f:cb:53:7d:6b:58:3b:4f:b6:58:e6:
53:d4:af:d2:77:5c:14:eb:30:7c:f6:19:57:5a:d6:
6c:4d:6a:c8:a3:d4:f5:09:bc:a8:1b:b6:92:ee:d2:
ee:c9:aa:6a:c5:8b:8a:50:df:97:16:79:a5:21:09:
81:2a:48:60:1c:f7:da:25:5f:c6:55:40:e3:c2:2d:
b8:e7:0b:a3:c1:c3:18:65:c6:96:76:6d:4f:e5:b0:
12:60:f1:70:18:9e:cd:e3:6e:1d:f7:e5:72:09:db:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:22:3B:A5:67:FA:47:E6:A8:83:12:2F:80:DB:DA:A3:47:29:20
X509v3 Authority Key Identifier:
keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/jjUiO6Vn-kfmqIMSL4Db2qNHKSA.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:3800::/32
Signature Algorithm: sha256WithRSAEncryption
7e:7b:e8:c7:91:6b:73:7b:38:1d:f4:8f:bf:68:66:76:5a:90:
1f:96:92:d2:d4:ad:25:94:91:70:7d:14:eb:fb:0b:69:bc:c8:
e0:8d:38:e4:33:94:b7:b1:ea:e6:68:8d:30:4d:db:3d:3a:aa:
ff:e6:04:aa:ad:61:8e:36:cf:59:b5:26:f2:b5:77:4d:02:02:
24:eb:95:eb:fc:74:26:bc:0c:1e:85:c4:ca:56:c3:aa:0b:4f:
a5:4c:bb:60:3b:0c:8f:0b:7a:47:d2:86:5e:5b:e2:79:d7:9d:
4e:24:14:93:71:9d:32:be:47:ec:10:74:ee:4e:40:e5:44:08:
74:97:aa:00:ff:27:39:df:92:62:e5:88:9d:b2:81:78:b1:f0:
35:bc:e7:49:10:ac:62:4b:d3:7d:9f:4f:8c:1f:6d:82:4b:d1:
70:d9:bf:56:ff:1d:47:45:1a:1d:9f:cf:20:54:82:58:a1:d4:
0a:c9:59:4e:0b:60:79:d8:fa:f2:b5:ee:f8:20:fb:dc:77:79:
1a:53:d8:c5:dc:3f:89:e0:a0:86:80:8d:e1:7d:65:84:d6:3f:
67:6b:54:86:58:19:64:e0:01:44:38:49:a1:17:2f:62:b2:58:
10:85:2b:fc:c6:75:7b:a2:20:17:2a:fe:e5:73:55:28:af:a0:
f4:09:67:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:25:30 2026 by rpki-client