
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/2mwUwlFiY_-xAHHgd3gbcuGtXPU.roa
File: 2mwUwlFiY_-xAHHgd3gbcuGtXPU.roa (raw, json)
Hash identifier: TvTW62esNdWFWULvozQr7lxvq2nzV+rKrkKpIG6SDC0=
Subject key identifier: DA:6C:14:C2:51:62:63:FF:B1:00:71:E0:77:78:1B:72:E1:AD:5C:F5
Certificate issuer: /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Certificate serial: 3B
Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/2mwUwlFiY_-xAHHgd3gbcuGtXPU.roa
Signing time: Tue 31 Mar 2026 08:30:57 +0000
ROA not before: Tue 31 Mar 2026 08:30:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2403:c780:7200::/48 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Validity
Not Before: Mar 31 08:30:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DA6C14C2516263FFB10071E077781B72E1AD5CF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:52:9a:c1:26:5f:1c:98:65:d5:ea:b6:d5:
20:7a:2e:fb:0b:b6:b7:fe:77:bd:15:f1:33:dc:dd:
a3:f0:8c:f6:e4:18:13:91:a2:af:a5:dd:15:cb:42:
f4:41:bf:f9:fb:50:22:97:89:b0:99:9f:e9:f5:07:
6f:2a:6a:c9:91:12:5b:52:af:35:6c:a4:b9:09:44:
2a:e3:59:ab:7c:93:2d:5a:3c:c9:b2:d0:f8:6f:7f:
cd:63:b7:ea:39:d1:78:77:4a:47:13:25:d2:ca:5b:
14:12:46:22:0a:b7:3d:86:56:61:09:cf:db:b6:05:
93:f4:67:12:95:1f:ea:e9:56:6d:fd:7b:a3:1d:65:
1f:cd:43:d3:b8:90:c0:4e:f9:1c:cd:26:90:ed:bc:
b3:5d:ba:de:7c:46:0c:cc:3d:a3:1c:75:9b:92:5e:
9f:ae:5d:4d:96:dd:5d:0d:7b:b3:38:e5:c1:52:6f:
de:8a:0a:6d:5a:36:f1:b0:4a:42:a2:71:b9:7f:e2:
16:eb:32:3e:d4:50:08:e7:60:07:f8:b9:c2:da:4d:
e5:9b:5b:01:bc:1f:e7:6e:ea:07:ea:70:19:92:71:
de:89:b2:a6:21:7b:e7:6f:be:09:09:67:5b:8a:98:
36:ff:49:96:64:f9:94:7b:7e:c6:20:0f:ff:71:99:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:14:C2:51:62:63:FF:B1:00:71:E0:77:78:1B:72:E1:AD:5C:F5
X509v3 Authority Key Identifier:
keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/2mwUwlFiY_-xAHHgd3gbcuGtXPU.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:c780:7200::/48
Signature Algorithm: sha256WithRSAEncryption
71:e2:5b:30:6e:ef:2e:89:5b:cd:31:16:24:79:85:2b:87:cf:
d3:58:b2:c3:75:ce:66:8d:6a:49:27:f8:45:8e:18:d2:ac:73:
a6:b0:69:1f:7e:de:fb:aa:85:fe:8c:df:4c:55:42:22:54:8f:
fa:49:41:ff:dd:79:5b:db:3f:e6:cc:6e:9b:6c:e7:8b:38:06:
7a:da:29:8d:58:af:c7:9f:77:00:50:9e:da:d3:f7:29:7f:85:
20:3a:db:3d:a0:5d:45:ad:5a:6f:ae:06:18:a6:e1:6d:2f:72:
fe:d3:af:66:2f:e1:b8:48:a0:ae:ac:18:4e:8e:51:02:ae:8e:
d0:5c:f4:a2:56:67:f9:c8:e8:fd:48:45:3c:ae:b7:e1:24:54:
ac:59:34:1b:5c:31:e5:99:46:be:46:54:5f:ea:a4:83:4a:7d:
7b:5e:ae:e2:28:3d:a7:1f:bb:1a:1c:36:7d:e3:93:b4:d0:82:
04:26:a0:93:a6:ea:30:c8:1d:1f:3b:d8:bc:f6:e5:39:4b:ed:
6a:05:cd:1b:2d:d6:ec:16:d2:bf:d6:7f:6d:3d:34:49:6a:d5:
04:a7:71:1a:58:76:4d:37:39:9b:df:b0:60:5c:b9:99:63:9c:
cb:4d:a5:af:9d:18:30:a0:ff:4e:ae:2b:af:a3:27:ae:fc:0a:
29:7c:d4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:32:03 2026 by rpki-client