
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/Dwrvg0SfO4UqhZPorXRZU2bOh64.roa
File: Dwrvg0SfO4UqhZPorXRZU2bOh64.roa (raw, json)
Hash identifier: /4S8FC6i//vWxgmuPjAk6wDEeM4sHpzUuGLqHfflSoA=
Subject key identifier: 0F:0A:EF:83:44:9F:3B:85:2A:85:93:E8:AD:74:59:53:66:CE:87:AE
Certificate issuer: /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Certificate serial: 3C
Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/Dwrvg0SfO4UqhZPorXRZU2bOh64.roa
Signing time: Tue 31 Mar 2026 08:30:59 +0000
ROA not before: Tue 31 Mar 2026 08:30:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 0
IP address blocks: 2403:c780:b800:bb00::/64 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 13:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60 (0x3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Validity
Not Before: Mar 31 08:30:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=0F0AEF83449F3B852A8593E8AD74595366CE87AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:01:d4:15:4f:8e:0c:7c:b6:8d:9a:73:4d:
a0:ed:cc:c0:94:14:d6:23:e2:f2:88:ca:22:82:d5:
23:cb:b9:99:49:4f:9e:ac:db:25:0d:10:c0:1f:c1:
a7:fe:f6:7c:55:98:b1:48:44:11:0b:96:ae:da:61:
cb:1f:55:12:c6:73:09:63:88:fa:e1:2a:2c:7e:ac:
b1:06:ec:03:75:87:b8:47:9b:fb:bb:c9:79:67:22:
5d:49:d7:a1:3c:a6:22:8e:73:6c:c8:1e:0a:52:3b:
99:06:dc:0c:33:b6:0a:51:f9:0e:3f:43:05:46:f4:
72:ee:80:35:f3:9a:df:4e:6d:b8:5c:1e:08:bd:44:
b2:92:22:69:ce:87:d6:08:dc:f5:d8:db:a3:ce:35:
61:1b:7b:a6:7c:16:a6:cd:3b:6b:34:de:b2:7e:9f:
50:a1:58:45:f9:d0:d6:5b:c0:68:25:3e:d1:05:6a:
b8:df:58:90:46:6c:1c:a9:03:13:c1:99:8c:d0:43:
8f:43:84:a0:29:4a:04:be:e2:4c:be:ba:9c:3e:72:
96:22:d9:61:4a:c3:a8:86:fb:f8:c8:a6:72:c0:d8:
82:2d:a8:00:f8:a4:7f:8f:a2:9b:91:75:88:fe:4e:
1e:4f:10:dc:51:e2:6e:12:f0:fe:f7:26:62:5e:ec:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0A:EF:83:44:9F:3B:85:2A:85:93:E8:AD:74:59:53:66:CE:87:AE
X509v3 Authority Key Identifier:
keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/Dwrvg0SfO4UqhZPorXRZU2bOh64.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:c780:b800:bb00::/64
Signature Algorithm: sha256WithRSAEncryption
41:c0:c4:11:12:a3:61:47:82:e1:e7:84:c5:60:92:e4:61:a2:
ac:aa:87:6b:08:bc:92:7e:d7:01:ed:cd:2f:7a:b8:ec:cb:63:
66:2c:5b:dd:fd:95:36:cd:25:07:3e:6b:3b:04:d9:22:5a:00:
6f:0a:48:49:2f:5a:01:19:47:1f:7f:e6:a3:db:85:9d:cc:36:
9a:48:33:82:ee:e0:96:e7:a5:cf:0a:8a:e7:d7:89:77:12:9c:
63:78:0f:3c:d0:20:bd:86:b8:e1:04:c8:65:7a:2c:54:bb:a0:
69:77:88:89:d7:e9:7f:7a:e1:53:1b:ea:2e:8d:b7:35:0f:25:
50:ce:25:5e:c9:9a:3b:5a:c9:04:f0:03:53:b8:1d:cc:5f:c7:
d7:e1:41:2a:3c:09:88:07:46:75:6b:9b:b4:d5:4c:f2:d8:32:
f4:e4:82:11:52:5f:e6:98:91:9e:96:d0:94:93:d4:cf:59:58:
bf:8a:80:7d:11:13:d0:1d:cc:54:db:82:ad:95:48:5e:cd:d0:
d7:92:0d:a4:44:9c:4a:13:b6:af:4d:76:aa:cf:4c:fe:99:74:
f1:ac:2a:21:0b:39:d1:48:76:6b:91:57:8a:48:3c:a3:f6:f7:
af:39:ca:91:4b:2e:e8:bc:60:f9:60:41:93:bc:6a:03:d5:2d:
02:d4:fc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:17 2026 by rpki-client