
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30316/U1Nny04YqwP1Yv1YN6kmzr30g78.roa
File: U1Nny04YqwP1Yv1YN6kmzr30g78.roa (raw, json)
Hash identifier: s1LTBnEv/8Rf0YKQqSRBedsGdAmFA+3Eze8otBaXJiM=
Subject key identifier: 53:53:67:CB:4E:18:AB:03:F5:62:FD:58:37:A9:26:CE:BD:F4:83:BF
Certificate issuer: /CN=51C29DDD0721552C44D8BCB4EF865BCA1071224D
Certificate serial: 28
Authority key identifier: 51:C2:9D:DD:07:21:55:2C:44:D8:BC:B4:EF:86:5B:CA:10:71:22:4D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/U1Nny04YqwP1Yv1YN6kmzr30g78.roa
Signing time: Tue 31 Mar 2026 08:36:33 +0000
ROA not before: Tue 31 Mar 2026 08:36:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24229
IP address blocks: 2404:168::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51C29DDD0721552C44D8BCB4EF865BCA1071224D
Validity
Not Before: Mar 31 08:36:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=535367CB4E18AB03F562FD5837A926CEBDF483BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:0c:b4:8c:0a:f3:d0:4b:8f:d5:2c:f1:4c:
2f:ea:f1:e0:dd:3a:0a:05:a2:e5:94:b3:d8:75:75:
ee:0a:2f:74:01:5d:a4:49:ba:24:9b:7c:2c:de:a6:
84:04:0a:31:e6:31:10:ed:72:92:f0:b0:56:8c:d4:
1e:c6:d6:fe:7b:d2:2a:07:b2:21:67:46:3f:31:7a:
80:2a:76:17:71:61:a6:64:d5:5c:a4:f3:0f:52:f8:
e6:7b:fc:a9:3a:f2:50:06:0b:d0:58:f3:0a:4e:f3:
19:7d:24:17:fe:a7:08:c5:15:15:68:e2:59:78:8b:
de:70:7d:34:9e:75:99:f8:31:4d:89:fa:ab:03:56:
25:93:3b:9e:ca:8a:67:91:cd:88:bb:db:97:89:f2:
c7:17:08:dd:10:cc:5d:87:42:cb:fd:d4:3d:3c:28:
03:35:e9:d2:f5:57:3a:bd:f2:3e:84:84:75:2e:70:
1d:3b:a1:06:44:24:63:5a:43:59:10:5d:97:85:35:
84:26:04:5e:31:1e:38:4b:bb:18:05:d7:64:0f:0c:
a4:c1:c5:75:7d:07:a1:62:fc:c2:c2:66:d1:66:95:
10:9d:dd:ed:e2:d7:cf:6c:15:47:bb:6a:d5:de:e3:
50:b0:9b:be:80:a7:4b:82:43:a3:d5:98:ff:4a:32:
10:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:67:CB:4E:18:AB:03:F5:62:FD:58:37:A9:26:CE:BD:F4:83:BF
X509v3 Authority Key Identifier:
keyid:51:C2:9D:DD:07:21:55:2C:44:D8:BC:B4:EF:86:5B:CA:10:71:22:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/U1Nny04YqwP1Yv1YN6kmzr30g78.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:168::/32
Signature Algorithm: sha256WithRSAEncryption
be:eb:4e:c4:50:5f:e2:c5:77:62:a2:16:f3:47:b8:29:aa:55:
40:80:f2:d3:df:6b:43:f8:55:d9:a0:98:9b:5a:7a:d2:6b:82:
33:52:06:f9:78:2b:5f:12:66:2a:be:8e:19:67:53:be:4f:49:
50:08:5e:cf:ef:7d:5d:ab:f5:78:c9:1b:d9:d3:27:a1:9c:68:
ad:73:91:60:c0:b8:6e:b6:a6:76:03:21:9e:e9:8c:1a:75:0c:
16:53:75:9d:94:31:c6:dc:59:a3:f5:73:de:8a:db:b5:70:18:
32:1a:a1:33:6d:0b:df:7e:e9:a1:e0:0f:ae:95:d5:87:51:91:
7a:cb:a8:b3:25:a4:84:ec:bd:55:7a:4d:79:bc:a7:7d:d0:83:
fe:b8:aa:1f:26:13:78:ae:33:70:44:f9:65:1e:3a:05:5e:54:
dd:4a:41:1e:7f:f4:5e:7c:9a:62:20:82:91:4a:bd:5c:01:ce:
d6:7b:9e:88:63:de:3a:3d:7c:05:ff:9b:f9:2e:d6:f9:8c:2d:
aa:0f:0d:97:ab:5e:6f:b3:66:90:4f:e1:bd:16:a4:8f:c1:3c:
93:a5:be:89:c8:35:ab:a8:b0:fc:4f:92:22:ae:1a:c5:93:0e:
d6:ad:24:09:67:ff:12:b2:03:8d:07:93:70:d0:a5:5d:af:90:
6f:35:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 18:54:50 2026 by rpki-client