
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30412/XJagQBTAe6ZY8SJ1YpneWgkIPsw.roa
File: XJagQBTAe6ZY8SJ1YpneWgkIPsw.roa (raw, json)
Hash identifier: AE5dh85KiW07pm/6GXz6eIJifP/eepQDupjgmCM4gC0=
Subject key identifier: 5C:96:A0:40:14:C0:7B:A6:58:F1:22:75:62:99:DE:5A:09:08:3E:CC
Certificate issuer: /CN=35AAA59851E392DF892E5CB7ABE6225165AEC897
Certificate serial: 34
Authority key identifier: 35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/XJagQBTAe6ZY8SJ1YpneWgkIPsw.roa
Signing time: Tue 31 Mar 2026 08:31:03 +0000
ROA not before: Tue 31 Mar 2026 08:31:03 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2915
IP address blocks: 2400:c320::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35AAA59851E392DF892E5CB7ABE6225165AEC897
Validity
Not Before: Mar 31 08:31:03 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5C96A04014C07BA658F122756299DE5A09083ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:b1:60:f3:16:f5:98:27:ff:80:62:56:d6:
e8:e3:cf:ac:2d:ea:38:25:1a:35:1e:a7:6c:2c:69:
29:c5:86:02:ce:68:33:bb:15:c8:14:9a:13:94:3e:
4f:ef:62:6f:18:28:51:a6:ea:df:9b:2a:62:85:1a:
a1:a5:1a:aa:e3:f4:68:51:a0:ee:b4:33:86:ed:03:
2a:05:22:c5:19:0b:c8:94:f4:d2:a8:5b:dc:20:6d:
18:47:7a:36:a4:fb:7b:b0:25:16:77:bb:22:6e:67:
08:10:3c:3b:1d:2c:56:94:73:63:ce:26:9b:71:8a:
1b:ca:a4:99:99:28:a2:05:85:1e:d8:e4:9c:b2:f5:
e3:4e:c2:16:44:91:1c:f0:5d:88:d8:c8:0a:5f:f5:
49:a1:1a:1b:73:9a:2b:31:93:9b:ae:2c:f3:6d:a3:
b1:c6:f5:f1:48:80:98:0c:ea:a0:e0:51:0c:c7:83:
32:a7:f4:c6:e2:38:64:0e:05:dd:bd:7f:4f:dd:db:
3a:21:c5:e8:8f:48:34:fd:d7:5c:7e:8b:1a:ae:ef:
bc:eb:71:2f:d4:c5:81:b5:8c:81:9e:ea:22:47:ca:
d4:d2:e1:75:50:e1:d1:31:4f:24:7e:eb:85:2c:1a:
35:f9:da:01:49:fa:80:c6:a2:66:04:f3:25:50:ab:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:A0:40:14:C0:7B:A6:58:F1:22:75:62:99:DE:5A:09:08:3E:CC
X509v3 Authority Key Identifier:
keyid:35:AA:A5:98:51:E3:92:DF:89:2E:5C:B7:AB:E6:22:51:65:AE:C8:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/NaqlmFHjkt-JLly3q-YiUWWuyJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NaqlmFHjkt-JLly3q-YiUWWuyJc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30412/XJagQBTAe6ZY8SJ1YpneWgkIPsw.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:c320::/32
Signature Algorithm: sha256WithRSAEncryption
29:3d:49:d6:90:13:b7:a7:e7:d9:1c:e4:50:8e:10:7f:bc:ca:
5b:3c:bf:11:36:ac:fb:a4:c9:39:ab:7d:b8:4e:a0:8d:57:aa:
8a:5b:b3:0f:b4:72:d1:9e:bb:6d:b2:3c:58:1e:95:e6:18:2e:
02:cd:d9:d3:fd:82:8c:34:42:9a:be:bd:84:5b:d0:5c:b1:e2:
7a:48:9f:af:e7:9d:19:28:4c:af:9c:cc:aa:41:4e:52:d9:61:
54:da:c9:8d:05:d6:ae:5d:03:7e:55:57:06:38:af:2d:15:10:
68:da:e5:62:2d:d9:2c:34:9f:77:74:4f:88:0f:61:c8:7e:ca:
83:6c:f4:99:5f:01:09:69:09:e3:9a:4b:a1:20:be:77:7d:bb:
c2:7e:d9:37:6b:53:bc:2e:61:7a:17:2f:60:67:4a:41:77:92:
df:1d:00:7f:a3:bf:56:66:88:c4:bd:55:dd:93:7d:50:cc:dd:
52:76:67:9c:dd:15:67:56:ae:a3:be:e9:32:04:d8:ca:28:5b:
9e:74:d1:71:6e:bf:ed:98:64:ae:9a:d9:98:63:46:10:1e:9c:
88:ec:73:cb:9e:62:44:a7:19:a5:20:35:07:93:7d:c0:17:0d:
8d:e1:bc:10:dc:5b:cc:90:ff:84:cd:0b:eb:e9:b1:65:0b:d9:
d8:e3:ac:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 19:20:39 2026 by rpki-client