
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/D31Y23wpkGD7OzABTWev6dAYwgs.roa
File: D31Y23wpkGD7OzABTWev6dAYwgs.roa (raw, json)
Hash identifier: +M4p7bmf/YLM41kno0X0kuLr9kLJZ/ieVYsL/NlUPPg=
Subject key identifier: 0F:7D:58:DB:7C:29:90:60:FB:3B:30:01:4D:67:AF:E9:D0:18:C2:0B
Certificate issuer: /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial: 07
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/D31Y23wpkGD7OzABTWev6dAYwgs.roa
Signing time: Wed 01 Jul 2026 01:26:43 +0000
ROA not before: Wed 01 Jul 2026 01:26:43 +0000
ROA not after: Thu 01 Jul 2027 01:12:28 +0000
asID: 401776
IP address blocks: 2402:6020::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 03:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Validity
Not Before: Jul 1 01:26:43 2026 GMT
Not After : Jul 1 01:12:28 2027 GMT
Subject: CN=0F7D58DB7C299060FB3B30014D67AFE9D018C20B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:03:cc:2f:7b:c7:b8:97:ff:e4:33:54:12:
45:3c:96:4d:cb:75:49:47:54:07:05:d8:fd:f1:f6:
09:a3:18:a8:ad:6a:59:9b:60:76:bf:68:bc:e9:bc:
ed:e2:96:b4:8b:18:b9:a6:26:be:d2:f0:28:fb:f8:
8c:13:d8:93:2e:1f:70:fd:94:a3:56:9a:ef:14:f2:
ac:96:af:9e:a0:14:37:bf:69:70:3c:ac:79:8b:a1:
12:e0:6a:e9:15:76:c3:f3:de:89:38:02:41:53:59:
0a:54:2a:db:ad:98:e3:5e:5e:4a:60:de:ce:0d:00:
55:29:b1:dd:a1:51:be:65:91:49:7e:51:ae:3f:e2:
1a:cc:31:bb:7b:96:5d:81:8b:07:45:de:b8:33:3a:
62:31:53:6a:0c:fd:5c:01:16:53:d2:bb:ee:18:17:
78:b5:15:2c:2d:96:0b:a7:a2:dd:dc:8a:5a:93:84:
f5:c4:62:73:c3:b7:81:15:ff:8d:50:62:a3:66:e8:
6b:34:66:8f:39:cb:05:d3:85:0c:30:26:62:c6:b8:
3f:1b:39:2c:88:91:23:ae:19:d9:e1:5f:d9:63:09:
3b:f6:a6:37:48:9d:1d:6c:59:0a:3b:9b:1c:f4:37:
c2:61:4d:c5:a9:71:6c:b7:ad:40:fc:cf:3c:a3:64:
fb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7D:58:DB:7C:29:90:60:FB:3B:30:01:4D:67:AF:E9:D0:18:C2:0B
X509v3 Authority Key Identifier:
keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/D31Y23wpkGD7OzABTWev6dAYwgs.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6020::/32
Signature Algorithm: sha256WithRSAEncryption
8e:bd:25:9b:16:76:72:1f:b8:96:c0:49:5c:e3:84:10:a8:b4:
15:0f:5a:25:a2:65:44:49:ab:6e:95:dd:7e:18:25:c2:1b:15:
fc:c3:f8:92:2c:45:ed:ad:48:30:b1:41:5f:41:53:19:8f:1c:
3c:c8:c2:10:97:8a:4e:f2:59:a4:b4:d0:0d:fe:e5:dd:e1:c6:
3c:1a:da:42:2a:f8:cd:bc:d9:88:e9:4a:f0:12:b0:8d:70:0b:
a4:7a:33:46:76:7b:c6:59:89:44:36:0f:e8:14:f6:c5:f4:04:
ff:a6:70:3f:a6:7e:4a:51:2f:ba:4d:3c:03:b4:4e:17:85:1d:
0f:cc:fc:53:fd:01:b9:e1:1a:e6:6b:c5:c0:d3:e7:db:23:52:
b2:e6:2a:94:ce:04:01:aa:d3:2e:b7:6d:19:a9:02:6b:5f:d1:
d3:8d:af:81:37:a8:17:82:c8:7e:f4:4f:4e:7e:da:03:9b:de:
8a:5f:81:c8:c7:f1:72:9f:32:e3:2c:37:11:c1:ec:1e:af:63:
60:89:2d:9b:84:b3:7b:ef:84:6c:50:42:f9:bd:87:77:2d:e4:
0d:cc:aa:dc:b0:37:aa:7d:18:e2:79:ab:53:2e:66:d1:02:88:
6a:8b:fe:f8:44:e9:e5:49:c2:d9:1c:59:7f:e8:7e:fb:7e:a2:
de:c9:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:26:42 2026 by rpki-client