
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30461/ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa
File: ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa (raw, json)
Hash identifier: gp6w3fEgXiiJVCyyuQvpuGziIVbO61TMDR/eZKDzrFo=
Subject key identifier: BD:EF:21:2E:7C:8F:89:B2:EB:25:9D:0D:8F:7A:96:3A:AD:42:B0:42
Certificate issuer: /CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Certificate serial: 03
Authority key identifier: 63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa
Signing time: Wed 01 Jul 2026 01:26:41 +0000
ROA not before: Wed 01 Jul 2026 01:26:41 +0000
ROA not after: Thu 01 Jul 2027 01:12:28 +0000
asID: 36530
IP address blocks: 2402:6020::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 03:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631DAAE223AC75DA6A1635051B87AAD42C331D04
Validity
Not Before: Jul 1 01:26:41 2026 GMT
Not After : Jul 1 01:12:28 2027 GMT
Subject: CN=BDEF212E7C8F89B2EB259D0D8F7A963AAD42B042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:e1:d2:89:d3:b0:19:c4:d9:d9:d4:29:98:
0a:a2:f7:96:eb:ec:d6:a4:24:2f:45:49:55:d0:02:
71:be:f8:d8:ab:30:e1:ff:b6:9f:0f:af:49:91:d2:
6d:aa:5f:2f:d1:4e:b5:c2:92:6d:1c:79:3c:32:7a:
f9:cb:28:43:65:69:a0:1e:74:6d:c7:af:6d:a3:24:
38:6f:f4:a1:94:61:62:49:87:a9:92:9a:a5:8a:c8:
52:3d:a2:47:0c:53:25:5c:57:b7:79:83:0f:eb:27:
72:bf:0a:34:21:17:1f:09:19:5a:cf:9d:47:d4:d5:
2e:fb:54:f6:bf:c0:d9:95:c1:fd:22:ec:4c:e1:0f:
8d:86:ac:4d:f3:0f:0c:cc:2c:e1:1b:c6:eb:05:c9:
62:ae:a0:66:d2:e9:09:b1:aa:50:91:02:01:4c:24:
11:32:21:a1:16:c6:af:de:3c:66:ea:9d:36:88:97:
32:14:9e:a4:0e:78:07:37:e5:3d:10:83:b4:0a:e9:
bc:83:a2:e9:3d:81:fd:45:8b:70:f4:f3:50:41:b3:
99:cd:a2:2d:f9:b0:e5:9e:b0:55:b7:dd:83:e1:ef:
49:52:8a:42:1d:2d:69:37:4d:ed:8e:53:8f:4b:f2:
67:67:5d:a4:97:f2:94:4f:78:01:0b:d9:6a:15:2a:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EF:21:2E:7C:8F:89:B2:EB:25:9D:0D:8F:7A:96:3A:AD:42:B0:42
X509v3 Authority Key Identifier:
keyid:63:1D:AA:E2:23:AC:75:DA:6A:16:35:05:1B:87:AA:D4:2C:33:1D:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Yx2q4iOsddpqFjUFG4eq1CwzHQQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30461/ve8hLnyPibLrJZ0Nj3qWOq1CsEI.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:6020::/32
Signature Algorithm: sha256WithRSAEncryption
7c:65:da:b2:fb:a9:dd:99:4e:92:35:d2:3c:51:44:a2:c7:d0:
3c:05:c0:3d:b5:e5:c4:da:8b:6a:93:25:d4:12:eb:2c:1b:24:
98:4f:44:52:89:57:57:e7:b7:0b:55:29:b3:75:62:f5:0c:9e:
5b:91:b2:b3:83:22:7e:b0:db:c1:fd:81:01:8c:2a:53:54:92:
77:c9:0a:fa:72:02:83:6e:95:45:2d:a9:76:e7:38:29:63:cb:
a5:b3:61:ab:29:88:c8:62:03:d5:39:71:85:1d:4f:cb:4f:92:
56:ce:41:03:88:80:71:a9:52:a1:a3:b6:a5:b2:95:7a:e1:52:
12:d0:d8:6c:be:2d:3b:d0:0e:7e:f7:ef:75:f4:87:90:bb:9f:
2f:37:82:a1:7f:d3:30:ca:11:ec:2e:89:ee:47:a0:ea:ab:81:
cc:8e:b0:2a:c9:40:f2:9c:f6:44:7a:82:8e:0b:f5:7a:c2:7f:
62:07:87:35:17:63:3f:ac:c9:49:bc:a6:c8:24:91:b5:d8:c1:
eb:ee:55:52:11:2b:45:27:ff:8c:be:3d:66:0c:59:a2:10:d3:
42:69:b8:6a:0f:db:8b:c5:33:9e:0d:83:29:93:08:e2:d8:78:
02:92:5e:49:a3:b6:30:24:ec:60:01:21:cf:1e:01:fe:40:09:
de:fb:04:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:27:42 2026 by rpki-client