
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/aXhyr88iVyzvziEyhP4QWJxYqC8.roa
File: aXhyr88iVyzvziEyhP4QWJxYqC8.roa (raw, json)
Hash identifier: gxeVrFtvpn0Z8eOf3Z4bpK1yCf8Twx9nvehqTTSb2NA=
Subject key identifier: 69:78:72:AF:CF:22:57:2C:EF:CE:21:32:84:FE:10:58:9C:58:A8:2F
Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial: 30
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/aXhyr88iVyzvziEyhP4QWJxYqC8.roa
Signing time: Tue 31 Mar 2026 08:43:14 +0000
ROA not before: Tue 31 Mar 2026 08:43:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 157.1.0.0/16 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA30F686577D6576F647B295455535835130C3
Validity
Not Before: Mar 31 08:43:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=697872AFCF22572CEFCE213284FE10589C58A82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:c3:08:09:02:70:87:a3:f0:9d:06:8b:59:
e2:3a:a8:e0:b9:89:06:b8:94:5f:9d:3a:6d:c6:1a:
4a:bc:16:70:b4:c3:4e:22:5b:75:63:42:c7:69:b2:
96:d2:14:ab:37:fc:b1:fb:ea:f3:47:99:eb:6a:5f:
b1:1b:70:4d:3a:6e:89:06:9f:b8:c0:7d:9a:e4:6a:
74:4a:cc:1d:ec:2d:52:7c:ee:73:ed:33:92:c6:d3:
f0:8e:01:42:35:52:50:57:0b:7f:db:62:41:35:d1:
40:84:65:bb:9b:d4:58:e8:8e:94:e2:af:fb:ea:6c:
fd:c0:e6:00:60:f0:f9:fe:bc:c2:27:91:01:cb:28:
22:b5:48:41:29:2c:03:f7:de:56:76:30:65:b4:34:
a2:1a:77:b2:57:94:28:6a:2c:29:be:e4:ac:9f:05:
4b:31:f3:40:08:be:34:8c:db:8f:53:b6:4f:ab:2b:
50:14:c1:7b:48:63:46:4f:7f:d6:36:39:78:3d:6f:
77:f2:c2:3e:01:3d:1a:b1:56:16:7d:ce:cd:2b:da:
0c:16:7d:a1:1d:d8:ff:07:35:c9:f3:c9:80:74:ca:
77:07:83:0e:54:98:07:dc:d3:a2:dc:30:74:f0:90:
f6:8b:b6:f0:81:a7:b6:ad:73:c4:bc:3d:5f:85:98:
60:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:72:AF:CF:22:57:2C:EF:CE:21:32:84:FE:10:58:9C:58:A8:2F
X509v3 Authority Key Identifier:
keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/aXhyr88iVyzvziEyhP4QWJxYqC8.roa
sbgp-ipAddrBlock: critical
IPv4:
157.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:43:b3:79:5a:93:be:9d:83:d1:6d:36:3b:93:3a:53:35:d1:
4a:09:52:92:9d:90:84:27:73:0c:42:09:74:4e:70:a2:ce:2a:
a0:f4:76:0a:51:29:61:72:63:26:40:ba:5d:ca:41:f4:3d:5a:
f5:88:93:62:b3:e3:02:df:e6:34:84:08:91:7f:e3:44:6d:34:
bb:3c:24:f7:10:c5:31:82:be:a8:70:6d:e7:e4:97:a8:32:c8:
15:e8:52:5e:a8:c5:5e:b0:8d:95:b2:89:c1:32:0b:2e:ef:4a:
66:47:49:77:93:ca:63:83:88:56:96:76:14:0c:3a:f1:a7:bd:
cd:15:fa:f6:8a:62:86:49:b2:eb:a4:41:da:a7:49:07:bd:8e:
c3:74:bd:8b:79:97:81:39:85:05:90:a6:59:eb:22:1c:5f:01:
3c:b1:64:9b:ef:de:10:b2:d0:a6:b4:db:6d:b4:71:13:b2:09:
c4:8e:bf:55:92:1c:1f:97:9f:6c:53:10:b8:0e:2b:16:b5:49:
a7:b4:1e:e3:bb:e0:f3:5f:85:c5:b4:6c:e7:03:06:a9:b7:e3:
e5:c2:18:13:9c:08:f8:22:8b:a9:53:b5:71:62:a1:99:d1:9a:
a6:fa:3d:8e:23:e2:0e:6a:21:d6:e9:c9:1a:37:67:fe:ed:a2:
5f:c5:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:28 2026 by rpki-client