
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/gdt4c--4t3A_D4VXPDr8XFMGdW4.roa
File: gdt4c--4t3A_D4VXPDr8XFMGdW4.roa (raw, json)
Hash identifier: e/ZyHnI2sEdKsFo8ZGFFUguxAPR1W+gIBezD6sh2Z4g=
Subject key identifier: 81:DB:78:73:EF:B8:B7:70:3F:0F:85:57:3C:3A:FC:5C:53:06:75:6E
Certificate issuer: /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial: 35
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/gdt4c--4t3A_D4VXPDr8XFMGdW4.roa
Signing time: Tue 31 Mar 2026 08:43:16 +0000
ROA not before: Tue 31 Mar 2026 08:43:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 192.58.10.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DA30F686577D6576F647B295455535835130C3
Validity
Not Before: Mar 31 08:43:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=81DB7873EFB8B7703F0F85573C3AFC5C5306756E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:29:d5:f1:98:60:f4:84:b1:0c:4e:dd:0f:
1c:df:00:e3:9b:e9:29:21:a6:ce:8a:53:6f:2d:97:
6d:77:54:eb:6e:93:e1:d0:7e:12:5e:51:bb:4e:53:
01:c2:3c:54:fa:40:0f:32:8b:1b:b3:3c:9d:06:7a:
f7:af:a3:6a:a0:10:26:f5:0a:98:74:cc:33:7a:cc:
48:d0:72:1c:16:62:9d:a1:04:5f:87:4a:5b:4e:50:
93:9a:20:66:35:24:b6:8c:a3:ce:60:49:79:af:e8:
0c:1e:c0:bc:b7:be:13:9b:b8:83:d8:32:70:14:80:
2e:be:92:4e:94:78:c2:fa:a3:16:53:9a:68:aa:36:
cf:80:b9:9c:57:6d:91:d7:12:36:96:c8:80:64:48:
eb:b4:d5:cb:6e:5a:d5:60:f2:d0:d6:43:3c:41:5d:
8a:7c:db:e0:0b:27:b7:83:ff:d5:b1:2c:17:69:8d:
16:9d:fe:9c:7f:17:5b:95:e8:d2:e7:17:2b:0b:86:
68:20:c9:8f:48:ac:11:4e:0f:ee:8f:87:be:d1:b9:
7d:38:1e:17:07:ea:ef:ab:31:6b:bf:e9:33:ef:02:
af:56:9c:d7:00:48:8f:2a:8c:0e:1a:50:b1:16:ce:
98:49:fc:3a:a4:7a:19:a2:fc:9d:7f:61:e9:c7:bd:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:78:73:EF:B8:B7:70:3F:0F:85:57:3C:3A:FC:5C:53:06:75:6E
X509v3 Authority Key Identifier:
keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/gdt4c--4t3A_D4VXPDr8XFMGdW4.roa
sbgp-ipAddrBlock: critical
IPv4:
192.58.10.0/23
Signature Algorithm: sha256WithRSAEncryption
80:09:3d:86:14:13:18:4b:2b:ad:e4:89:96:ea:d7:d8:06:48:
9d:db:9f:0d:70:29:5d:e3:a7:a1:a1:82:8c:75:f2:63:a7:ba:
f6:b9:f3:d3:02:3b:a5:13:7c:90:fa:51:ee:a5:d4:89:7e:d3:
70:1a:2a:08:61:51:6f:e3:e2:35:d7:41:d1:dd:8e:d7:60:d1:
66:c1:af:1b:d5:b3:54:ed:77:37:e8:21:1e:e1:be:02:4b:17:
be:39:1e:00:b7:4b:33:7c:e8:03:79:8a:06:3e:c1:4c:b9:d5:
6b:40:af:1c:8f:28:4f:0d:75:e1:35:c6:5d:e2:a2:72:35:8b:
d8:1e:17:96:d5:13:8d:28:6b:c2:f0:7b:12:29:ab:0f:12:17:
21:0f:4e:ad:d7:1c:6d:a6:cc:2b:70:47:74:15:c9:2b:28:62:
4e:3e:fc:7b:91:6e:92:83:95:a4:e9:ab:fe:3a:57:6c:6f:bb:
2c:60:0d:f3:63:17:4d:69:e9:aa:40:7b:75:68:e3:45:55:2a:
5b:3f:58:4b:e1:15:69:7e:d1:b3:7f:af:3a:9e:71:dc:7a:4d:
28:4e:a7:5f:0d:6f:59:d6:56:d1:cf:7c:d5:4a:12:d5:a2:e1:
7c:a7:5c:0f:90:e7:e1:18:d6:94:b3:92:a4:29:66:28:09:40:
b0:f7:79:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:41 2026 by rpki-client