
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30024/RDIk5hrN0ald4OGYg_5FgprwQIM.roa
File: RDIk5hrN0ald4OGYg_5FgprwQIM.roa (raw, json)
Hash identifier: EX/Vjrh1GlLfZ0J9T5Hu1n9/m2yOUv/Myc1QMxjjt4g=
Subject key identifier: 44:32:24:E6:1A:CD:D1:A9:5D:E0:E1:98:83:FE:45:82:9A:F0:40:83
Certificate issuer: /CN=C704C9A0D115D26062A916A8ADD698F218E00A87
Certificate serial: 1C
Authority key identifier: C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/RDIk5hrN0ald4OGYg_5FgprwQIM.roa
Signing time: Tue 31 Mar 2026 08:43:23 +0000
ROA not before: Tue 31 Mar 2026 08:43:23 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2907
IP address blocks: 2001:2f8::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C704C9A0D115D26062A916A8ADD698F218E00A87
Validity
Not Before: Mar 31 08:43:23 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=443224E61ACDD1A95DE0E19883FE45829AF04083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6d:ec:b4:c1:7e:4e:4c:f9:09:4e:09:6d:50:
9a:db:10:b9:cf:10:e4:94:e2:82:0c:43:bd:61:ac:
89:ae:b3:bb:37:75:1e:7f:dd:ae:d1:4b:ad:3b:5f:
a2:3b:1b:91:21:46:89:c0:f4:53:fb:a1:f5:5f:04:
d1:b0:21:dd:67:1e:ae:3f:40:b0:a8:f4:4c:34:55:
c4:90:fb:c0:e2:7d:7f:21:5b:c7:0d:3d:ad:c4:b6:
48:df:46:b4:62:7d:bc:a9:0a:39:6e:ea:86:f1:6d:
30:aa:60:4e:52:a2:86:2d:7b:a2:f5:f8:fe:8d:d5:
d7:4c:f1:8c:18:21:6a:0b:2e:d5:23:a0:c5:81:b8:
ee:9a:d2:51:6a:44:2b:6e:3b:c7:45:f6:6c:a7:08:
8c:9e:0d:0b:2a:05:e2:c6:ee:91:23:35:33:a3:72:
f7:15:0b:92:c0:37:4f:6d:b1:d6:bb:52:db:da:e5:
bb:7a:67:9a:a2:28:ef:ae:ea:79:b1:38:7b:7e:19:
68:1f:72:6c:91:90:9e:54:9c:d4:bb:f1:d0:cc:78:
fb:52:0f:9f:61:5a:8e:9d:fb:6b:fa:54:fc:f5:f6:
b2:e2:9f:ac:9b:f9:c4:aa:dd:e4:3d:0d:05:30:2c:
ab:37:b7:96:cb:f7:88:45:76:a0:1b:ca:cd:ca:3d:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:32:24:E6:1A:CD:D1:A9:5D:E0:E1:98:83:FE:45:82:9A:F0:40:83
X509v3 Authority Key Identifier:
keyid:C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/RDIk5hrN0ald4OGYg_5FgprwQIM.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:2f8::/32
Signature Algorithm: sha256WithRSAEncryption
a9:f1:0c:c8:78:7e:59:00:86:c2:57:27:fb:c9:26:b8:16:b0:
91:47:20:34:be:76:4b:fd:dd:07:38:35:ca:80:07:14:5b:85:
9f:4b:f1:1b:29:9b:e7:05:aa:fc:06:bd:4f:95:49:ec:b2:9c:
82:18:84:d4:56:2d:06:9e:b5:c9:82:38:fe:b0:2e:9e:d6:05:
a2:d7:b5:c6:59:2e:bd:08:61:ad:af:95:4c:94:a0:f5:e0:5f:
75:fe:ed:fd:9a:fd:1a:58:63:6b:bd:42:99:4d:5a:4a:47:f9:
a2:38:f5:e8:ef:35:eb:9c:9f:df:6a:a9:6e:74:9e:8f:68:09:
82:63:03:38:76:86:58:2b:30:e3:c2:65:66:7f:8c:a8:af:e7:
51:9a:c5:e5:52:9e:30:fa:a7:8c:6e:3c:1f:3a:e6:28:6d:0c:
bb:52:6b:4a:f7:46:b6:9d:02:7b:b9:3d:33:a9:50:48:ca:97:
d0:ea:69:e1:19:dd:39:8e:1d:e1:8b:c2:9d:3c:91:ef:16:b2:
e8:31:24:c3:3e:89:d3:43:19:a4:ca:28:5c:c2:7a:1d:b4:4a:
d9:6f:0d:a1:ca:02:9b:03:4e:30:02:89:e4:35:9d:8d:14:ee:
bb:87:8b:0a:a8:21:b4:32:fe:6e:d4:d3:cb:73:c2:09:e8:48:
56:a6:e0:be
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzA0
QzlBMEQxMTVEMjYwNjJBOTE2QThBREQ2OThGMjE4RTAwQTg3MB4XDTI2MDMzMTA4
NDMyM1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDQzMjI0RTYxQUNERDFB
OTVERTBFMTk4ODNGRTQ1ODI5QUYwNDA4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN5t7LTBfk5M+QlOCW1QmtsQuc8Q5JTiggxDvWGsia6zuzd1Hn/d
rtFLrTtfojsbkSFGicD0U/uh9V8E0bAh3Wcerj9AsKj0TDRVxJD7wOJ9fyFbxw09
rcS2SN9GtGJ9vKkKOW7qhvFtMKpgTlKihi17ovX4/o3V10zxjBghagsu1SOgxYG4
7prSUWpEK247x0X2bKcIjJ4NCyoF4sbukSM1M6Ny9xULksA3T22x1rtS29rlu3pn
mqIo767qebE4e34ZaB9ybJGQnlSc1Lvx0Mx4+1IPn2Fajp37a/pU/PX2suKfrJv5
xKrd5D0NBTAsqze3lsv3iEV2oBvKzco9gnMCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBREMiTmGs3RqV3g4ZiD/kWCmvBAgzAfBgNVHSMEGDAWgBTHBMmg0RXSYGKpFqit
1pjyGOAKhzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMjQveHdUSm9ORVYwbUJpcVJhb3JkYVk4aGpnQ29jLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveHdUSm9ORVYwbUJpcVJhb3JkYVk4
aGpnQ29jLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDI0L1JESWs1aHJOMGFsZDRPR1lnXzVGZ3Byd1FJTS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQL4MA0GCSqGSIb3DQEBCwUA
A4IBAQCp8QzIeH5ZAIbCVyf7ySa4FrCRRyA0vnZL/d0HODXKgAcUW4WfS/EbKZvn
Bar8Br1PlUnsspyCGITUVi0GnrXJgjj+sC6e1gWi17XGWS69CGGtr5VMlKD14F91
/u39mv0aWGNrvUKZTVpKR/miOPXo7zXrnJ/faqludJ6PaAmCYwM4doZYKzDjwmVm
f4yor+dRmsXlUp4w+qeMbjwfOuYobQy7UmtK90a2nQJ7uT0zqVBIypfQ6mnhGd05
jh3hi8KdPJHvFrLoMSTDPonTQxmkyihcwnodtErZbw2hygKbA04wAonkNZ2NFO67
h4sKqCG0Mv5u1NPLc8IJ6EhWpuC+
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:44 2026 by rpki-client