
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/HxHQHHr4YhFlpu6x7ulYwrRKzm8.roa
File: HxHQHHr4YhFlpu6x7ulYwrRKzm8.roa (raw, json)
Hash identifier: EfzJ21jPqIn4r0dz8d8BsEmWvawY5G1soV14QSsyRxc=
Subject key identifier: 1F:11:D0:1C:7A:F8:62:11:65:A6:EE:B1:EE:E9:58:C2:B4:4A:CE:6F
Certificate issuer: /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial: 61
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/HxHQHHr4YhFlpu6x7ulYwrRKzm8.roa
Signing time: Tue 31 Mar 2026 07:39:25 +0000
ROA not before: Tue 31 Mar 2026 07:39:25 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 2001:3b8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Validity
Not Before: Mar 31 07:39:25 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1F11D01C7AF8621165A6EEB1EEE958C2B44ACE6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:02:b9:b3:5c:99:4c:7b:b5:37:bf:b9:38:
46:f4:c1:c4:38:f0:c5:2a:47:73:9f:ed:02:b9:e6:
80:49:b2:a2:ac:d4:75:af:6d:fa:ce:a8:40:ce:51:
33:67:09:67:8f:47:4b:ff:4c:28:ad:2f:f6:05:92:
d7:fd:c7:da:77:b9:4e:3b:79:bd:37:9a:16:3f:28:
ec:72:ef:7f:c7:a3:bd:d1:65:c9:b9:20:aa:7d:52:
c1:3b:90:2d:02:93:b1:b1:d6:4d:07:e9:f7:ba:83:
aa:f6:2b:35:46:7a:cb:11:e6:d4:72:93:15:93:cf:
23:3b:4a:d4:db:94:fd:54:30:7e:71:e8:9a:71:9d:
8d:8c:c5:dd:f3:52:14:30:32:8d:1a:81:1c:2d:0f:
1a:74:68:a9:ba:f4:67:23:5e:80:8a:0a:7f:f3:b7:
6c:22:ae:8a:aa:e2:fd:73:50:2b:72:48:18:e2:1c:
de:88:1b:3e:f7:7d:09:28:73:71:88:3d:5b:76:bb:
3b:fd:24:f9:9c:34:d1:c6:a0:b9:b6:bd:c6:e3:15:
73:b9:5e:2a:96:7d:40:82:a7:5a:cb:41:75:e7:ab:
64:c3:34:63:ac:ab:99:76:e5:ba:37:00:fe:ee:67:
ef:a5:71:9b:d7:90:73:04:19:52:9a:e5:6e:c8:a9:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:D0:1C:7A:F8:62:11:65:A6:EE:B1:EE:E9:58:C2:B4:4A:CE:6F
X509v3 Authority Key Identifier:
keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/HxHQHHr4YhFlpu6x7ulYwrRKzm8.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:3b8::/32
Signature Algorithm: sha256WithRSAEncryption
79:12:29:fa:10:dc:ea:76:5a:9d:53:d4:87:fe:35:ba:20:78:
ce:03:a1:ae:76:45:63:69:55:a2:aa:a6:4d:51:20:82:24:e2:
b6:70:c4:78:21:38:e2:49:3f:8d:6e:6c:f6:23:d7:96:85:0a:
30:c7:c7:f4:37:59:a8:a4:e1:bb:b3:80:c2:90:06:4b:c3:bb:
94:cb:97:9a:aa:55:4d:79:bf:95:f0:ee:b2:67:74:5e:46:8b:
f3:c4:38:f5:89:46:e4:a1:b5:78:42:a0:d8:09:6c:f0:63:2b:
30:9b:5e:b9:73:92:cf:9f:84:78:37:a5:8c:2d:a1:a3:07:74:
92:2c:51:58:a4:bc:dc:6d:fd:29:e1:af:71:37:b6:1d:a3:42:
c3:c2:a9:ba:e7:2d:04:6d:cb:f1:0e:a9:e2:37:dd:51:36:28:
69:3a:5a:de:5a:4f:4f:23:88:5e:cc:0b:61:c2:17:5b:ab:69:
ca:aa:54:1a:23:f5:84:24:c2:87:02:2a:da:9c:e2:b4:d3:69:
be:b5:90:b9:34:fb:62:b6:0a:b0:07:a7:82:a7:f5:b9:02:31:
1f:90:28:54:bc:98:13:63:42:c2:a1:56:a6:9c:04:ac:0a:88:
43:f4:7c:07:46:b5:63:a2:eb:1c:1b:d0:38:3a:3a:bc:94:7f:
7e:37:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:29 2026 by rpki-client