
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/x9gFd75EuxcYRnFyhpw7y4uOZ2o.roa
File: x9gFd75EuxcYRnFyhpw7y4uOZ2o.roa (raw, json)
Hash identifier: 9YQYV+jHeWeO6mFOks/LkYIDtKmXqRk2+hzLLazmObE=
Subject key identifier: C7:D8:05:77:BE:44:BB:17:18:46:71:72:86:9C:3B:CB:8B:8E:67:6A
Certificate issuer: /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial: 60
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/x9gFd75EuxcYRnFyhpw7y4uOZ2o.roa
Signing time: Tue 31 Mar 2026 07:39:24 +0000
ROA not before: Tue 31 Mar 2026 07:39:24 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 2527
IP address blocks: 240d::/27 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Validity
Not Before: Mar 31 07:39:24 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C7D80577BE44BB1718467172869C3BCB8B8E676A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:aa:8d:c3:1e:02:62:5f:be:39:5a:44:a8:
f4:88:88:7f:a1:e3:23:13:d4:c2:a1:1e:35:3d:53:
4c:5a:4a:0a:45:af:b6:e3:60:ee:b1:9d:4c:0d:11:
fd:8d:24:2e:e5:ea:03:6b:c5:d4:42:12:b0:ed:f0:
39:ec:59:d1:02:0a:98:5c:08:cb:91:3b:da:aa:9d:
56:ab:7d:e0:0d:b4:58:12:e2:12:74:8d:5c:bf:c5:
17:7b:15:31:a5:73:ee:c9:66:a1:9d:e8:1b:c5:d7:
c4:b6:a5:a6:f9:bc:27:cd:82:76:cc:83:bb:d5:1c:
ab:ab:9f:b0:b7:66:0d:66:b9:ae:48:ed:1d:ce:dc:
2e:ec:04:07:98:2f:03:40:40:3e:b7:9e:9d:35:5b:
d7:20:b5:7a:ef:30:85:b5:ac:4e:bd:ee:2f:7d:98:
8a:fe:2d:4c:65:1b:52:07:1e:90:e9:67:be:ef:32:
cb:4f:64:6b:7c:bb:6a:d2:6b:71:e8:62:7e:d7:a1:
29:55:c4:87:2a:9d:49:45:63:a5:cc:9c:0e:57:d4:
15:2c:2c:1c:15:b2:8d:40:3b:73:32:aa:40:c5:9c:
bf:f4:d1:5e:55:cd:46:59:3b:65:7f:92:94:ee:bc:
33:46:dc:83:48:7c:00:b7:55:66:80:d7:bb:33:b5:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D8:05:77:BE:44:BB:17:18:46:71:72:86:9C:3B:CB:8B:8E:67:6A
X509v3 Authority Key Identifier:
keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/x9gFd75EuxcYRnFyhpw7y4uOZ2o.roa
sbgp-ipAddrBlock: critical
IPv6:
240d::/27
Signature Algorithm: sha256WithRSAEncryption
1e:c9:3a:de:b8:93:d4:6f:73:a3:0b:af:ea:2e:03:fb:50:c5:
71:1a:bb:27:f6:71:78:61:39:f2:f5:4e:94:d7:0c:ee:47:57:
87:ff:ea:e2:a0:28:bc:09:af:41:34:18:a8:83:21:75:59:c0:
36:d6:d0:0d:c7:3d:2a:08:92:85:de:21:f1:cf:8a:4e:cd:16:
28:ef:77:ae:df:cf:e7:c5:93:51:ff:16:da:b3:af:86:43:2d:
04:6d:f7:2c:64:10:dd:a7:d8:67:c3:e0:3a:9a:30:87:50:10:
4e:0e:24:d1:3c:45:da:03:f7:7f:3c:b6:07:35:96:b2:84:66:
0f:5d:43:c4:0d:50:fc:5a:6e:9d:ac:f4:a4:c5:3f:17:9d:96:
a3:b3:e4:21:49:28:f8:42:a4:5d:4b:5a:90:e6:27:41:53:b2:
96:e8:21:12:7d:02:64:42:f7:19:01:f4:48:87:a0:6d:aa:2b:
0c:1a:02:0d:b5:ba:2a:5f:ff:09:1d:c3:6e:6f:65:03:7e:ba:
e1:c5:c3:7a:81:2e:f9:69:cc:da:0b:38:a6:be:f5:c4:82:49:
05:d4:8f:c4:c2:1d:bd:4c:16:50:7e:49:ca:e1:c4:f9:ed:92:
73:c7:ec:db:ce:bd:ab:7a:fa:4f:78:95:fd:1e:a6:c0:35:d2:
d8:64:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:27 2026 by rpki-client