
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/yaTc8hHuRFbRt2Q5MYJpozHBKDA.roa
File: yaTc8hHuRFbRt2Q5MYJpozHBKDA.roa (raw, json)
Hash identifier: 4oGPyDRlbMyBJQhWWZrWGolOutsGKOJZG3WGwOaM5cU=
Subject key identifier: C9:A4:DC:F2:11:EE:44:56:D1:B7:64:39:31:82:69:A3:31:C1:28:30
Certificate issuer: /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial: 72
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/yaTc8hHuRFbRt2Q5MYJpozHBKDA.roa
Signing time: Tue 31 Mar 2026 07:30:11 +0000
ROA not before: Tue 31 Mar 2026 07:30:11 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 37899
IP address blocks: 2001:a000::/21 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Validity
Not Before: Mar 31 07:30:11 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C9A4DCF211EE4456D1B76439318269A331C12830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:5b:90:a2:6d:12:4a:6c:16:7b:04:63:14:
7b:f8:b4:27:57:c8:fe:7e:3c:1e:58:2d:0e:c7:ab:
44:74:bf:b7:47:a0:0c:db:77:c6:fd:4c:7c:4a:e7:
ed:39:37:80:4b:c5:e0:ef:18:66:d5:91:46:d1:1d:
fe:42:06:e5:36:51:46:47:f6:7d:f9:f1:91:ac:16:
b4:e5:4b:80:77:e4:62:ad:33:d9:32:4e:6f:ee:b1:
e6:0b:a3:ad:54:0d:bb:ac:31:64:f3:94:68:6c:cc:
1c:9f:b7:f6:42:85:d6:3c:12:8e:8f:f1:51:19:a0:
5a:57:49:ab:0c:1e:0a:d2:b9:d2:e6:20:c6:7a:7e:
1f:b3:ed:2b:7e:60:da:84:06:d1:c1:66:d9:dd:b5:
fb:30:f4:a5:62:b0:4e:a8:8f:a3:db:ca:88:8d:c1:
33:40:68:67:43:77:77:d6:00:b8:d7:c7:47:4f:eb:
0c:9e:d4:e5:30:46:17:a3:e5:87:a4:6f:ba:c1:50:
16:cc:92:34:4c:ce:d0:51:74:64:3e:41:50:e4:e5:
62:c0:f8:a9:4b:ab:80:a5:63:67:b0:00:a9:5f:bd:
94:67:8c:21:14:bd:85:36:a2:e9:7e:48:c5:aa:90:
be:da:db:90:c4:32:25:84:00:6c:53:8c:3c:0b:b5:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A4:DC:F2:11:EE:44:56:D1:B7:64:39:31:82:69:A3:31:C1:28:30
X509v3 Authority Key Identifier:
keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/yaTc8hHuRFbRt2Q5MYJpozHBKDA.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:a000::/21
Signature Algorithm: sha256WithRSAEncryption
a5:f0:8b:db:51:d8:66:bd:45:27:9d:b6:f0:ba:64:5f:77:b4:
ff:07:a4:6c:b2:94:fb:c5:a2:09:19:01:9b:bb:27:de:ee:62:
da:c0:3a:4d:8e:e3:93:b6:37:b4:24:75:07:d0:05:b1:68:28:
46:7a:9d:58:2d:7a:34:c8:b0:e4:5b:40:46:23:f6:3d:2a:9f:
a2:d8:b1:ad:4d:ad:7f:00:a5:95:e5:89:9e:6e:cd:eb:b1:f1:
e6:90:12:aa:48:17:67:36:39:fe:70:37:7f:80:2a:d9:40:43:
af:42:20:e4:04:ad:06:41:28:ed:48:57:04:cc:46:55:cc:7e:
39:29:13:07:f0:a0:2b:cb:79:e9:ee:17:64:41:4a:31:19:7a:
30:9e:87:1e:36:c0:e3:5b:51:ee:bf:66:bb:df:96:0a:a7:0d:
75:a6:d3:d9:ab:82:ff:75:47:eb:d7:92:eb:d4:98:29:d1:eb:
9e:39:c6:48:a2:ef:3d:9d:37:9b:85:0b:0d:cb:b4:fc:40:c7:
79:69:b2:32:fb:1f:31:fc:13:e3:b6:a9:2a:ec:f6:b9:3d:2f:
bb:93:ac:a4:fa:b1:2b:a8:be:39:49:66:38:f2:e2:28:5d:4d:
a1:65:b6:0a:e3:46:c2:b2:6d:44:75:6c:ef:64:0a:90:73:c5:
f1:3c:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:42 2026 by rpki-client