
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30058/9xYpWvBWbWpUlAVymeteG5RdKss.roa
File: 9xYpWvBWbWpUlAVymeteG5RdKss.roa (raw, json)
Hash identifier: nRTt28KgH5zyQSWt7ze5J9zKDgz11O1oUL7zKfXhQ1w=
Subject key identifier: F7:16:29:5A:F0:56:6D:6A:54:94:05:72:99:EB:5E:1B:94:5D:2A:CB
Certificate issuer: /CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Certificate serial: 67
Authority key identifier: A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/9xYpWvBWbWpUlAVymeteG5RdKss.roa
Signing time: Tue 31 Mar 2026 07:29:59 +0000
ROA not before: Tue 31 Mar 2026 07:29:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18126
IP address blocks: 2001:f58::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A194A83C9C6F404F79F5CDEB8CFE1147F54F21E0
Validity
Not Before: Mar 31 07:29:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F716295AF0566D6A5494057299EB5E1B945D2ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:f2:fd:b0:ef:3b:86:56:6c:45:7f:1a:f9:
3d:52:b0:16:9d:ef:03:cd:24:e5:d0:bc:d2:f1:f3:
90:a5:42:c7:a9:ef:0c:d4:4a:5c:91:b1:7d:10:0b:
2d:0e:b9:cb:6f:8d:cb:2c:86:b5:70:dd:79:22:5a:
46:fa:fd:aa:50:d7:66:68:18:9a:49:d4:89:06:e3:
ba:3b:8f:76:d6:48:78:f2:54:39:a0:01:43:55:65:
d8:6f:8e:b2:db:7d:7a:b6:7b:2d:90:76:b3:33:d8:
44:48:8e:dd:d8:5c:7a:8f:33:dd:cb:37:3b:76:9b:
5a:16:0d:68:8a:76:69:2f:b3:72:ac:63:ce:f1:f6:
f7:26:43:32:99:b6:e6:45:d3:56:e5:46:ee:0c:01:
54:7c:53:17:67:5e:52:5a:bc:ca:3c:34:5a:63:0c:
47:59:41:b3:54:8a:18:22:7d:da:fc:9a:7a:b4:65:
e7:f9:38:a9:14:91:a5:39:68:f3:06:3e:9e:b6:02:
94:b1:d1:07:0a:02:57:53:24:90:cf:d1:34:ee:08:
a4:5c:69:8a:a0:be:b4:3e:33:ea:7b:9e:37:20:22:
a3:bf:aa:e2:ed:75:6d:b6:9a:37:6a:72:82:7b:9e:
8c:1d:91:2e:39:31:cd:c2:fc:71:f8:15:4f:ff:b5:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:16:29:5A:F0:56:6D:6A:54:94:05:72:99:EB:5E:1B:94:5D:2A:CB
X509v3 Authority Key Identifier:
keyid:A1:94:A8:3C:9C:6F:40:4F:79:F5:CD:EB:8C:FE:11:47:F5:4F:21:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/oZSoPJxvQE959c3rjP4RR_VPIeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oZSoPJxvQE959c3rjP4RR_VPIeA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30058/9xYpWvBWbWpUlAVymeteG5RdKss.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:f58::/32
Signature Algorithm: sha256WithRSAEncryption
68:44:91:c6:e6:d5:8d:cd:93:a1:88:5c:24:41:ff:5d:c5:b4:
8e:69:c0:6c:85:23:ab:83:4b:be:59:21:2d:26:96:2c:a5:7e:
16:04:a2:44:4c:c6:4c:9d:05:be:6b:49:e1:7b:ba:76:99:bc:
a9:08:2e:e6:87:2d:8a:9d:a3:ce:67:de:38:a9:31:65:fa:ca:
68:28:f0:a8:db:4e:35:85:18:c8:8c:80:5d:38:1a:36:cf:d2:
40:67:1b:aa:32:21:a1:e0:64:70:e0:36:35:15:04:64:70:5b:
58:55:84:04:e8:51:ca:c7:3f:25:48:37:5e:8d:0a:b3:68:97:
17:77:f0:ef:e9:d3:0e:07:bf:71:81:5c:ea:29:a1:70:7b:85:
70:86:f5:73:89:ff:3d:3c:69:6e:7c:d0:92:e3:c6:82:95:ed:
fd:76:6d:8c:e9:37:2e:92:2d:83:54:34:8f:c1:f2:6e:52:ea:
de:40:aa:d5:d8:2b:37:7b:85:8f:c7:22:e4:c8:7b:89:4d:8d:
0f:99:ab:2e:02:53:de:d0:a6:bc:86:2b:0b:9b:f3:18:2a:9c:
fd:99:cd:54:d2:e8:24:c0:4c:46:74:27:97:90:c0:c3:78:f6:
db:ef:c9:47:c0:dd:db:f8:31:79:08:09:53:05:73:41:9f:b1:
69:b9:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:12 2026 by rpki-client