
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30065/k39UZTGw8MMgso8QUpbN-0WBN-E.roa
File: k39UZTGw8MMgso8QUpbN-0WBN-E.roa (raw, json)
Hash identifier: oxLbdj4R35Waf+1JEpFiMKkp+FvDnqkx2PcuebX7AsQ=
Subject key identifier: 93:7F:54:65:31:B0:F0:C3:20:B2:8F:10:52:96:CD:FB:45:81:37:E1
Certificate issuer: /CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
Certificate serial: 2F
Authority key identifier: 5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/k39UZTGw8MMgso8QUpbN-0WBN-E.roa
Signing time: Tue 31 Mar 2026 08:35:25 +0000
ROA not before: Tue 31 Mar 2026 08:35:25 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4685
IP address blocks: 2405:6580::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3
Validity
Not Before: Mar 31 08:35:25 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=937F546531B0F0C320B28F105296CDFB458137E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:54:20:7c:26:22:fa:9f:4f:bf:4b:a3:3c:
8d:81:6e:43:52:84:03:57:f0:89:38:bb:48:97:af:
46:96:44:1a:35:bf:3c:0d:e3:e5:39:f6:87:8b:25:
de:18:bd:b4:90:c2:94:7b:c0:df:6d:0c:01:d9:3f:
6d:cb:6d:52:bf:1d:69:f7:8f:93:c8:cb:dc:43:cb:
aa:5c:b6:0b:21:2f:16:85:e7:af:5c:f4:35:52:ea:
a6:69:87:05:d8:94:f3:22:71:55:6c:f2:5c:f4:2c:
a6:df:c3:dd:d7:ff:55:91:00:9a:3b:c8:30:0b:0b:
96:c9:ee:3c:85:d7:8f:2d:26:21:93:83:57:f8:ad:
a4:36:ac:85:46:29:01:2c:d9:d3:6a:72:b2:31:7a:
0e:88:a5:65:82:d0:39:90:06:12:80:61:55:f0:e4:
26:75:04:93:8d:64:ce:d8:d8:56:3d:fc:ca:26:09:
41:ec:a7:b6:67:05:7e:5e:2e:e0:d9:ad:6f:ef:e1:
e0:f9:b9:ea:a3:56:21:2a:27:dc:b2:f5:04:0d:a7:
a7:97:24:d1:81:f0:13:1d:09:33:cf:1d:69:c4:46:
11:90:6a:2d:66:87:bc:d6:53:04:a8:3f:dd:b2:f1:
82:01:70:d6:2a:a7:be:a1:7c:56:d6:38:cb:1f:98:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7F:54:65:31:B0:F0:C3:20:B2:8F:10:52:96:CD:FB:45:81:37:E1
X509v3 Authority Key Identifier:
keyid:5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/k39UZTGw8MMgso8QUpbN-0WBN-E.roa
sbgp-ipAddrBlock: critical
IPv6:
2405:6580::/29
Signature Algorithm: sha256WithRSAEncryption
cf:84:da:19:80:0d:8a:a7:cf:e4:43:c1:62:59:1e:ce:24:fc:
30:06:0d:f7:4e:93:15:38:0e:e3:3d:4b:a3:12:58:e6:92:92:
00:7f:a9:c6:5b:20:a3:68:d7:e3:ec:1f:07:08:ed:c5:28:03:
05:2c:de:6a:06:6f:a5:29:68:3c:ab:02:9d:dd:06:77:90:04:
f1:b7:d8:ac:df:7a:af:03:33:99:aa:a8:9a:94:46:7f:ed:0b:
ad:35:9c:a8:08:51:f7:ed:08:20:19:45:62:51:c1:b5:ff:3b:
93:63:96:ac:e1:87:ef:ee:6b:ad:7e:06:69:1d:12:f0:57:ba:
56:9f:b0:13:45:c2:80:00:7a:ce:c7:89:02:8c:0c:38:00:fb:
70:a3:6e:94:70:f1:cd:1c:20:82:35:5c:b7:67:cf:5c:21:7f:
07:35:e2:eb:0a:43:d8:47:58:6b:12:25:94:c6:af:a1:e6:eb:
7a:fb:30:06:1b:17:f6:19:a7:7f:9f:cf:5d:3d:ec:f0:29:7c:
f0:e6:f6:09:10:24:86:74:f6:a1:d3:f5:05:19:a7:3f:83:42:
50:54:f8:64:ab:27:75:10:5a:e7:ab:ae:99:51:15:95:e5:a9:
be:b4:f9:0a:b7:b6:28:be:6b:e5:bc:2a:8a:e0:e2:c6:2e:f7:
1d:04:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:51 2026 by rpki-client