
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/vV7AoLFlTWrCFY6hwXHgkxFLAws.roa
File: vV7AoLFlTWrCFY6hwXHgkxFLAws.roa (raw, json)
Hash identifier: URPr3pWkqf5DBiYyXoH7RFxU+85SFP0jFgfVXWAKE8g=
Subject key identifier: BD:5E:C0:A0:B1:65:4D:6A:C2:15:8E:A1:C1:71:E0:93:11:4B:03:0B
Certificate issuer: /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial: 85
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/vV7AoLFlTWrCFY6hwXHgkxFLAws.roa
Signing time: Tue 31 Mar 2026 07:38:00 +0000
ROA not before: Tue 31 Mar 2026 07:38:00 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9370
IP address blocks: 2406:ce00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Validity
Not Before: Mar 31 07:38:00 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BD5EC0A0B1654D6AC2158EA1C171E093114B030B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:97:21:f6:cc:a3:7d:5e:75:86:b7:a8:08:
0d:50:a0:35:02:8a:cf:12:35:c5:f4:86:56:2d:76:
c6:2d:fa:57:b9:2d:01:c8:a9:b1:98:38:5c:c8:0d:
97:21:ea:71:79:d1:ab:72:fb:bf:51:5d:cf:55:85:
9b:23:e6:07:a6:6d:cd:ed:a2:db:fe:4f:e0:f7:2c:
cd:eb:f7:0d:b4:b3:6b:c9:92:c7:10:0e:b6:1a:09:
cb:77:ee:e6:31:4d:5b:f7:30:3a:83:5a:01:2a:96:
8c:79:ae:24:91:36:71:c1:bb:2f:57:e2:29:bc:13:
9f:7f:15:2c:5c:5e:17:03:31:4a:c5:5e:de:07:fd:
e7:c2:4b:83:82:f7:de:4f:48:d2:af:59:96:b4:3d:
a8:3a:b1:9b:87:7f:b4:17:fa:d5:a7:d7:ba:85:b9:
77:a3:06:88:a4:50:41:12:3c:73:b8:53:25:d2:12:
8b:7c:73:18:45:90:d4:1f:8c:3c:c9:6b:27:52:31:
11:12:c0:73:18:fb:4c:25:c3:4a:ba:8e:10:cd:ea:
53:32:8c:3d:7c:26:c2:e8:27:96:d5:ca:3d:d4:d3:
b2:0a:08:30:53:a6:07:f6:1b:ad:af:8f:84:98:ba:
95:8d:fb:7c:1b:24:e7:56:74:c4:d6:5b:5f:a7:c5:
9a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5E:C0:A0:B1:65:4D:6A:C2:15:8E:A1:C1:71:E0:93:11:4B:03:0B
X509v3 Authority Key Identifier:
keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/vV7AoLFlTWrCFY6hwXHgkxFLAws.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
94:8f:f0:81:be:ff:01:75:79:d0:5a:82:0b:0a:47:f1:b5:ef:
ea:f1:3a:3b:ad:f1:49:f4:1f:68:c5:da:15:03:31:d3:73:68:
af:cd:13:58:e2:8b:83:1e:05:ee:0a:68:ac:70:e5:4f:32:6c:
96:96:a6:85:58:e9:80:48:b8:13:89:8c:0c:20:04:4f:73:f7:
cb:e8:e0:ae:5c:d5:9b:85:d9:5a:64:fe:d9:91:46:02:49:20:
b4:d3:83:4d:1f:dc:e6:b2:f3:e2:45:47:ef:e6:4d:e6:8b:13:
01:e8:01:c5:db:b9:e2:8e:4a:de:ec:2a:8b:e2:ed:13:56:84:
f6:e8:1b:36:b4:e1:f7:51:bf:6d:c3:34:12:f5:c0:c7:e4:fe:
13:ed:c7:29:82:d1:7d:78:b5:9e:1a:18:92:cf:56:61:f7:43:
01:23:13:60:ba:fd:57:d1:70:42:ad:47:8e:26:13:b3:41:a1:
84:05:69:6a:8c:ef:93:8d:0d:39:de:80:12:a3:05:41:32:a4:
37:63:62:69:2a:01:53:7b:98:8a:a5:86:82:8e:83:4c:05:54:
05:c2:e9:12:1b:82:57:fc:05:08:42:4f:bb:5f:00:16:57:a7:
e4:2c:9e:6e:b4:d8:79:2c:24:6e:75:ba:ec:19:6d:89:49:61:
bd:73:70:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:03 2026 by rpki-client