
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30113/2Fgq5yO9sEISWrE57GhxAYvKjJY.roa
File: 2Fgq5yO9sEISWrE57GhxAYvKjJY.roa (raw, json)
Hash identifier: iUxKgnNgDWvBt3TKp6bbhNo3+b6ycKMX+YdGESKxaq0=
Subject key identifier: D8:58:2A:E7:23:BD:B0:42:12:5A:B1:39:EC:68:71:01:8B:CA:8C:96
Certificate issuer: /CN=D22994879C258123FFA097E84E05375F60A591A5
Certificate serial: 1F
Authority key identifier: D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/2Fgq5yO9sEISWrE57GhxAYvKjJY.roa
Signing time: Tue 03 Feb 2026 15:21:35 +0000
ROA not before: Tue 03 Feb 2026 15:21:35 +0000
ROA not after: Fri 15 Jan 2027 01:30:02 +0000
asID: 131971
IP address blocks: 2407:9900:4000::/34 maxlen: 35
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D22994879C258123FFA097E84E05375F60A591A5
Validity
Not Before: Feb 3 15:21:35 2026 GMT
Not After : Jan 15 01:30:02 2027 GMT
Subject: CN=D8582AE723BDB042125AB139EC6871018BCA8C96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:0a:27:6c:29:6e:11:c5:de:3d:0e:08:82:
4e:db:ec:b7:b9:a3:c4:8f:0c:75:39:cd:9e:84:63:
33:a7:5c:ed:4c:2b:59:79:c5:ba:f9:28:14:c7:46:
a0:74:f1:04:c4:b9:af:a1:4d:a9:35:ae:2c:60:40:
d7:5a:4f:83:95:44:56:b3:4d:c2:bf:d9:60:bb:03:
fe:5d:aa:07:a5:d2:56:68:3d:3d:d2:95:78:31:8a:
bd:8c:e1:b9:58:e6:2c:8e:4c:c2:b6:b2:2a:27:4d:
d9:9d:02:66:0e:5f:cc:d6:45:2f:72:00:a4:1a:ee:
f5:f6:86:72:e1:55:83:74:6e:fc:9c:eb:07:f8:e9:
e3:78:af:78:36:ef:9e:7d:7d:bc:ec:a3:76:c4:d4:
db:b7:23:73:39:6f:c3:ae:e6:50:58:f1:c4:59:1a:
8b:af:5c:61:2c:df:62:01:e1:68:15:12:a7:e9:67:
97:0e:5f:3c:56:00:81:74:8a:ae:2a:90:25:56:37:
3c:a4:1a:dd:16:c8:73:54:4f:a7:a9:b6:5e:56:d9:
71:e6:2c:ce:8f:dd:5d:ab:9f:f2:22:90:3a:11:a0:
c3:67:1d:06:1f:c5:03:0e:e4:cc:34:8d:e5:26:96:
16:9f:9f:79:7b:46:55:a1:ef:7a:7f:24:3d:bb:4f:
4c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:2A:E7:23:BD:B0:42:12:5A:B1:39:EC:68:71:01:8B:CA:8C:96
X509v3 Authority Key Identifier:
keyid:D2:29:94:87:9C:25:81:23:FF:A0:97:E8:4E:05:37:5F:60:A5:91:A5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/0imUh5wlgSP_oJfoTgU3X2ClkaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0imUh5wlgSP_oJfoTgU3X2ClkaU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30113/2Fgq5yO9sEISWrE57GhxAYvKjJY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:9900:4000::/34
Signature Algorithm: sha256WithRSAEncryption
6f:88:ec:a4:f2:9d:f5:5c:d1:fa:97:cd:d4:9c:4d:b0:cc:94:
38:7f:86:78:a1:6b:fb:8b:cc:f4:d6:d6:14:3c:a9:30:37:fc:
b3:54:3e:30:91:99:bc:2e:0f:4e:8d:be:28:e3:d8:34:31:38:
2d:dc:a4:48:6e:df:b9:83:f5:be:06:98:dd:76:98:e8:e8:8a:
46:f7:25:2e:52:bf:fc:d1:be:8e:86:07:e0:1d:6f:76:2c:a0:
01:7b:64:8b:65:18:3c:7a:dc:02:7d:cb:23:1f:b4:27:fa:eb:
ac:26:99:49:35:e1:ff:66:29:94:a5:fc:a3:83:33:76:be:8d:
56:6c:99:3c:2b:c2:ec:cc:37:3e:e9:5c:70:3a:34:33:be:ce:
aa:24:e5:af:af:bf:da:e4:91:1c:4b:4b:a7:2f:c5:53:71:5d:
38:60:12:13:08:85:b1:11:6c:bd:30:79:31:54:67:b5:c7:13:
2e:a2:76:33:ae:1a:65:7b:29:89:bb:43:4f:4b:29:18:0f:27:
a1:c2:b5:c8:18:31:5d:88:8c:a2:e1:7b:73:bc:29:b1:59:fa:
49:bf:33:a9:99:d5:5b:4b:c0:be:6d:a5:80:3c:9a:41:81:9d:
39:37:54:b0:c8:3d:37:60:ca:1f:c5:14:b6:e3:cf:45:85:16:
a4:73:35:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:41 2026 by rpki-client