
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30146/_bp6dKnskGFcsbZm4cdST917bCY.roa
File: _bp6dKnskGFcsbZm4cdST917bCY.roa (raw, json)
Hash identifier: 1OWYsbOBmXpeXjOm7vb+Wf57hk2wyMbrLVy36kQM9eE=
Subject key identifier: FD:BA:7A:74:A9:EC:90:61:5C:B1:B6:66:E1:C7:52:4F:DD:7B:6C:26
Certificate issuer: /CN=C01D2D78DCAB26D94CD104911B7D2151E628E3F0
Certificate serial: 02
Authority key identifier: C0:1D:2D:78:DC:AB:26:D9:4C:D1:04:91:1B:7D:21:51:E6:28:E3:F0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/_bp6dKnskGFcsbZm4cdST917bCY.roa
Signing time: Tue 24 Feb 2026 09:24:27 +0000
ROA not before: Tue 24 Feb 2026 09:24:27 +0000
ROA not after: Wed 24 Feb 2027 09:07:11 +0000
asID: 38633
IP address blocks: 2403:8e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C01D2D78DCAB26D94CD104911B7D2151E628E3F0
Validity
Not Before: Feb 24 09:24:27 2026 GMT
Not After : Feb 24 09:07:11 2027 GMT
Subject: CN=FDBA7A74A9EC90615CB1B666E1C7524FDD7B6C26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:96:05:a2:ed:ed:2a:fd:cd:a7:d9:09:da:
3b:f0:ed:cd:e8:d7:c9:dc:1e:e9:06:1c:dd:c1:9c:
54:3d:d2:1f:7e:35:4c:29:04:c4:48:7f:39:91:9e:
2b:8e:f8:59:00:43:da:74:b8:4a:75:f8:97:b9:31:
bc:1c:c4:72:ef:12:bf:56:e9:29:00:12:e3:51:ff:
2d:49:68:44:48:ff:fc:cb:ae:f5:3a:a4:0c:60:9f:
2e:da:04:e1:90:05:85:e8:06:f9:55:da:dc:af:1b:
e1:00:cf:c4:45:5c:ba:47:8e:e8:31:e3:e6:9d:a2:
23:ae:a4:5a:1a:21:0f:62:4e:98:0e:68:4c:d8:c8:
de:0f:27:8e:3e:28:55:b5:b8:a8:70:95:e7:d0:3a:
fd:70:9d:11:cf:99:2b:aa:3c:47:c3:96:d5:f2:c9:
3e:d0:db:4a:e3:66:f9:52:01:a8:9e:d3:7b:a6:b1:
f1:05:88:4a:cb:f5:f2:24:10:66:6f:f4:47:fe:ab:
ff:38:65:69:85:af:08:12:6c:50:ce:d7:74:7b:0d:
bf:2a:3c:45:60:83:66:f7:1e:44:e6:4f:dd:c1:b6:
32:b0:9d:88:e3:38:6b:2f:14:46:72:be:0d:62:d5:
e4:41:c9:23:d6:82:b5:8c:12:e9:fb:d5:ad:d4:8c:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BA:7A:74:A9:EC:90:61:5C:B1:B6:66:E1:C7:52:4F:DD:7B:6C:26
X509v3 Authority Key Identifier:
keyid:C0:1D:2D:78:DC:AB:26:D9:4C:D1:04:91:1B:7D:21:51:E6:28:E3:F0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/_bp6dKnskGFcsbZm4cdST917bCY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
83:f6:bd:17:ca:81:d7:88:b5:d8:a4:a0:28:a8:4b:1d:1d:d6:
14:17:f2:aa:c7:fc:9f:c4:de:a3:a5:f6:1b:63:cb:af:54:12:
31:62:c9:fe:07:d5:02:c7:ee:17:54:6d:e9:44:a0:01:5f:ad:
63:6f:e9:4d:07:1b:75:da:cf:38:f5:69:b9:8f:10:c5:0c:92:
98:87:6c:a7:3f:89:0b:83:aa:87:5c:d4:54:c5:07:9b:86:91:
58:70:68:3b:57:10:d3:80:c6:51:6f:f0:2c:44:a0:c7:f0:7e:
f3:37:e1:a7:40:8e:51:64:ce:d7:0a:93:bd:8e:a8:b0:39:5b:
4b:1f:a9:ce:7b:e5:84:44:11:f4:14:f3:0d:f4:58:f4:cb:1f:
71:9e:7b:82:33:e8:3b:73:f3:09:1b:ec:fd:0d:82:e9:cf:35:
48:b0:41:df:9d:e1:06:6a:89:01:a0:04:a1:47:52:ee:5c:e5:
ba:c1:c6:e5:ca:1b:ff:f7:bf:94:b0:5e:20:76:3e:b8:3f:b2:
8e:88:d3:3e:41:10:77:74:cb:01:ad:87:43:50:1f:a5:21:0b:
c4:76:2b:85:09:11:cc:4e:50:f8:93:dc:7b:06:e9:67:36:34:
62:a0:af:8d:3e:b1:15:df:68:b3:51:73:f8:09:f9:df:0a:42:
dc:6e:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:01 2026 by rpki-client