
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/zGRrLsJRa_r9f0IdHktyEMI8JJM.roa
File: zGRrLsJRa_r9f0IdHktyEMI8JJM.roa (raw, json)
Hash identifier: H1RAnVIEhE8WEh/ffYCT1YU2FGMDZh+m6w9hbSvllcA=
Subject key identifier: CC:64:6B:2E:C2:51:6B:FA:FD:7F:42:1D:1E:4B:72:10:C2:3C:24:93
Certificate issuer: /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial: 72
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/zGRrLsJRa_r9f0IdHktyEMI8JJM.roa
Signing time: Tue 31 Mar 2026 07:29:50 +0000
ROA not before: Tue 31 Mar 2026 07:29:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 55392
IP address blocks: 2409:250::/28 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114 (0x72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Validity
Not Before: Mar 31 07:29:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CC646B2EC2516BFAFD7F421D1E4B7210C23C2493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:30:58:7e:a3:d0:1d:c2:2d:05:8c:07:9f:
d5:79:1a:76:f7:33:c7:52:9e:90:da:00:49:5c:a1:
3a:37:49:93:53:69:31:af:11:f4:1d:01:d1:75:04:
73:2f:9b:c3:c8:5b:8a:c7:04:63:38:a7:a5:09:12:
1d:12:c1:7e:ec:49:2c:05:d8:c7:82:a2:ff:70:62:
1c:7f:55:fe:01:b6:0d:bc:e2:72:2b:96:55:19:39:
3f:4b:b5:ac:6e:84:41:9b:e6:1c:0d:06:91:c2:85:
2f:e8:86:5a:16:ac:6d:43:d8:78:66:08:ac:81:bd:
21:ec:46:65:eb:77:46:ad:0e:cd:07:ec:c7:1f:21:
cb:8e:be:68:e2:6f:6c:b9:e5:34:a1:c5:db:45:02:
2c:6a:ff:6c:7a:41:f1:2a:6d:91:89:9b:68:91:7b:
bb:54:ac:ff:6d:05:87:c4:ad:08:a1:e6:ea:08:e2:
c2:ff:59:f7:4b:f6:44:e3:ca:8a:1b:ba:34:f6:1f:
e7:36:6f:e6:f6:a0:9d:9a:e0:17:5e:e5:e1:09:96:
8e:b8:74:30:0e:7f:05:f8:46:2c:a5:78:8b:84:1c:
17:e0:d5:25:46:02:34:55:6c:b6:e8:33:1a:02:1f:
7f:15:8d:8b:ac:1b:0c:5d:00:2e:87:0d:46:94:2d:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:6B:2E:C2:51:6B:FA:FD:7F:42:1D:1E:4B:72:10:C2:3C:24:93
X509v3 Authority Key Identifier:
keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/zGRrLsJRa_r9f0IdHktyEMI8JJM.roa
sbgp-ipAddrBlock: critical
IPv6:
2409:250::/28
Signature Algorithm: sha256WithRSAEncryption
99:70:6f:c9:94:f0:10:d7:ce:aa:91:f4:d4:42:de:db:b1:5a:
54:a6:d7:8f:d0:b1:45:8b:aa:5c:4c:df:2d:76:1d:d2:30:a2:
93:2f:74:b7:9e:26:00:cf:ab:4e:68:9b:b8:32:e7:f0:12:26:
ee:30:74:6e:c5:31:37:82:7c:f4:d9:fb:4b:17:c5:a8:4f:03:
16:3b:dc:1e:77:6d:3e:22:92:58:5e:84:07:f3:2c:0a:cb:04:
cf:ec:a5:37:a9:24:05:46:02:5a:05:14:ed:11:4b:e7:7b:be:
43:4f:7b:aa:7b:a4:9a:34:39:06:53:87:62:24:f8:a6:04:e1:
6b:ca:75:9d:dc:e7:4f:10:3c:44:e8:0b:26:99:a9:eb:b7:74:
c8:c6:37:aa:aa:d6:c1:bb:a5:4b:14:53:1e:d7:01:d1:e9:9b:
32:9f:b8:67:0a:45:3a:6a:da:43:29:34:a4:89:c8:43:6f:42:
0c:55:88:66:3c:cb:f1:45:d9:f4:8d:a5:8b:23:79:92:d7:8c:
5b:a7:d8:8a:a3:1a:5a:d7:4c:6a:49:20:34:f7:05:13:41:96:
e0:a4:06:63:4f:0e:ad:59:e4:05:20:94:d4:88:26:e2:4a:b1:
9c:e6:ea:a4:91:44:1b:13:5c:0e:66:46:77:ef:7b:c6:90:d9:
ae:95:06:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:10 2026 by rpki-client