
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa
File: Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa (raw, json)
Hash identifier: M5/iOfI4wipf8npqmomSntwBh10RaC8oCYOzbM4GaIM=
Subject key identifier: 66:7D:92:27:54:CC:53:4C:F1:EA:ED:08:FE:A6:94:15:F3:DC:7B:A8
Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial: 24
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa
Signing time: Tue 31 Mar 2026 08:44:39 +0000
ROA not before: Tue 31 Mar 2026 08:44:39 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 16509
IP address blocks: 2404:7a00:f000::/36 maxlen: 128
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Validity
Not Before: Mar 31 08:44:39 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=667D922754CC534CF1EAED08FEA69415F3DC7BA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:70:82:84:6c:e1:ad:ca:e5:39:69:98:ae:
f1:1a:9a:32:fd:40:a1:e8:24:2f:20:df:18:be:75:
7f:f0:40:05:ab:3f:d4:fc:99:cf:20:b9:96:4a:89:
8d:c4:3a:52:3d:59:0a:74:1a:38:e0:1e:cf:51:11:
c8:93:f3:ac:ba:89:b1:9a:b6:38:ad:dc:25:01:15:
18:6c:ce:6b:8b:9d:a1:d1:3b:b3:24:c5:06:6a:dc:
9b:70:f3:a2:51:06:01:f6:dd:a1:cd:b1:18:06:6e:
ea:fe:a4:30:e8:63:ca:81:b1:f1:07:b3:e0:79:d6:
bf:89:0c:8a:a4:92:bb:53:ea:26:e2:4e:f4:e8:7b:
17:11:5a:43:7a:c2:7f:e1:af:f2:4a:21:8a:87:2a:
76:28:a2:f3:fd:36:2b:1a:f5:1f:e7:d7:73:5c:31:
fa:c8:67:4f:15:33:c5:02:4b:82:24:19:e3:3d:4d:
00:f1:66:88:34:ef:72:a6:b2:68:b1:bc:74:cb:8d:
7b:93:f1:71:d4:89:f8:cd:42:5c:70:c7:6d:88:dd:
5a:29:8a:60:3e:6a:f3:43:84:b8:f1:f3:d2:0d:e0:
71:8a:7b:9f:49:17:ae:cd:1e:ae:53:a0:5d:9d:27:
8c:10:55:38:a2:d9:bb:2a:6a:35:d7:00:d9:59:d8:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:92:27:54:CC:53:4C:F1:EA:ED:08:FE:A6:94:15:F3:DC:7B:A8
X509v3 Authority Key Identifier:
keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:7a00:f000::/36
Signature Algorithm: sha256WithRSAEncryption
10:45:f6:79:39:bf:4f:24:f4:04:93:19:c4:41:d3:47:65:18:
55:cf:cc:7a:0f:c0:1c:0b:ce:3b:a4:10:67:a3:fe:ab:ce:e4:
37:04:e8:b8:b3:71:a4:16:d9:3f:94:b9:3f:b0:36:bf:46:fe:
cc:26:26:67:4f:5c:0e:22:93:ac:fa:da:17:72:a6:27:cd:e5:
8a:b4:b2:69:cc:78:37:ac:4c:7e:3e:3e:c6:cc:52:b6:08:c8:
6e:03:8a:3c:b2:6e:54:4f:9a:65:d9:10:a1:60:9b:c6:be:d0:
85:ca:1f:4b:cc:40:7f:46:bf:9d:8f:56:0c:0e:17:ef:10:4f:
03:de:13:a4:c3:cf:10:d7:0b:9b:53:38:2d:b9:61:2c:70:3e:
5f:72:13:e7:1a:ab:1c:26:5d:64:d8:f7:de:de:6c:e9:9b:f1:
45:3f:b5:50:de:f5:60:7b:91:e9:d4:63:db:9d:0f:51:75:47:
cb:6d:bd:5a:c4:d4:07:68:90:b5:8c:7f:9a:bc:84:ca:75:2d:
14:01:9b:bb:a5:24:79:a4:6f:88:f3:c0:b7:e0:8e:b0:56:5f:
a1:c1:76:d0:ed:4a:59:6a:04:b6:06:67:e4:20:da:24:c6:af:
e9:bc:47:45:90:bc:5d:be:54:bd:54:ff:2a:25:36:4e:41:29:
6d:ea:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:13 2026 by rpki-client