
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30174/og79rrgSBeA0PtcBO4RAT-0_rLs.roa
File: og79rrgSBeA0PtcBO4RAT-0_rLs.roa (raw, json)
Hash identifier: +DvokLZAyqgzwCMRy/O3p07JKY0Gx205iH5l3V1o6iE=
Subject key identifier: A2:0E:FD:AE:B8:12:05:E0:34:3E:D7:01:3B:84:40:4F:ED:3F:AC:BB
Certificate issuer: /CN=9BAE2C031854C1BB113CA365128A6D488C1A99C3
Certificate serial: 23
Authority key identifier: 9B:AE:2C:03:18:54:C1:BB:11:3C:A3:65:12:8A:6D:48:8C:1A:99:C3
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/og79rrgSBeA0PtcBO4RAT-0_rLs.roa
Signing time: Sun 01 Mar 2026 01:35:19 +0000
ROA not before: Sun 01 Mar 2026 01:35:19 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 23629
IP address blocks: 2406:d200::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 22:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BAE2C031854C1BB113CA365128A6D488C1A99C3
Validity
Not Before: Mar 1 01:35:19 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=A20EFDAEB81205E0343ED7013B84404FED3FACBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5c:8b:63:da:54:2a:49:80:32:15:6e:e4:95:
c3:01:7c:a5:00:24:85:69:88:65:d7:29:39:18:3b:
65:64:9e:9c:6b:b6:90:d5:60:6d:2b:32:ce:54:83:
6e:9f:75:a9:1a:c3:11:54:03:c3:df:1d:53:7c:93:
6b:49:37:1c:8f:54:f8:26:59:d4:42:51:6e:29:6e:
65:b9:23:f0:2a:e4:67:65:5c:d7:0f:e7:90:69:c9:
30:22:6d:cd:d8:5d:a1:56:a9:02:e9:ed:c8:4e:bd:
fd:3d:ea:29:b9:6f:3a:11:4d:a6:98:ab:e4:cb:d7:
25:b9:29:db:8a:a2:fd:c5:f5:59:cd:27:09:6d:67:
95:ee:76:b4:ce:e7:0c:88:bf:9e:0a:f0:5b:cf:ac:
38:bd:a4:a2:f6:9a:d2:bb:95:70:c1:09:13:ae:f6:
f8:c5:e4:4b:db:ef:79:6f:fa:f3:08:2a:46:1f:51:
23:66:5d:81:a4:71:48:ac:bb:56:a8:15:05:7a:86:
5d:e1:27:25:38:b5:16:bd:33:d2:da:27:01:d2:eb:
fd:2b:1e:b3:34:22:cb:72:f0:c1:c2:51:de:f6:60:
54:6b:ac:35:31:81:42:ff:7a:09:e9:4d:00:88:a7:
79:23:36:95:52:fa:06:3b:19:05:6f:68:cc:6b:1d:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0E:FD:AE:B8:12:05:E0:34:3E:D7:01:3B:84:40:4F:ED:3F:AC:BB
X509v3 Authority Key Identifier:
keyid:9B:AE:2C:03:18:54:C1:BB:11:3C:A3:65:12:8A:6D:48:8C:1A:99:C3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/m64sAxhUwbsRPKNlEoptSIwamcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m64sAxhUwbsRPKNlEoptSIwamcM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30174/og79rrgSBeA0PtcBO4RAT-0_rLs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:d200::/32
Signature Algorithm: sha256WithRSAEncryption
72:7f:f3:71:a3:bb:7b:d5:ac:57:95:87:29:06:bb:8c:1b:58:
7a:c7:ba:15:87:27:84:d4:93:a6:19:54:6e:8e:63:1e:56:cd:
53:2b:70:56:ff:30:03:22:bc:f1:62:3a:61:93:f4:8b:ab:d4:
7f:b6:87:eb:79:6a:3a:29:09:63:4d:16:30:d8:6f:d9:ed:47:
77:87:0d:90:4c:ea:9c:17:f6:0a:3d:be:97:52:00:39:ca:b7:
18:63:f7:22:53:fc:2a:06:4a:5c:be:be:7a:12:e7:5b:dd:d6:
af:8f:d1:2b:66:db:fa:69:b4:74:6f:c9:c5:75:29:d1:ff:d6:
95:37:27:9b:a5:4d:6c:bf:83:24:62:30:d1:68:f9:e0:03:cb:
a8:f7:f9:c3:f6:4d:4c:4a:80:24:25:51:91:42:37:98:7b:54:
f8:3d:4b:02:17:26:16:65:72:fd:65:3e:7b:55:74:85:59:72:
d1:18:8f:e4:fd:a0:99:58:16:d8:c9:e6:63:f3:86:7b:80:71:
73:35:49:95:f2:87:eb:be:80:fe:32:40:7a:6c:67:16:5a:99:
63:9b:7a:7c:93:1d:eb:a2:43:72:42:04:92:b6:7f:0e:3d:2c:
81:f8:06:c5:c3:6c:98:e2:76:98:16:3c:d2:70:e8:37:c7:25:
f3:5a:37:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:23:26 2026 by rpki-client