
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/QOJbJkmTOf-a6Qexfl6dZsOvNyY.roa
File: QOJbJkmTOf-a6Qexfl6dZsOvNyY.roa (raw, json)
Hash identifier: 2VLW8aidESsaAmjv2pMSbdwb9fplkbNfZSJOXtuPGdQ=
Subject key identifier: 40:E2:5B:26:49:93:39:FF:9A:E9:07:B1:7E:5E:9D:66:C3:AF:37:26
Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial: 52
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/QOJbJkmTOf-a6Qexfl6dZsOvNyY.roa
Signing time: Tue 31 Mar 2026 08:31:50 +0000
ROA not before: Tue 31 Mar 2026 08:31:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 37901
IP address blocks: 240b:11::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Validity
Not Before: Mar 31 08:31:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=40E25B26499339FF9AE907B17E5E9D66C3AF3726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:94:fc:84:ac:35:46:40:7f:1f:d7:09:d1:27:
a5:e9:29:d9:4f:ed:14:4b:40:29:60:8f:ae:be:c8:
99:f9:67:5d:ba:8a:05:05:4e:7b:ea:61:85:05:3a:
84:6c:b2:75:8d:d0:05:4d:d3:b6:cb:bc:33:31:68:
6a:9a:36:79:27:de:17:e7:e2:29:41:2e:f7:57:c2:
c7:e8:ab:14:a7:90:dd:77:08:a5:00:ec:5a:f0:a3:
a3:ca:fa:e6:6c:6b:65:cb:af:c7:93:9d:8e:3c:f9:
6d:0d:dd:73:57:85:5a:45:a7:e3:04:5b:7d:fd:10:
24:15:07:56:87:47:b6:52:46:8c:e2:ac:5b:c4:d4:
3f:00:40:35:aa:f3:6d:b7:a5:46:1e:2b:b6:9a:48:
0d:71:99:3b:f4:bd:11:df:62:3b:5b:51:9f:2c:b2:
bb:39:1a:43:7e:e3:bd:a4:b0:5a:34:f4:a5:c2:81:
f9:b8:93:91:c5:e4:0a:80:8d:04:26:53:02:8d:51:
49:df:a5:be:ad:71:18:1f:aa:7c:16:41:cb:78:43:
a1:3a:98:72:82:cf:fa:f8:1a:5f:7d:fa:6b:af:a7:
17:96:3e:7e:4a:d7:da:8b:c7:be:3d:6e:2f:16:3a:
f8:54:0d:7b:28:df:d3:69:a4:d3:a5:92:1f:8d:37:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E2:5B:26:49:93:39:FF:9A:E9:07:B1:7E:5E:9D:66:C3:AF:37:26
X509v3 Authority Key Identifier:
keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/QOJbJkmTOf-a6Qexfl6dZsOvNyY.roa
sbgp-ipAddrBlock: critical
IPv6:
240b:11::/32
Signature Algorithm: sha256WithRSAEncryption
6a:1e:b2:35:cf:2d:89:c6:35:68:c1:28:f4:c7:6c:59:c2:b5:
34:fa:a5:af:80:d9:52:85:51:e2:da:8f:1f:77:5b:f5:84:b6:
d2:f2:82:45:1f:b0:4e:a1:bc:fb:c6:98:f6:a4:2b:45:f1:2d:
b0:f2:f8:7f:2b:57:3f:68:8a:1e:b4:98:28:db:2a:73:ff:3d:
e0:37:b9:79:a7:23:ed:67:d3:f8:2e:71:7a:5a:04:29:f5:cc:
28:d3:cc:d9:b7:67:9a:8f:e8:f0:cf:8e:88:e4:d7:d3:79:77:
63:ef:78:d3:ff:30:72:b5:31:01:02:1d:34:83:83:8b:f2:9f:
3b:b8:d2:53:60:35:0a:b7:30:c1:d8:89:8c:50:04:ca:a4:7c:
4b:bc:bd:5e:dc:ce:78:71:91:e7:da:29:c6:64:20:69:35:75:
c3:2d:98:7e:bb:3e:8b:7f:1f:73:ba:aa:d3:09:3a:50:3a:13:
54:fe:3c:28:54:ce:08:65:88:0e:33:29:18:fb:90:a5:cb:7f:
05:21:3b:dc:8c:a6:8a:09:4c:8a:db:a0:7c:d2:9f:ce:5e:39:
90:6a:da:4b:3c:08:b8:74:9e:6d:af:ca:de:6e:8f:3f:6c:e8:
4a:11:16:e5:05:5c:8f:c9:40:73:f2:e5:02:91:54:73:4c:98:
2e:c2:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:46 2026 by rpki-client