
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30180/p5Nxpyh03R6elOUs3fdJcrz-HXM.roa
File: p5Nxpyh03R6elOUs3fdJcrz-HXM.roa (raw, json)
Hash identifier: JRVM+boRWJntPZB7zbxJ1Ad3drg3CS9psold0IDn1UQ=
Subject key identifier: A7:93:71:A7:28:74:DD:1E:9E:94:E5:2C:DD:F7:49:72:BC:FE:1D:73
Certificate issuer: /CN=618932F641D650DC860D7411AC8AEB6C35C89D04
Certificate serial: 24
Authority key identifier: 61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/p5Nxpyh03R6elOUs3fdJcrz-HXM.roa
Signing time: Sun 01 Mar 2026 01:35:33 +0000
ROA not before: Sun 01 Mar 2026 01:35:33 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 7690
IP address blocks: 2407:d600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618932F641D650DC860D7411AC8AEB6C35C89D04
Validity
Not Before: Mar 1 01:35:33 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=A79371A72874DD1E9E94E52CDDF74972BCFE1D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:75:20:55:17:a3:78:fe:6c:49:d9:05:cc:
ab:da:ba:a6:3c:21:55:e2:d1:58:10:49:33:08:ba:
97:46:00:1e:04:b3:8e:5c:76:46:7b:b4:d1:6d:cc:
15:b5:73:ed:0f:13:c6:69:86:9c:44:eb:2c:11:de:
11:75:be:a2:d3:d5:66:29:6b:88:8f:0b:7c:c0:64:
4c:3b:bd:b7:7b:68:fc:0d:da:96:d9:e4:3d:69:48:
64:c8:90:99:7b:55:b4:59:e6:70:9a:86:a4:dd:0a:
74:93:29:5e:f0:55:bc:e1:87:7d:3a:94:d8:cd:29:
1e:f5:23:14:5b:b3:4c:e0:3c:ca:33:f4:51:99:02:
ad:40:97:1d:00:16:da:ff:ab:0e:98:3f:bf:bd:56:
e6:7a:5a:1c:e2:a5:72:72:37:59:5e:f2:ea:6c:ae:
e9:b9:2b:44:c7:ae:6c:fd:f2:37:8e:b2:07:23:c6:
31:d5:74:c0:a3:0a:90:2a:fb:2b:72:c6:1c:5c:24:
58:20:5f:77:14:34:e3:bb:f7:22:d4:f5:c6:0e:1a:
99:48:fc:21:fb:0f:67:19:40:44:78:3e:4c:19:5b:
ae:b4:c6:64:e6:c6:21:8f:95:d8:12:8f:99:03:51:
60:a9:70:e2:c4:b4:45:d5:f1:35:32:6c:d9:12:bc:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:93:71:A7:28:74:DD:1E:9E:94:E5:2C:DD:F7:49:72:BC:FE:1D:73
X509v3 Authority Key Identifier:
keyid:61:89:32:F6:41:D6:50:DC:86:0D:74:11:AC:8A:EB:6C:35:C8:9D:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/YYky9kHWUNyGDXQRrIrrbDXInQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YYky9kHWUNyGDXQRrIrrbDXInQQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30180/p5Nxpyh03R6elOUs3fdJcrz-HXM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:d600::/32
Signature Algorithm: sha256WithRSAEncryption
5d:cf:5c:a6:a0:ff:29:6c:4c:57:e0:81:2e:3b:bb:85:c4:cf:
9c:2a:55:30:27:07:5d:ba:d4:fa:b8:90:92:01:12:60:78:dd:
8f:52:dd:af:a5:70:ee:31:e2:5c:ea:73:85:d9:0d:20:d8:9b:
5b:bf:d0:70:62:5e:15:21:05:95:da:5b:fc:ba:5f:b6:67:d1:
f6:7c:66:29:4d:b4:b0:22:f0:05:d5:0d:2a:55:9c:3c:62:b6:
10:6b:28:bd:f9:e7:98:d3:d8:b6:52:53:82:87:ff:5b:e0:ac:
e3:8c:f7:dc:ca:04:8c:d9:24:04:33:cc:ef:e7:97:3b:6b:14:
45:6e:cc:cd:2d:6f:7e:26:03:d8:2d:23:ad:42:af:52:bd:74:
e6:7a:97:79:68:3e:ad:70:6c:ad:96:35:9a:4c:42:23:36:3d:
fa:2b:b7:d3:d3:23:55:0c:65:01:ea:eb:7b:17:0b:a7:05:14:
d1:d4:60:3d:33:a0:e1:48:f4:fb:99:b5:8f:b0:3b:e7:fb:38:
6c:fe:be:bd:98:31:18:5e:a4:8b:b9:fd:27:11:82:c7:24:d2:
0a:d7:3d:f5:ba:f4:b7:46:95:e7:8b:a7:9e:26:b6:8a:52:71:
ae:a3:f6:18:d9:84:e1:b5:a6:bc:44:1c:d4:e7:ff:5e:06:d0:
2c:67:bc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:03 2026 by rpki-client