
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30209/O6IM0cBx849zOGQwKq9D4xdX9HI.roa
File: O6IM0cBx849zOGQwKq9D4xdX9HI.roa (raw, json)
Hash identifier: SKDHlnh4kuSZ9b9iK9Ob8rPFYRloOqgZN2wOmQsWh48=
Subject key identifier: 3B:A2:0C:D1:C0:71:F3:8F:73:38:64:30:2A:AF:43:E3:17:57:F4:72
Certificate issuer: /CN=E8AA602E736E188CCAE42462762C3776F85B7937
Certificate serial: 23
Authority key identifier: E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/O6IM0cBx849zOGQwKq9D4xdX9HI.roa
Signing time: Sun 01 Mar 2026 01:35:28 +0000
ROA not before: Sun 01 Mar 2026 01:35:28 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9997
IP address blocks: 2402:700::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E8AA602E736E188CCAE42462762C3776F85B7937
Validity
Not Before: Mar 1 01:35:28 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3BA20CD1C071F38F733864302AAF43E31757F472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:2e:a9:8e:0a:75:45:0e:97:fd:ae:8f:97:
63:fa:1d:e5:ad:15:af:d5:cc:ac:1a:dc:b5:15:25:
f9:44:1e:59:97:e0:c7:78:a7:e8:aa:f3:9c:ee:de:
43:b7:cb:9b:89:ec:bf:07:14:a0:d0:5e:90:12:ee:
0b:79:1b:8a:56:9e:af:55:a1:ac:cf:64:27:1f:b0:
21:be:c8:05:de:63:b3:dc:83:06:6a:c8:e2:88:78:
2f:2c:ce:b5:d7:b2:d2:16:3f:90:29:cf:52:aa:be:
f0:f2:14:6a:20:ae:20:96:10:ed:55:4e:e4:8f:2d:
b5:5e:8e:9e:6e:9c:08:04:16:45:ab:c3:fe:9c:20:
e7:34:91:af:e0:3e:5b:ef:cd:e8:7b:0a:0c:6f:92:
29:f8:8e:5b:ea:e2:05:ba:6a:53:5e:67:ce:8e:1e:
80:fc:cf:2a:46:91:82:43:f0:46:28:41:55:8d:ec:
d2:b0:68:a8:fd:ae:26:b3:a4:76:0c:a6:e1:f2:96:
5d:c0:e2:83:3d:e3:f4:34:84:9e:e1:5c:28:99:40:
d3:c9:b7:48:1a:4e:d3:15:15:25:0e:28:07:23:2f:
42:80:a5:25:47:c9:17:69:35:77:81:1c:a9:05:c1:
4e:be:51:48:db:0c:99:34:2a:8e:ab:b5:b6:ad:ca:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:0C:D1:C0:71:F3:8F:73:38:64:30:2A:AF:43:E3:17:57:F4:72
X509v3 Authority Key Identifier:
keyid:E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/O6IM0cBx849zOGQwKq9D4xdX9HI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:700::/32
Signature Algorithm: sha256WithRSAEncryption
56:97:ac:36:06:4b:11:e0:fe:41:ea:51:e4:1a:22:94:c8:d8:
e8:88:fd:12:90:54:d2:5f:6e:02:84:93:e6:7b:05:8c:a7:65:
38:fe:7e:ec:4d:a4:ac:c0:e2:c5:f1:34:41:78:c5:de:34:e7:
e1:a5:d2:08:fd:f1:0c:6d:04:9c:4b:23:1a:6b:d0:7a:b8:3c:
ba:8e:aa:c8:ca:96:91:69:48:c2:0f:3d:6f:c2:53:cc:aa:95:
56:89:ad:60:92:0a:2d:2a:06:0f:62:e3:6b:8f:10:5f:40:b3:
72:dc:6e:74:d1:f3:ca:26:c5:65:40:61:95:a9:32:3a:05:a1:
f3:25:25:b2:7b:95:1c:82:0b:b9:ba:74:cd:df:16:4d:0f:9a:
f8:43:d6:1c:b2:8a:34:e9:ac:80:bf:38:fe:cc:db:60:94:00:
d0:d1:1e:49:36:c6:17:9c:ec:01:ff:d3:49:80:f3:8e:ee:78:
4e:8a:e9:36:f8:68:ea:51:c0:02:cb:07:68:17:be:f7:3b:93:
60:b4:f3:96:f2:0e:19:97:86:0a:82:f9:b0:f8:c5:12:bd:eb:
4e:e4:b9:64:c5:5c:b5:b8:40:c3:21:68:83:b4:fe:be:c5:09:
39:ed:2b:3b:02:7b:79:dc:1a:33:09:d5:d6:6f:75:5e:19:fe:
4f:fe:f2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:37:11 2026 by rpki-client