
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/9gyQJYhZfdP6u_9mHdvnYXtZeH0.roa
File: 9gyQJYhZfdP6u_9mHdvnYXtZeH0.roa (raw, json)
Hash identifier: lsy8+7dooD6I9g2JZGlQSsVfAjoZA7ZNKKngM9HMiUQ=
Subject key identifier: F6:0C:90:25:88:59:7D:D3:FA:BB:FF:66:1D:DB:E7:61:7B:59:78:7D
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: A1
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/9gyQJYhZfdP6u_9mHdvnYXtZeH0.roa
Signing time: Tue 31 Mar 2026 07:29:56 +0000
ROA not before: Tue 31 Mar 2026 07:29:56 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 2406:bb00::/29 maxlen: 56
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: Mar 31 07:29:56 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F60C902588597DD3FABBFF661DDBE7617B59787D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:74:b1:7e:19:54:ae:8c:3c:2b:e0:f6:dc:
3c:a8:2a:fa:a7:4d:c6:9e:61:d2:32:18:19:f2:23:
d9:53:2e:92:7a:7a:81:53:3b:5e:db:2d:5a:7e:b4:
c5:4b:f0:7c:48:75:2f:59:17:65:16:bd:e0:b8:c6:
79:d9:5f:bd:e2:26:fd:99:c1:03:4b:7c:52:64:41:
bb:27:dd:09:86:44:5a:e0:80:a7:09:a9:a3:c2:c5:
a7:b4:1f:7b:e1:43:3d:e5:bc:f5:1c:fb:32:14:0e:
72:2f:9b:1b:d8:f0:1f:50:fd:16:9c:4b:0c:83:0d:
b7:da:bd:c0:0a:5e:77:41:1e:19:a1:6c:f1:59:83:
4c:87:0c:a4:e0:1f:2e:0c:80:07:06:82:72:fb:d3:
76:aa:d2:ec:0b:f3:c3:18:90:0d:9a:ce:17:f1:a9:
24:e8:4c:04:bd:36:89:35:91:56:4b:55:25:a5:87:
fa:47:74:0c:a6:ad:9d:fc:a3:ed:ac:71:bd:97:e7:
cd:5d:12:2d:8d:45:ff:39:cc:bf:49:6a:68:ec:3c:
27:e2:eb:66:74:b7:4f:2f:d1:92:40:7b:4a:9d:99:
d6:e9:60:8c:59:a9:7d:be:bf:96:cc:cd:5c:68:5c:
80:df:73:1e:d5:b0:f5:3c:cc:2f:b2:6b:a1:4e:cd:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0C:90:25:88:59:7D:D3:FA:BB:FF:66:1D:DB:E7:61:7B:59:78:7D
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/9gyQJYhZfdP6u_9mHdvnYXtZeH0.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
6c:e6:9b:a2:e0:44:45:39:b6:ec:2d:2c:0b:ef:cf:85:32:33:
0b:1b:e7:fe:67:cd:ba:60:22:35:38:1e:86:69:0d:58:e5:b4:
90:08:42:b2:ba:f4:f9:09:e1:b2:9d:af:91:16:2d:f2:33:6f:
7d:ef:b5:31:cc:dd:31:04:dd:17:62:fe:fc:5c:92:0e:40:e2:
fc:cb:93:66:aa:f9:95:6b:fa:00:fe:61:b6:f8:4b:c3:df:a9:
0c:98:25:34:f5:d9:c9:47:4b:4d:51:2b:9d:02:10:7a:3b:ad:
c6:5d:cd:bd:3c:b4:76:fb:83:fc:77:f9:f4:2c:8a:d6:41:7f:
24:0f:82:c4:41:89:ff:5d:3b:86:2e:26:b8:2b:c8:ac:b7:bf:
f2:7a:ac:ff:94:d0:15:cb:87:50:c6:35:ad:64:25:9f:be:0a:
ec:bc:39:f3:94:cf:ba:4b:52:4d:28:8c:9e:67:25:79:45:d5:
45:71:09:7c:d3:bc:5e:51:ef:c2:6b:b2:32:81:ff:0f:8c:a0:
a4:dd:84:d4:24:86:62:9f:60:d5:5a:84:1a:f2:c1:a5:13:35:
e4:49:93:f3:a9:4e:c0:94:29:af:48:45:8d:39:81:88:6c:30:
3e:3f:6b:00:47:8e:0a:24:6b:75:1c:7c:75:e3:49:20:d1:64:
c1:a8:60:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:05 2026 by rpki-client