
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/FoBOdpFkQ_XtYPC_kS75zjOHDR4.roa
File: FoBOdpFkQ_XtYPC_kS75zjOHDR4.roa (raw, json)
Hash identifier: 5oxYLzWF5hC4qNANXwW4byqM4V06yqCwR+bqsKvXU1s=
Subject key identifier: 16:80:4E:76:91:64:43:F5:ED:60:F0:BF:91:2E:F9:CE:33:87:0D:1E
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: 9D
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/FoBOdpFkQ_XtYPC_kS75zjOHDR4.roa
Signing time: Tue 31 Mar 2026 07:29:53 +0000
ROA not before: Tue 31 Mar 2026 07:29:53 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 2406:bb04::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: Mar 31 07:29:53 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=16804E76916443F5ED60F0BF912EF9CE33870D1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:97:5c:80:bc:4b:82:ec:d4:b4:08:84:e0:
cd:9e:73:42:6b:3c:9c:36:b3:2d:3f:4e:ba:e6:d8:
52:e4:32:5b:3f:40:a9:2f:70:87:b9:f1:34:5c:1e:
f4:53:28:5e:0e:b6:f3:c2:39:05:8e:d1:13:b5:8a:
3a:0a:6b:14:68:cc:b1:51:23:fc:a1:66:84:18:74:
26:53:f9:3c:59:d5:3a:fa:11:7e:14:df:80:f2:04:
a0:cc:29:49:ba:d8:8c:b2:ba:50:19:ec:5d:d9:df:
4d:7d:cf:28:64:0e:5e:dc:0a:76:f2:c0:f5:a9:05:
9a:5c:f4:66:40:91:4c:d2:59:91:ae:f0:77:ae:15:
a8:21:5d:3a:a8:99:26:bc:ab:22:10:f7:bf:1e:2a:
78:7c:59:e1:16:bc:bf:36:68:8d:69:2d:9d:77:6e:
95:c7:0f:bb:f9:5a:c4:19:11:35:00:aa:98:8c:06:
9d:af:52:a6:4c:12:75:83:aa:66:3e:97:e1:5f:28:
bf:e3:bd:5d:c3:04:91:d4:20:2e:b5:53:07:f9:1e:
85:b1:e1:7c:4f:91:e3:5b:da:55:9b:f4:bb:17:83:
57:c1:fc:c5:d1:5c:40:1c:78:3c:94:a7:41:ab:78:
c5:0d:d5:cf:c2:64:a2:d3:f7:e4:7c:00:74:07:4a:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:80:4E:76:91:64:43:F5:ED:60:F0:BF:91:2E:F9:CE:33:87:0D:1E
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/FoBOdpFkQ_XtYPC_kS75zjOHDR4.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:bb04::/30
Signature Algorithm: sha256WithRSAEncryption
23:b6:55:25:4d:85:ec:a2:34:05:d4:d6:44:9a:26:5c:4f:1c:
c5:13:43:22:1c:30:d0:cd:fe:04:56:7f:17:62:3a:88:60:f0:
50:c2:ab:35:20:58:d9:05:77:c5:cc:c5:37:61:63:76:1b:b7:
1a:db:c2:d7:0a:47:30:f7:31:c0:a0:43:a0:d6:8e:3f:99:64:
be:92:a7:ed:74:ab:53:26:50:28:28:54:6d:4f:ca:0f:c9:f5:
db:8a:3c:b4:44:33:7a:72:8c:62:1d:5a:fd:fe:17:7f:0e:76:
c8:8c:51:e3:3a:00:c3:30:94:12:64:e6:22:63:8e:af:a7:bd:
25:6d:a5:2e:d5:14:24:5f:f2:67:c0:42:e2:4d:e1:8e:0e:43:
00:eb:16:1b:44:51:47:8e:ee:0c:b8:4f:71:2b:6c:1c:b6:de:
d0:fd:3d:8a:72:4a:68:13:ae:db:02:13:09:5b:d4:15:93:a4:
4c:0d:41:75:79:26:fc:a5:1f:98:51:60:bb:57:c5:cb:e3:80:
8d:5b:bb:84:77:7b:b0:6a:15:99:5e:b1:2e:c1:e8:c6:4c:92:
db:a9:14:d4:a1:c0:37:db:ff:4c:19:7a:6c:38:e8:2f:cb:99:
2e:01:6a:80:d9:a5:ed:2f:3c:ba:f4:78:9a:e0:2d:b2:d1:8f:
05:e8:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:10 2026 by rpki-client