
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/OITn45Io2RFQMF0zZhp26v-0WwM.roa
File: OITn45Io2RFQMF0zZhp26v-0WwM.roa (raw, json)
Hash identifier: DKckB9U1zQZGJGUn61RJZV27ae4JXvZ0738ypEoXzBI=
Subject key identifier: 38:84:E7:E3:92:28:D9:11:50:30:5D:33:66:1A:76:EA:FF:B4:5B:03
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: 9E
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/OITn45Io2RFQMF0zZhp26v-0WwM.roa
Signing time: Tue 31 Mar 2026 07:29:54 +0000
ROA not before: Tue 31 Mar 2026 07:29:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 2406:bb00::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: Mar 31 07:29:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3884E7E39228D91150305D33661A76EAFFB45B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:fb:aa:75:db:96:a8:9b:22:c1:17:20:f5:
30:60:de:0c:d6:8d:f2:ea:36:95:91:4c:44:62:e5:
be:79:3d:b8:5d:5a:4d:c5:c5:e7:74:ad:7a:9a:be:
5a:e1:2f:9b:12:f1:91:e8:3e:88:a2:27:15:5f:51:
ff:cc:9f:ad:78:b4:c2:13:5c:e9:ac:96:da:79:cc:
1c:ea:75:41:86:c4:46:c3:e9:3d:96:9e:25:9c:f8:
3c:2e:ec:87:58:c3:ec:4b:f3:ee:d3:51:89:bf:81:
14:3f:05:da:e5:90:27:7c:60:c1:e5:64:ea:0a:fd:
2d:58:88:c7:1d:79:82:ec:2e:57:d8:59:81:bf:99:
85:7f:b3:44:b4:a7:89:b5:b1:2b:f0:e3:ea:3b:50:
1f:7a:92:6f:3c:3e:7b:2e:e4:13:37:6d:36:0f:52:
c4:f5:28:d2:01:1b:7e:ed:5e:dc:42:7b:da:35:fb:
dc:1a:8d:b1:70:fd:c6:0f:44:d9:58:eb:53:c7:3a:
8d:d0:3a:af:02:62:b3:9c:b6:82:59:86:b4:2c:51:
d6:44:96:33:b6:a9:9d:0b:c0:71:c2:aa:18:6b:a4:
92:64:6c:85:1f:27:2f:cc:5f:4d:63:87:02:62:f3:
77:e2:4c:bb:c2:aa:fd:7a:52:c2:3e:32:bb:72:21:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:84:E7:E3:92:28:D9:11:50:30:5D:33:66:1A:76:EA:FF:B4:5B:03
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/OITn45Io2RFQMF0zZhp26v-0WwM.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:bb00::/30
Signature Algorithm: sha256WithRSAEncryption
2d:dd:91:5d:e9:ba:97:84:5d:7e:87:35:32:70:c4:f8:9d:4b:
d8:65:02:bf:4e:de:c5:e5:04:fa:55:4b:6d:27:9a:04:c3:af:
e7:42:f6:48:7a:4b:a3:ef:1c:0d:97:72:bc:f0:e1:1d:e7:01:
60:29:ab:49:be:d4:4a:d0:23:39:99:a7:d2:39:50:eb:de:68:
7c:c9:76:39:cc:27:ac:95:f9:0b:ce:0a:f0:da:68:35:f7:5a:
6c:6a:d2:5f:49:6e:d6:d3:37:be:35:e0:bb:8a:f7:93:b6:4c:
8f:b5:62:70:33:aa:de:84:84:79:31:e8:e1:c3:a3:c2:47:21:
b0:3a:c0:bd:59:eb:d0:2b:e2:57:21:5d:92:f9:2c:f6:41:58:
d1:ac:d6:ab:e0:cd:19:78:48:4a:cf:d6:3b:c2:58:95:d3:0d:
02:f4:63:c8:79:9d:dd:91:8b:36:f5:be:39:e7:5a:36:64:a0:
18:82:ad:4d:95:18:27:af:54:b9:66:b6:67:e2:e9:f5:ae:8b:
c8:eb:9d:27:3c:14:0b:a3:ca:ae:e8:15:ef:30:70:5a:ec:ae:
4d:f7:f2:b0:46:a8:9b:b5:e1:bb:cb:4d:50:d7:35:6d:80:de:
c7:e1:36:fe:3b:b8:18:3f:f9:85:25:4d:7b:b9:ed:02:b6:ac:
d7:68:f3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:48 2026 by rpki-client