
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/cr-AMqVtFI4kLJn_GZAEDsMwiWs.roa
File: cr-AMqVtFI4kLJn_GZAEDsMwiWs.roa (raw, json)
Hash identifier: HjZ88OhuYbYGD4+xC7OtBapXm/epqDtXcDCbJ31MsAI=
Subject key identifier: 72:BF:80:32:A5:6D:14:8E:24:2C:99:FF:19:90:04:0E:C3:30:89:6B
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: 9B
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/cr-AMqVtFI4kLJn_GZAEDsMwiWs.roa
Signing time: Tue 31 Mar 2026 07:29:52 +0000
ROA not before: Tue 31 Mar 2026 07:29:52 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 2406:bb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: Mar 31 07:29:52 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=72BF8032A56D148E242C99FF1990040EC330896B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:88:b4:49:9f:2f:9f:1c:b7:d2:7e:b1:f2:
b7:50:7b:36:2e:03:26:fb:6e:51:b9:f7:f7:b4:57:
d2:08:6c:81:a2:17:0f:b9:e1:5a:fa:1a:ab:39:91:
87:58:89:d2:5a:08:e5:a0:4e:72:1a:3e:eb:7c:bf:
6f:40:22:5a:6c:8f:97:7b:ce:63:45:47:0b:72:13:
ad:ff:8d:6c:e9:76:68:fb:bd:2a:39:96:44:a7:a8:
bf:cb:27:3b:c5:62:bd:77:7c:7f:73:d6:da:10:3c:
c2:d4:06:3f:0e:61:55:ea:8b:ae:5b:8d:74:ed:44:
2c:51:1d:a3:4b:1a:52:5e:ff:e9:2c:57:3c:54:7a:
93:a1:9a:ea:35:85:37:87:bc:01:ee:10:13:71:fd:
2b:6c:d6:c7:86:d2:4c:fb:02:24:1b:9d:16:3d:5f:
6b:46:4c:87:f1:22:aa:3b:82:79:c9:bc:62:0a:49:
a0:2e:21:24:8a:c6:02:20:c7:da:b9:66:fc:55:06:
cf:c6:ae:2d:0a:d9:20:a1:df:be:85:dd:dc:6e:5c:
8f:53:47:e6:fb:95:a1:37:b3:22:02:ce:12:c7:aa:
4b:0d:58:c9:e5:ae:80:e9:44:b6:55:c6:89:fb:c2:
21:d0:99:86:fa:51:ab:24:59:81:cd:8b:96:28:b9:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BF:80:32:A5:6D:14:8E:24:2C:99:FF:19:90:04:0E:C3:30:89:6B
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/cr-AMqVtFI4kLJn_GZAEDsMwiWs.roa
sbgp-ipAddrBlock: critical
IPv6:
2406:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
a3:96:3f:06:23:e3:fe:89:eb:bc:54:5b:4c:7f:3b:f3:6d:aa:
86:b1:02:8f:0b:c3:13:06:4b:5c:be:b1:2b:d5:87:7e:93:ab:
ae:2d:1d:f1:4b:f7:26:6a:a6:a5:3c:5c:9d:e4:9c:eb:aa:dd:
38:8d:48:2d:a9:16:1f:d5:08:17:15:e8:b9:e7:68:e0:83:9e:
60:f5:55:22:92:2e:46:c0:37:d9:10:8f:da:7a:3c:f7:7a:bf:
64:94:86:c6:56:d0:f4:14:6c:7a:a6:f6:df:6f:11:bf:46:73:
1d:3d:07:f9:d7:29:e8:ba:85:69:fd:42:59:ad:55:43:f4:9c:
80:8e:93:64:96:d5:2b:d0:21:cc:43:d2:e9:9f:85:5d:42:40:
f7:9f:b8:fe:cc:9c:ae:5f:43:a6:e9:bf:58:01:76:65:7a:1b:
43:70:cb:f9:71:19:d5:80:40:4b:19:fe:52:24:46:f6:98:a1:
fd:e0:3f:2f:51:30:53:27:a7:dd:bb:ae:16:ae:db:63:08:a0:
10:d8:83:4d:28:fc:80:1d:40:87:cc:f6:de:25:49:57:db:a9:
fb:fa:2c:27:17:60:9e:a9:01:01:75:9c:db:36:da:fd:29:c2:
53:06:dc:9e:77:e5:c8:51:97:29:d9:0e:c1:20:86:a3:5f:96:
bb:41:02:a5
-----BEGIN CERTIFICATE-----
MIIEwjCCA6qgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDEw
RDg4NjU4MkJEREY0OEIwNDE4NTFDMzhDMEI2MzIxMTVGNUMyMTAeFw0yNjAzMzEw
NzI5NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcyQkY4MDMyQTU2RDE0
OEUyNDJDOTlGRjE5OTAwNDBFQzMzMDg5NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpQIi0SZ8vnxy30n6x8rdQezYuAyb7blG59/e0V9IIbIGiFw+5
4Vr6Gqs5kYdYidJaCOWgTnIaPut8v29AIlpsj5d7zmNFRwtyE63/jWzpdmj7vSo5
lkSnqL/LJzvFYr13fH9z1toQPMLUBj8OYVXqi65bjXTtRCxRHaNLGlJe/+ksVzxU
epOhmuo1hTeHvAHuEBNx/Sts1seG0kz7AiQbnRY9X2tGTIfxIqo7gnnJvGIKSaAu
ISSKxgIgx9q5ZvxVBs/Gri0K2SCh376F3dxuXI9TR+b7laE3syICzhLHqksNWMnl
roDpRLZVxon7wiHQmYb6UaskWYHNi5YouezPAgMBAAGjggHeMIIB2jAdBgNVHQ4E
FgQUcr+AMqVtFI4kLJn/GZAEDsMwiWswHwYDVR0jBBgwFoAU0Q2IZYK930iwQYUc
OMC2MhFfXCEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMjI4LzBRMklaWUs5MzBpd1FZVWNPTUMyTWhGZlhDRS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBRMklaWUs5MzBpd1FZVWNPTUMy
TWhGZlhDRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDIyOC9jci1BTXFWdEZJNGtMSm5fR1pBRURzTXdpV3Mucm9h
MCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJAa7ADANBgkqhkiG9w0BAQsF
AAOCAQEAo5Y/BiPj/onrvFRbTH87822qhrECjwvDEwZLXL6xK9WHfpOrri0d8Uv3
JmqmpTxcneSc66rdOI1ILakWH9UIFxXouedo4IOeYPVVIpIuRsA32RCP2no893q/
ZJSGxlbQ9BRseqb2328Rv0ZzHT0H+dcp6LqFaf1CWa1VQ/ScgI6TZJbVK9AhzEPS
6Z+FXUJA95+4/sycrl9Dpum/WAF2ZXobQ3DL+XEZ1YBASxn+UiRG9pih/eA/L1Ew
Uyen3buuFq7bYwigENiDTSj8gB1Ah8z23iVJV9up+/osJxdgnqkBAXWc2zba/SnC
UwbcnnflyFGXKdkOwSCGo1+Wu0ECpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:41 2026 by rpki-client