
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/wrIXL4OLCTGqwXO_HwV20AAcmpo.roa
File: wrIXL4OLCTGqwXO_HwV20AAcmpo.roa (raw, json)
Hash identifier: bHHq+v/gtyAVahHfkgtdl9S/3//MKa9jM3hP5FCcyIg=
Subject key identifier: C2:B2:17:2F:83:8B:09:31:AA:C1:73:BF:1F:05:76:D0:00:1C:9A:9A
Certificate issuer: /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial: 9F
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/wrIXL4OLCTGqwXO_HwV20AAcmpo.roa
Signing time: Tue 31 Mar 2026 07:29:54 +0000
ROA not before: Tue 31 Mar 2026 07:29:54 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10010
IP address blocks: 2403:7800::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
Validity
Not Before: Mar 31 07:29:54 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C2B2172F838B0931AAC173BF1F0576D0001C9A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:27:74:95:53:41:55:75:00:58:6a:e5:27:
e8:f2:61:72:d1:60:fc:0f:a7:34:63:e0:bd:b5:f8:
ed:cc:5a:93:94:41:c3:da:2c:e5:92:78:a1:a8:e1:
be:db:24:04:54:2b:1d:86:83:43:0f:a3:5c:fe:e0:
3e:67:97:1c:19:d4:79:bb:53:3b:4e:50:23:05:34:
8d:fd:7a:e8:69:7b:35:5d:8b:13:45:82:aa:a7:e6:
6a:66:c9:33:83:99:b9:0a:45:6d:48:89:7b:d6:67:
d0:eb:62:59:f0:ac:6f:34:b4:d9:56:05:b5:64:a4:
72:dc:4c:50:4f:a5:d5:e0:fb:ea:22:e9:d4:8b:14:
09:ff:68:11:90:d9:45:ae:4f:7a:ae:a0:dd:e0:f7:
f4:3a:37:f7:7b:43:28:b6:bc:da:13:94:56:da:61:
ea:be:70:f5:e5:19:54:d1:a6:d9:92:9e:7f:8b:c7:
1c:09:3c:cd:65:1f:27:22:2c:99:4d:1c:c3:93:55:
69:ad:90:22:e5:bd:56:72:85:f0:1e:ad:14:8c:c1:
38:6e:b7:9d:a7:14:02:64:aa:40:83:94:4b:ca:f2:
a1:a2:ac:74:d4:0d:93:79:65:35:2d:3e:d9:27:93:
21:6b:07:72:66:c2:14:6a:6d:0f:c5:d4:09:d1:ba:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B2:17:2F:83:8B:09:31:AA:C1:73:BF:1F:05:76:D0:00:1C:9A:9A
X509v3 Authority Key Identifier:
keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/wrIXL4OLCTGqwXO_HwV20AAcmpo.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:7800::/32
Signature Algorithm: sha256WithRSAEncryption
79:12:d1:aa:47:9b:9c:ba:fb:5d:84:65:72:52:27:f9:ec:de:
04:5f:76:6e:02:11:3a:80:22:de:47:db:50:15:e8:43:f4:f4:
0d:dd:3c:3b:43:ab:27:f3:08:e0:c1:b9:0f:27:de:f7:fb:7e:
80:3f:94:a8:1e:f1:21:cc:bc:83:0e:a6:b2:55:78:e0:42:20:
1e:f9:d1:a0:9a:ff:df:fb:04:b2:08:8c:6a:35:ec:25:fb:5a:
51:b4:41:26:57:67:d2:97:9e:a3:67:12:28:90:48:94:57:04:
b0:71:48:86:09:06:64:89:1b:a6:05:cf:4b:b4:64:42:d6:51:
7a:e9:fe:b0:a0:c3:7b:cf:f5:6c:73:13:41:9f:a3:eb:4d:aa:
6a:dc:f4:0b:e8:12:3b:f4:f9:9c:7f:df:06:ee:93:5f:6e:6a:
1e:b4:d3:6c:8e:04:6e:df:55:7b:8f:45:b3:9f:7e:e2:39:8a:
aa:e2:4d:78:5e:86:4f:54:8f:67:85:eb:9c:ce:80:12:4a:c6:
83:4c:b7:19:7e:7c:0d:6e:87:09:b3:20:03:d4:99:18:aa:93:
7a:e9:07:b5:e4:39:73:85:6c:67:6e:5c:67:7f:b0:21:2c:f2:
e5:1c:af:07:77:6d:05:5e:2e:fe:b9:31:52:ce:18:c5:a1:33:
d4:b2:53:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:31 2026 by rpki-client