
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Po08ij0LUn3pC-ssVwFtXGo4dgY.roa
File: Po08ij0LUn3pC-ssVwFtXGo4dgY.roa (raw, json)
Hash identifier: JaecGdMBo5WG2+3kNwvjqnljFCF8gpNpRLt72/U89pU=
Subject key identifier: 3E:8D:3C:8A:3D:0B:52:7D:E9:0B:EB:2C:57:01:6D:5C:6A:38:76:06
Certificate issuer: /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial: 6F
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Po08ij0LUn3pC-ssVwFtXGo4dgY.roa
Signing time: Sun 01 Mar 2026 01:32:27 +0000
ROA not before: Sun 01 Mar 2026 01:32:27 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 59127
IP address blocks: 2401:7ec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Validity
Not Before: Mar 1 01:32:27 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3E8D3C8A3D0B527DE90BEB2C57016D5C6A387606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:f7:bf:3a:fd:57:dd:23:6c:f9:46:b1:ff:
6f:36:6e:1c:95:6e:39:9d:f7:db:ab:3f:91:a4:25:
be:f3:6c:e3:4a:46:02:b2:7a:83:3f:f2:23:6c:d3:
a7:32:91:b2:09:7b:cb:70:fe:29:c5:a0:44:c6:41:
74:1d:28:20:92:cc:86:e9:0a:bd:0d:f1:9a:2a:f7:
16:79:87:b4:c4:5e:94:59:66:99:e8:e9:a4:b4:86:
f2:35:06:ab:76:69:4a:a6:40:60:68:37:22:68:8d:
d5:71:0e:c7:37:5f:d1:3b:3e:0e:0b:9f:65:8f:ff:
45:69:e4:f0:f7:19:03:0f:e0:bb:ee:28:41:00:bb:
be:fb:6d:07:d3:8c:d6:75:1a:04:51:84:c7:52:d9:
06:10:be:c9:25:bf:4d:5f:1d:30:42:04:62:5c:cd:
d6:12:bd:4d:19:b9:6e:97:a5:91:2a:a1:b3:f6:26:
ff:b6:79:5e:79:3a:78:ec:88:24:8f:ca:3f:d5:6a:
17:2f:39:98:51:85:c2:5a:8b:0d:28:40:90:78:7e:
bd:e1:c6:9f:d0:40:59:92:68:75:cf:4c:cb:c2:14:
e6:a4:d6:11:f3:50:4f:30:8a:9f:e6:08:bc:1b:f3:
1d:eb:81:65:d2:86:e1:6b:11:97:d8:99:3d:2d:81:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:3C:8A:3D:0B:52:7D:E9:0B:EB:2C:57:01:6D:5C:6A:38:76:06
X509v3 Authority Key Identifier:
keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Po08ij0LUn3pC-ssVwFtXGo4dgY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7ec0::/32
Signature Algorithm: sha256WithRSAEncryption
a8:e3:04:c3:9a:68:d3:2e:a6:94:fb:14:61:b3:76:33:de:ed:
c3:74:41:36:fa:02:26:f5:97:6c:b3:e0:2d:0a:1b:ec:22:09:
7c:49:bd:45:ff:f2:ea:8d:f2:d4:91:df:c9:2a:19:0a:b4:eb:
f8:fe:90:2b:ea:d1:01:02:04:2b:0e:60:1c:88:4f:5f:0e:ad:
48:18:e7:ed:fb:b5:a6:7a:f9:c3:9c:03:52:32:33:99:7b:9a:
91:83:ea:19:bb:f0:65:8d:61:75:73:43:4a:b9:65:7a:94:dd:
de:dc:89:ed:fa:a8:b9:03:13:fe:ab:dd:75:30:e6:52:b6:53:
fe:03:67:35:f2:9c:2c:bd:fa:7a:d2:8f:b5:50:f8:27:d9:e3:
15:6e:2d:75:7b:52:62:85:4c:07:af:90:56:da:a3:cf:aa:2a:
cf:9f:8b:94:0e:f6:2f:d2:b5:6e:0f:f8:1d:6a:ca:d4:e1:35:
49:b9:88:b2:88:55:45:1b:14:32:8f:50:ea:b2:c4:b8:ab:e4:
38:3f:5d:d2:09:7f:f9:82:18:21:ff:a5:b9:e5:e5:a5:d7:7f:
11:7b:d0:95:8a:fa:22:4f:30:2c:08:11:ac:5c:94:1e:90:50:
53:69:8f:54:50:6a:92:66:be:6f:07:49:ea:ed:16:fe:46:84:
5c:05:75:d5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI2MDMwMTAx
MzIyN1oXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoM0U4RDNDOEEzRDBCNTI3
REU5MEJFQjJDNTcwMTZENUM2QTM4NzYwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAW9786/VfdI2z5RrH/bzZuHJVuOZ3326s/kaQlvvNs40pGArJ6
gz/yI2zTpzKRsgl7y3D+KcWgRMZBdB0oIJLMhukKvQ3xmir3FnmHtMRelFlmmejp
pLSG8jUGq3ZpSqZAYGg3ImiN1XEOxzdf0Ts+DgufZY//RWnk8PcZAw/gu+4oQQC7
vvttB9OM1nUaBFGEx1LZBhC+ySW/TV8dMEIEYlzN1hK9TRm5bpelkSqhs/Ym/7Z5
Xnk6eOyIJI/KP9VqFy85mFGFwlqLDShAkHh+veHGn9BAWZJodc9My8IU5qTWEfNQ
TzCKn+YIvBvzHeuBZdKG4WsRl9iZPS2Bk0sCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQ+jTyKPQtSfekL6yxXAW1cajh2BjAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0L1BvMDhpajBMVW4zcEMtc3NWd0Z0WEdvNGRnWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAX7AMA0GCSqGSIb3DQEBCwUAA4IBAQCo4wTDmmjTLqaU+xRhs3Yz
3u3DdEE2+gIm9Zdss+AtChvsIgl8Sb1F//LqjfLUkd/JKhkKtOv4/pAr6tEBAgQr
DmAciE9fDq1IGOft+7WmevnDnANSMjOZe5qRg+oZu/BljWF1c0NKuWV6lN3e3Int
+qi5AxP+q911MOZStlP+A2c18pwsvfp60o+1UPgn2eMVbi11e1JihUwHr5BW2qPP
qirPn4uUDvYv0rVuD/gdasrU4TVJuYiyiFVFGxQyj1DqssS4q+Q4P13SCX/5ghgh
/6W55eWl138Re9CVivoiTzAsCBGsXJQekFBTaY9UUGqSZr5vB0nq7Rb+RoRcBXXV
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:18 2026 by rpki-client