
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30315/QlNeg1079D9PWb6b8a1QYB7gjzU.roa
File: QlNeg1079D9PWb6b8a1QYB7gjzU.roa (raw, json)
Hash identifier: vK6BAL9wcPT/DLLG6Komr6KzqrHUF5Qrg0Y//Mf8Stw=
Subject key identifier: 42:53:5E:83:5D:3B:F4:3F:4F:59:BE:9B:F1:AD:50:60:1E:E0:8F:35
Certificate issuer: /CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5
Certificate serial: 38
Authority key identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/QlNeg1079D9PWb6b8a1QYB7gjzU.roa
Signing time: Tue 31 Mar 2026 08:23:47 +0000
ROA not before: Tue 31 Mar 2026 08:23:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10011
IP address blocks: 2402:2840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5
Validity
Not Before: Mar 31 08:23:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=42535E835D3BF43F4F59BE9BF1AD50601EE08F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:67:b5:3a:98:7a:bc:8b:b6:4a:a7:fe:65:
fc:e4:b9:a2:90:49:e3:08:5d:a3:39:88:9e:60:09:
95:27:59:40:6e:f8:bd:95:70:a4:b5:ff:ae:f2:ec:
ec:73:3a:87:bf:5b:fb:e5:be:9c:fc:c8:51:d7:4c:
b1:87:8e:3f:1c:b0:f8:1b:c7:b8:38:3b:e0:e6:e3:
2d:c3:4c:b8:a2:cb:19:8a:3e:64:20:93:74:0e:0a:
67:5b:7e:be:40:b2:0b:ce:e5:8d:91:15:09:3c:06:
fa:f0:d1:67:eb:5f:5b:bc:85:1a:83:f7:32:33:d4:
9b:b4:43:f3:34:ec:8c:0d:cd:55:5a:55:54:4e:0d:
45:2b:d1:39:8f:40:4f:f6:6b:16:00:69:c2:c8:02:
56:45:db:40:a6:5c:53:75:c1:c5:ef:f2:71:53:5a:
af:7f:9d:3f:90:5e:7a:a0:db:13:6e:61:57:41:a1:
83:92:bb:84:34:91:4f:6c:53:29:03:c5:ec:ae:ec:
75:7d:75:17:a8:00:46:6c:f3:3b:61:14:1d:8c:91:
6e:18:79:31:6f:60:91:f1:7d:92:0e:2a:2b:32:f3:
c0:96:3f:88:e8:2d:65:8b:e6:de:97:b3:7a:a8:2f:
8f:99:4d:25:63:32:f3:71:0a:e9:c3:36:74:73:8b:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:5E:83:5D:3B:F4:3F:4F:59:BE:9B:F1:AD:50:60:1E:E0:8F:35
X509v3 Authority Key Identifier:
keyid:98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/QlNeg1079D9PWb6b8a1QYB7gjzU.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:2840::/32
Signature Algorithm: sha256WithRSAEncryption
26:a1:ba:b0:32:b2:7d:6f:ab:01:d7:0b:a0:ed:40:21:26:9f:
fa:33:5e:00:d1:de:07:db:52:e3:58:69:a9:f4:ae:a7:04:84:
de:5c:bb:09:aa:91:85:48:b4:f3:ec:24:b3:4c:e1:09:6e:f5:
ea:0d:a9:0e:54:b9:b4:9d:08:81:0c:07:76:cb:e6:d0:17:46:
fd:ca:a5:e9:12:21:de:41:78:3b:59:33:28:d0:b0:bb:3e:4f:
7c:4a:cc:ce:f9:1f:a0:80:e2:23:3f:7a:ea:4f:eb:f0:1e:2e:
83:40:df:88:06:eb:b0:f5:59:bb:2a:df:b0:fc:84:9d:da:7e:
a6:a4:a7:46:0f:e9:d8:4b:f2:42:d2:9c:27:e9:5e:b4:80:8e:
96:4e:c4:6f:cd:d2:9e:8c:20:39:e3:e8:6b:be:5d:56:3f:29:
25:39:13:0d:2a:24:8c:02:35:d3:d5:4d:b8:81:7f:70:88:77:
66:c8:90:b6:94:2c:9a:b2:1a:3e:9c:6d:7d:1c:53:1c:a4:74:
d3:1c:79:7a:fd:9b:95:9c:e0:03:4e:6d:a7:42:68:16:b5:11:
21:d3:db:57:5c:ed:25:66:c6:fd:fe:fc:9e:95:61:b5:22:da:
90:99:7c:41:60:1a:74:65:c2:b6:f1:04:8d:4e:7e:4f:34:94:
31:01:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:08 2026 by rpki-client