
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/_5yE4GlJ1DrwtsLHiDvSOS_6qvk.roa
File: _5yE4GlJ1DrwtsLHiDvSOS_6qvk.roa (raw, json)
Hash identifier: /w3ac8YFu25+MNCPaxAvdxCrgNGVTA5U9ZoWLWVoJXc=
Subject key identifier: FF:9C:84:E0:69:49:D4:3A:F0:B6:C2:C7:88:3B:D2:39:2F:FA:AA:F9
Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial: 57
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/_5yE4GlJ1DrwtsLHiDvSOS_6qvk.roa
Signing time: Tue 31 Mar 2026 08:33:26 +0000
ROA not before: Tue 31 Mar 2026 08:33:26 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59098
IP address blocks: 2401:d20:b000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Validity
Not Before: Mar 31 08:33:26 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=FF9C84E06949D43AF0B6C2C7883BD2392FFAAAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:5d:93:2f:3e:09:99:c0:24:8c:56:4f:c0:
15:f2:39:51:17:ca:fb:c8:10:c5:39:e3:a9:1c:69:
88:6e:2d:e5:a6:3f:b7:51:70:da:e9:e7:f1:d2:c5:
60:2f:c5:8f:2a:65:8f:91:b6:ce:a2:84:ae:5f:d6:
78:72:2e:1d:c0:b9:72:bc:64:b3:9e:89:98:c6:1a:
ec:bf:3f:50:15:c6:b5:bb:51:37:37:43:51:b5:16:
8d:1d:8a:61:5c:e8:69:d2:57:0d:2e:58:5b:fc:68:
0c:f7:16:8f:87:08:8c:69:8f:65:d1:25:d9:61:2f:
6d:32:23:20:22:a8:2b:6e:49:25:15:45:0e:c3:6f:
99:e9:67:6a:23:bc:41:8f:6d:76:1e:2b:65:6c:7f:
59:e0:36:39:17:84:b4:a9:a0:42:bd:1a:06:75:b9:
e1:f8:17:b7:d8:92:d4:2b:37:55:23:e1:13:85:85:
f9:64:eb:60:0f:14:5a:41:0c:b0:35:1a:ad:c7:ed:
52:f7:d7:47:ea:3a:dd:f7:67:5c:64:32:b9:ce:8f:
8a:ba:c5:5d:a2:6d:60:03:4d:c6:4a:69:0b:04:3b:
0d:6d:2c:3c:7e:95:ac:e7:d2:b4:02:f6:ec:44:74:
0a:e4:d9:de:66:f9:3d:c5:09:0f:1a:8d:e3:0c:c5:
60:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:84:E0:69:49:D4:3A:F0:B6:C2:C7:88:3B:D2:39:2F:FA:AA:F9
X509v3 Authority Key Identifier:
keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/_5yE4GlJ1DrwtsLHiDvSOS_6qvk.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:d20:b000::/36
Signature Algorithm: sha256WithRSAEncryption
47:8d:c1:ea:7a:e5:f4:4d:6c:15:ef:6d:40:1d:98:c4:94:6b:
72:0a:1c:19:e7:6a:e1:73:35:37:dd:b0:18:3d:d0:12:ae:e0:
8b:4a:c6:6d:5e:b1:f0:46:c0:73:d5:65:fb:61:8e:ca:80:4d:
b9:56:2d:2b:de:e0:93:ed:45:c0:3f:4b:8e:41:a9:f8:97:9a:
03:98:f4:72:d9:85:16:ab:28:b1:a7:20:83:e6:1d:39:75:8e:
44:e3:d1:2c:b4:fa:40:47:05:f1:94:2c:4d:12:9f:7c:67:80:
fa:4c:76:f3:8f:6a:e2:34:f9:23:cb:d7:5e:bf:8a:67:fe:80:
37:65:a4:35:e8:32:25:99:84:ce:bb:94:1e:69:65:d6:ab:0f:
4d:48:74:d2:88:dc:be:b5:bf:2e:8a:15:64:18:8f:43:85:40:
24:b1:53:97:c3:12:64:4f:d2:c4:b7:14:89:c7:58:dc:dc:c5:
77:25:d4:87:7a:14:48:de:b9:09:e7:db:a4:96:3c:cb:26:5f:
3e:cc:5f:89:21:b7:45:16:71:f4:a0:cd:8c:1c:f1:52:b6:e4:
36:c2:41:ce:6c:e6:1e:88:22:41:16:d2:cc:63:e1:92:11:77:
cb:5e:72:c6:2e:95:cf:58:13:47:ad:8f:8f:7f:bc:1f:2f:7c:
5b:79:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:19 2026 by rpki-client