
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30432/KExptMjSvX2ZXmOtXfQVroRSOlE.roa
File: KExptMjSvX2ZXmOtXfQVroRSOlE.roa (raw, json)
Hash identifier: RzEluXNVb2vgSZH8/K+JmmHHTqHpubUz2zSMZkiFirg=
Subject key identifier: 28:4C:69:B4:C8:D2:BD:7D:99:5E:63:AD:5D:F4:15:AE:84:52:3A:51
Certificate issuer: /CN=1686ED3DE2D733CD1276969334C8C76F2796F02B
Certificate serial: 26
Authority key identifier: 16:86:ED:3D:E2:D7:33:CD:12:76:96:93:34:C8:C7:6F:27:96:F0:2B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/KExptMjSvX2ZXmOtXfQVroRSOlE.roa
Signing time: Tue 31 Mar 2026 08:38:16 +0000
ROA not before: Tue 31 Mar 2026 08:38:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 59106
IP address blocks: 2401:7b60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1686ED3DE2D733CD1276969334C8C76F2796F02B
Validity
Not Before: Mar 31 08:38:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=284C69B4C8D2BD7D995E63AD5DF415AE84523A51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:48:35:9b:48:21:96:83:48:1f:18:02:2a:
85:72:1c:7b:75:b6:28:17:1a:a4:54:d7:21:3f:d0:
dd:b6:8f:ce:02:d1:67:6d:4d:9f:7e:37:41:b7:b2:
3d:99:eb:21:ee:f9:f5:14:e6:55:da:8c:91:26:85:
2b:68:fa:cc:2f:92:2d:ca:a0:84:50:7e:a9:47:ed:
f6:04:7c:cb:ea:50:8f:2c:af:5c:b4:bb:d7:b6:11:
3b:7d:18:d1:b7:c7:f9:a4:73:7a:df:ea:54:5a:ec:
8f:48:2e:89:1a:f9:85:42:3a:e4:92:f4:09:0d:4c:
d0:94:c1:ff:fa:66:97:45:31:d1:fe:d2:86:f0:65:
26:fe:a5:8e:9e:e8:06:2e:ef:13:a7:44:e6:5b:e3:
be:1d:f1:87:27:0b:0f:4f:fe:e1:76:33:de:52:f0:
44:d4:9d:76:24:f9:8f:64:4e:7d:19:e5:26:70:c2:
ab:ca:4f:b2:79:dc:5e:72:6b:3b:7a:d6:c9:85:e7:
de:16:fd:02:3a:54:d9:62:95:6b:a5:09:06:eb:79:
7f:75:34:e1:d6:cb:23:b0:97:0e:b1:3c:94:2e:01:
7f:dd:64:c8:19:b8:3f:96:96:19:e1:44:63:a9:27:
d3:b6:9f:67:18:45:6e:b7:8a:f7:9e:75:0a:62:4d:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4C:69:B4:C8:D2:BD:7D:99:5E:63:AD:5D:F4:15:AE:84:52:3A:51
X509v3 Authority Key Identifier:
keyid:16:86:ED:3D:E2:D7:33:CD:12:76:96:93:34:C8:C7:6F:27:96:F0:2B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/FobtPeLXM80SdpaTNMjHbyeW8Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FobtPeLXM80SdpaTNMjHbyeW8Cs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30432/KExptMjSvX2ZXmOtXfQVroRSOlE.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:7b60::/32
Signature Algorithm: sha256WithRSAEncryption
1c:00:02:87:26:d2:cb:43:c8:c7:7b:aa:a6:cf:1d:d8:d0:2d:
b6:50:b8:02:61:75:6c:4d:5b:f2:55:f9:f3:7e:a7:f7:41:54:
02:b6:d7:5d:de:cf:4f:d6:ff:ec:01:0f:c9:b2:dc:bf:ae:8a:
37:df:b8:d7:ed:b2:4c:96:94:36:cd:9f:ff:a6:39:4a:86:58:
8c:7d:84:01:01:d0:b6:b2:dd:52:d0:60:d8:0c:8d:91:95:fa:
4c:d2:48:0b:92:8a:42:51:c2:1e:23:91:69:58:58:63:d1:f0:
cd:43:70:bc:5e:35:fa:7b:ea:25:ac:b6:a8:c5:87:6a:bd:c4:
ca:13:4d:70:58:9f:ab:bd:e4:24:2b:1a:45:44:0f:dc:3c:d9:
cf:52:52:f9:2f:21:32:2c:e5:3e:ca:e7:de:de:39:70:b1:c5:
86:b0:51:49:a0:a6:d3:d5:b1:f0:50:e1:0d:dd:59:a2:55:27:
f3:bf:4e:c3:8d:3b:d6:6a:da:5c:4e:8d:3e:92:93:2e:ce:08:
c3:cf:57:ee:21:51:d3:e0:08:4a:cd:68:ba:12:7e:46:3e:0c:
75:4e:d9:41:9f:62:e9:b8:88:51:ea:15:70:0f:9e:8b:e6:05:
6d:82:71:bf:e1:39:b7:4c:c9:e3:1f:13:54:1b:b7:0a:9b:77:
06:d9:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:36 2026 by rpki-client