
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30439/s9IoURv2Y_qQtEFlrB9XzJnB-JQ.roa
File: s9IoURv2Y_qQtEFlrB9XzJnB-JQ.roa (raw, json)
Hash identifier: Is19lW2BkXtT8s8kkRU5clYV/rA99sR2dYcH0J2CH7M=
Subject key identifier: B3:D2:28:51:1B:F6:63:FA:90:B4:41:65:AC:1F:57:CC:99:C1:F8:94
Certificate issuer: /CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
Certificate serial: 21
Authority key identifier: 8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/s9IoURv2Y_qQtEFlrB9XzJnB-JQ.roa
Signing time: Tue 31 Mar 2026 08:42:09 +0000
ROA not before: Tue 31 Mar 2026 08:42:09 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 45691
IP address blocks: 2401:b420::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
Validity
Not Before: Mar 31 08:42:09 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B3D228511BF663FA90B44165AC1F57CC99C1F894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:c1:45:27:07:66:16:a3:51:ec:e8:c0:c0:
ff:2a:78:bb:6f:3d:b3:60:7e:f5:9c:85:e3:d2:03:
d9:8e:e2:28:1a:f2:3f:0e:89:3a:b7:a2:64:26:1b:
25:b0:e6:66:ce:f6:4d:55:dd:de:f6:05:da:17:31:
00:70:e7:ec:c1:c3:8c:60:5a:eb:67:ff:52:92:b4:
ec:d5:30:56:63:5d:d7:d1:4a:06:1c:4d:8c:53:27:
5b:f2:56:98:31:81:ed:37:71:2c:2f:53:b1:ff:93:
a3:e7:ed:29:b0:e0:fc:17:e7:64:4f:e6:58:16:a9:
2c:3d:16:89:0b:31:89:e5:44:be:e5:d2:d3:6c:b7:
a2:87:62:5c:4c:87:ff:dd:d7:22:97:7f:af:15:0c:
88:b1:9f:09:50:dd:97:2b:5c:73:f9:40:3d:97:cb:
18:c7:3e:dd:4f:ec:ca:6b:6c:42:6c:4e:15:d9:da:
2e:67:2c:01:d8:9f:10:00:f5:be:1e:83:d8:86:94:
a0:1a:61:8c:b4:d0:78:7a:56:5e:05:4f:9d:3e:78:
91:5a:bb:d2:be:9b:9e:2f:6d:a8:14:e8:8b:18:d5:
07:9d:d3:03:04:5e:f8:f4:90:b3:dc:24:69:b6:06:
c9:dc:24:6d:10:8a:81:29:f4:e9:68:a9:08:92:b3:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:28:51:1B:F6:63:FA:90:B4:41:65:AC:1F:57:CC:99:C1:F8:94
X509v3 Authority Key Identifier:
keyid:8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/s9IoURv2Y_qQtEFlrB9XzJnB-JQ.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b420::/32
Signature Algorithm: sha256WithRSAEncryption
81:cf:10:34:00:f6:f8:95:41:f0:ba:f4:1b:c8:b7:89:a1:3b:
f5:fb:fe:ae:cf:2c:f2:31:65:f4:b8:b2:7d:c8:be:e8:7c:84:
fd:0e:91:bd:3a:b1:9a:9c:89:1f:3c:50:08:a6:8d:65:02:15:
a4:46:c7:24:9d:c2:8d:84:ab:9e:67:9c:db:54:9a:57:8a:8d:
96:a8:a0:10:53:42:88:c9:af:ea:f0:a1:2f:72:c7:8f:2a:2a:
2a:24:5f:69:08:3d:50:25:30:6a:03:44:25:06:aa:af:63:04:
84:24:73:65:3f:37:eb:56:35:bf:90:a0:90:ca:73:2e:b3:e8:
e1:66:ad:ff:26:50:bc:b5:4d:e2:c8:b8:c7:be:82:e3:b5:ff:
a9:da:a4:87:94:48:1d:13:c7:c2:1b:2c:dc:99:16:b2:93:a8:
45:5e:d0:79:6b:d2:f7:d6:be:e3:1d:df:18:1f:0e:c3:5c:1f:
e8:6f:cd:b8:09:64:a5:be:33:81:80:15:a6:82:a7:26:f7:31:
4f:46:66:b8:9b:66:da:62:b9:1f:f3:12:a4:19:7f:c7:35:89:
bd:ba:09:f6:88:8b:5f:7e:0e:77:3d:3d:b8:86:78:ef:33:4a:
ab:52:e3:59:6d:5a:2f:d3:b4:36:4b:a9:ce:ed:e8:23:02:6f:
92:19:b9:11
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDAy
MEE4OEZDQTBGNUFEQkI1QTU5OEFBODEyNTUzNEU1NzVDMTNDMB4XDTI2MDMzMTA4
NDIwOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjNEMjI4NTExQkY2NjNG
QTkwQjQ0MTY1QUMxRjU3Q0M5OUMxRjg5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMGGwUUnB2YWo1Hs6MDA/yp4u289s2B+9ZyF49ID2Y7iKBryPw6J
OreiZCYbJbDmZs72TVXd3vYF2hcxAHDn7MHDjGBa62f/UpK07NUwVmNd19FKBhxN
jFMnW/JWmDGB7TdxLC9Tsf+To+ftKbDg/BfnZE/mWBapLD0WiQsxieVEvuXS02y3
oodiXEyH/93XIpd/rxUMiLGfCVDdlytcc/lAPZfLGMc+3U/symtsQmxOFdnaLmcs
AdifEAD1vh6D2IaUoBphjLTQeHpWXgVPnT54kVq70r6bni9tqBToixjVB53TAwRe
+PSQs9wkabYGydwkbRCKgSn06WipCJKzsuMCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBSz0ihRG/Zj+pC0QWWsH1fMmcH4lDAfBgNVHSMEGDAWgBSNAgqI/KD1rbtaWYqo
ElU05XXBPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MzkvalFJS2lQeWc5YTI3V2xtS3FCSlZOT1Yxd1R3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalFJS2lQeWc5YTI3V2xtS3FCSlZO
T1Yxd1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDM5L3M5SW9VUnYyWV9xUXRFRmxyQjlYekpuQi1KUS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAbQgMA0GCSqGSIb3DQEBCwUA
A4IBAQCBzxA0APb4lUHwuvQbyLeJoTv1+/6uzyzyMWX0uLJ9yL7ofIT9DpG9OrGa
nIkfPFAIpo1lAhWkRsckncKNhKueZ5zbVJpXio2WqKAQU0KIya/q8KEvcsePKioq
JF9pCD1QJTBqA0QlBqqvYwSEJHNlPzfrVjW/kKCQynMus+jhZq3/JlC8tU3iyLjH
voLjtf+p2qSHlEgdE8fCGyzcmRayk6hFXtB5a9L31r7jHd8YHw7DXB/ob824CWSl
vjOBgBWmgqcm9zFPRma4m2baYrkf8xKkGX/HNYm9ugn2iItffg53PT24hnjvM0qr
UuNZbVov07Q2S6nO7egjAm+SGbkR
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:35 2026 by rpki-client