
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30440/OxdxH1sPWdC3StgH73ap3LEUykw.roa
File: OxdxH1sPWdC3StgH73ap3LEUykw.roa (raw, json)
Hash identifier: sp0oCEkhiiUazDMx6CVn46R/Eg9/xP3ch0HtNHuGLwA=
Subject key identifier: 3B:17:71:1F:5B:0F:59:D0:B7:4A:D8:07:EF:76:A9:DC:B1:14:CA:4C
Certificate issuer: /CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Certificate serial: 17
Authority key identifier: 14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/OxdxH1sPWdC3StgH73ap3LEUykw.roa
Signing time: Tue 31 Mar 2026 08:45:27 +0000
ROA not before: Tue 31 Mar 2026 08:45:27 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 152858
IP address blocks: 2401:b720::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Validity
Not Before: Mar 31 08:45:27 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3B17711F5B0F59D0B74AD807EF76A9DCB114CA4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:31:24:6f:59:ca:c2:30:64:e1:4b:43:ab:
45:e9:71:cf:aa:46:12:5c:97:49:32:93:2f:49:a5:
92:e0:7d:b1:d5:96:e1:33:d3:38:dc:ef:39:e9:5a:
47:0c:6f:01:38:bb:4d:42:51:53:99:70:83:3f:9d:
35:89:45:3b:65:00:3f:d9:32:c7:b9:a1:db:10:99:
f1:af:13:8b:ff:3c:4c:9e:85:ac:b5:7e:4b:9a:22:
2e:6b:ee:6b:2b:83:37:37:5d:40:df:51:f6:7a:24:
c2:1d:24:59:b2:25:46:0f:45:1c:09:b0:7b:21:9f:
1c:8b:a4:45:53:27:1a:65:35:1f:cc:6a:5a:2f:e8:
14:cd:f3:a4:4e:59:68:71:3a:f4:0c:7d:38:ee:66:
4d:96:74:ed:bd:db:5b:69:6a:fa:12:d2:d8:21:a9:
38:f2:e2:7b:89:94:02:22:17:16:26:c3:85:9b:99:
38:39:96:5c:fa:4e:3f:64:04:55:77:91:b7:d1:66:
2e:5e:4e:62:1e:79:d6:8c:5d:6a:e9:66:40:bd:d4:
bf:de:51:92:b3:3c:93:d6:25:45:52:59:4d:0c:9d:
df:32:90:82:ec:ca:29:82:9c:3b:88:5e:4b:d8:0a:
f5:24:dd:0f:3b:34:2f:89:0a:a4:86:6c:40:56:9c:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:17:71:1F:5B:0F:59:D0:B7:4A:D8:07:EF:76:A9:DC:B1:14:CA:4C
X509v3 Authority Key Identifier:
keyid:14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/OxdxH1sPWdC3StgH73ap3LEUykw.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b720::/32
Signature Algorithm: sha256WithRSAEncryption
1b:5b:00:de:26:9c:14:20:25:76:34:1f:53:ea:5e:8f:0d:d7:
40:91:13:77:f6:97:83:86:91:ce:d7:91:d2:14:09:7b:ec:dc:
4b:89:6e:85:cc:aa:57:b9:0a:3f:15:36:b9:d0:03:f1:ae:7a:
0f:c2:69:2e:58:3f:41:3c:da:f0:b1:34:83:60:df:84:7c:d0:
fd:04:75:ae:dd:79:89:8d:65:c5:9b:74:15:bc:5a:33:d3:d6:
ff:80:98:ae:6f:b7:dd:5f:4e:29:83:a5:27:f9:88:ec:34:ae:
9e:cc:c8:ed:b9:f4:77:5e:7d:e1:81:f8:a8:41:50:f2:e1:53:
f6:13:ff:09:0d:f7:cd:f8:4d:15:fc:73:39:1b:b7:07:c5:bd:
30:4b:ab:16:8c:17:1b:d2:27:b1:9b:39:74:a9:d4:36:b3:d0:
38:b9:c8:6b:af:c3:0b:de:56:07:d9:47:7f:a9:65:fa:f0:0e:
9f:80:28:7b:72:5a:d7:5c:32:6a:2d:67:74:b6:79:bd:15:ad:
ab:c3:9b:56:34:b7:74:05:5a:01:d0:ea:00:e4:06:ec:17:7a:
9d:e8:37:07:9a:91:a3:35:9e:e6:25:87:85:2b:d7:1d:67:86:
7f:32:11:a8:0c:cb:17:d1:6b:2b:c7:1e:f7:62:c0:51:42:4f:
b1:60:f3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:36 2026 by rpki-client