
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39052/ey-4NwZEgkGSuuxnACJ7btPszbo.roa
File: ey-4NwZEgkGSuuxnACJ7btPszbo.roa (raw, json)
Hash identifier: boeBXRYBJW4QPohP+ENem6i8Hw/7BD1O7FUmlhves5o=
Subject key identifier: 7B:2F:B8:37:06:44:82:41:92:BA:EC:67:00:22:7B:6E:D3:EC:CD:BA
Certificate issuer: /CN=C1EE9F889CC4D520C7DED001BF901058A50C052C
Certificate serial: 09
Authority key identifier: C1:EE:9F:88:9C:C4:D5:20:C7:DE:D0:01:BF:90:10:58:A5:0C:05:2C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/we6fiJzE1SDH3tABv5AQWKUMBSw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/ey-4NwZEgkGSuuxnACJ7btPszbo.roa
Signing time: Tue 31 Mar 2026 08:47:15 +0000
ROA not before: Tue 31 Mar 2026 08:47:15 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 58785
IP address blocks: 2001:df3:a700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/we6fiJzE1SDH3tABv5AQWKUMBSw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/we6fiJzE1SDH3tABv5AQWKUMBSw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/we6fiJzE1SDH3tABv5AQWKUMBSw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1EE9F889CC4D520C7DED001BF901058A50C052C
Validity
Not Before: Mar 31 08:47:15 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7B2FB8370644824192BAEC6700227B6ED3ECCDBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:cb:48:a8:f6:22:08:95:e6:fa:70:fd:b6:
34:79:33:c7:e0:2c:36:b3:d5:53:93:e3:f2:b4:27:
3d:21:7b:08:47:89:8c:f5:a2:9a:f1:23:1a:b3:fa:
59:a3:4f:ad:c4:8c:6d:c0:10:44:51:13:ee:ad:fa:
3e:b3:fa:e8:9a:9c:ce:21:c5:6c:9b:5a:bb:74:7d:
28:b3:3f:5a:f5:3b:0e:73:a4:3e:c6:28:3f:86:93:
71:7d:6e:cd:43:2a:3c:94:e9:c1:c9:f1:fc:f6:06:
b9:87:6b:ed:38:f9:d7:56:cd:d1:45:51:24:04:4c:
df:6a:7b:22:ee:d6:c6:14:46:0b:5f:5a:3f:c0:1a:
d6:1f:90:09:ba:3a:5d:6a:91:70:3e:d5:3a:c3:3d:
59:b3:58:eb:3b:c1:12:d9:97:ac:ac:61:41:fa:e2:
ef:f1:8e:c7:25:14:d0:4a:08:5a:c6:7f:da:c4:0a:
93:9e:4e:9a:b7:8b:95:1d:2c:9e:11:c3:c6:8b:72:
90:f3:18:be:99:ae:32:65:2e:d3:37:1a:70:b4:43:
2a:5d:3f:1b:5a:74:18:7f:9b:26:7b:1d:a1:dd:fa:
e2:0e:02:e8:75:13:61:c7:71:95:29:d8:22:64:46:
6d:ae:ac:ce:ef:20:51:2a:71:f0:3d:38:bf:12:5e:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:B8:37:06:44:82:41:92:BA:EC:67:00:22:7B:6E:D3:EC:CD:BA
X509v3 Authority Key Identifier:
keyid:C1:EE:9F:88:9C:C4:D5:20:C7:DE:D0:01:BF:90:10:58:A5:0C:05:2C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/we6fiJzE1SDH3tABv5AQWKUMBSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/we6fiJzE1SDH3tABv5AQWKUMBSw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39052/ey-4NwZEgkGSuuxnACJ7btPszbo.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:a700::/48
Signature Algorithm: sha256WithRSAEncryption
38:0b:99:fa:0a:b9:7c:ea:2d:13:94:28:14:0b:4e:9f:99:7a:
a6:26:36:0c:4e:82:b4:1d:0f:cd:63:44:32:6c:a1:11:84:87:
87:29:e6:51:a7:dd:21:d7:0a:a4:b3:55:47:bc:75:8a:f7:31:
43:29:47:fd:7c:67:7e:b4:72:94:d7:a1:3e:40:ee:68:1e:4c:
b3:a3:3e:3a:12:68:10:2b:ac:78:24:bf:3b:c6:7e:de:98:1b:
03:a1:35:09:8a:e8:87:78:38:59:ca:fa:56:22:36:7c:2a:9f:
a9:de:a2:a8:f3:99:2e:79:de:fd:0b:eb:55:eb:9d:93:82:db:
d9:62:69:66:f1:14:de:b8:29:78:71:c5:53:34:5e:76:22:c0:
81:b1:14:cf:3f:e1:d2:40:27:70:69:8b:5d:1a:d8:96:8d:26:
72:1c:91:a8:d8:f4:5e:6b:3b:0e:e8:a2:29:b3:4f:bd:38:a2:
c5:4b:ad:ba:6a:89:df:56:46:3c:89:e0:51:04:03:70:5f:9e:
5b:37:43:2a:de:07:fc:cf:63:e3:e7:4d:60:35:8e:52:32:db:
67:22:7d:ca:f1:30:36:37:33:1f:80:7a:8c:79:ae:e6:f3:70:
22:53:06:30:0f:fa:d1:10:94:54:62:7a:3f:48:94:87:c3:2e:
3e:e5:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:37 2026 by rpki-client