
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/L-ajjMfcB9CH96S7RrTORU_T4sA.roa
File: L-ajjMfcB9CH96S7RrTORU_T4sA.roa (raw, json)
Hash identifier: LEPdSi8CFJPiDMp2PqrsWN7aIYU9685ewUJXNQnUy8U=
Subject key identifier: 2F:E6:A3:8C:C7:DC:07:D0:87:F7:A4:BB:46:B4:CE:45:4F:D3:E2:C0
Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial: 3260
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/L-ajjMfcB9CH96S7RrTORU_T4sA.roa
Signing time: Tue 31 Mar 2026 07:30:47 +0000
ROA not before: Tue 31 Mar 2026 07:30:47 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7671
IP address blocks: 222.231.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:41:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12896 (0x3260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Validity
Not Before: Mar 31 07:30:47 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=2FE6A38CC7DC07D087F7A4BB46B4CE454FD3E2C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:a5:e2:d5:4c:30:b8:10:81:f2:cc:73:65:
46:9c:ec:7a:f8:5c:f0:b7:e7:96:be:f4:2a:fd:23:
94:02:f4:94:e5:d5:58:90:8d:b8:61:c9:ec:17:da:
19:2b:d5:e9:64:d2:87:2d:1f:f4:12:ba:20:1b:82:
01:00:bd:d6:b9:71:5d:7f:2a:9f:e9:f0:10:da:b1:
54:4d:1d:e3:c4:93:6b:09:61:4d:6a:37:7e:4e:43:
14:d1:fa:a1:fd:55:45:a7:3e:39:bf:68:79:63:78:
d3:13:03:6b:2a:d5:1d:13:ef:0f:7b:9e:55:e7:9c:
b8:d9:3b:c1:a8:94:e1:28:11:75:4b:b9:44:dc:dd:
13:a9:e8:d7:cb:73:8a:5c:a5:7f:1e:64:29:f1:e6:
f1:02:61:59:ba:93:9d:d8:f8:1b:11:0b:c3:ec:50:
e3:fe:12:26:5b:78:f9:54:03:79:4f:4e:d1:78:cb:
f4:30:ac:c2:bd:b3:eb:da:3d:c6:a1:e1:24:8a:1b:
f3:8d:2d:1e:ca:04:a3:f5:d1:21:cc:8b:65:12:64:
72:dd:57:7d:1f:3b:c3:78:47:45:2f:bf:28:9f:73:
50:37:0f:cb:b0:b9:1b:85:89:39:08:fd:70:d1:20:
76:c2:c8:1a:cd:0b:01:e2:ad:ef:23:75:52:9b:4b:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:A3:8C:C7:DC:07:D0:87:F7:A4:BB:46:B4:CE:45:4F:D3:E2:C0
X509v3 Authority Key Identifier:
keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/L-ajjMfcB9CH96S7RrTORU_T4sA.roa
sbgp-ipAddrBlock: critical
IPv4:
222.231.128.0/17
Signature Algorithm: sha256WithRSAEncryption
ac:ac:f7:ec:1c:1e:e8:35:fa:e7:52:04:a6:df:b9:3e:01:65:
70:2e:e0:a5:61:47:64:ff:8a:2c:b1:1b:ee:4c:cc:a0:11:36:
ea:4a:42:19:c2:2c:47:61:8c:e7:d4:cb:3c:6e:0a:d7:a1:6a:
ef:b8:a7:4c:2a:c7:1c:cc:79:b4:5b:64:1c:6f:39:6e:93:39:
dc:17:17:25:0d:7a:a7:00:bc:9c:a6:a1:ab:7c:3b:cb:6f:1a:
ff:db:96:df:bc:d6:c5:7e:9c:50:e8:08:a6:7a:41:aa:e0:ec:
0f:3d:4a:43:34:11:30:46:5c:62:03:72:3a:48:2c:bf:4c:c0:
42:94:84:9c:f9:5b:84:3e:c2:4d:63:0f:3c:78:ae:11:4e:3d:
b4:66:a4:4b:8a:20:2e:a2:5d:42:60:2a:28:5f:bb:f8:c8:03:
63:a9:23:47:ed:65:87:53:c7:09:aa:9b:85:2b:78:a1:75:35:
50:b0:a5:4b:1e:72:06:31:3d:9f:00:d1:73:3a:cb:39:5e:d7:
c1:b1:26:d3:19:66:87:a8:e3:60:aa:73:ea:fa:d8:65:43:1b:
d0:4f:67:b2:4a:11:ea:d6:5d:c4:00:7a:f8:06:b8:1b:9f:22:
41:d4:40:20:ee:c2:8e:5a:ca:84:31:ac:e6:29:a2:ae:d7:3a:
7b:5b:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:26 2026 by rpki-client