
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30274/YINK4MGdnaO5wOvzKknn2uQDEbc.roa
File: YINK4MGdnaO5wOvzKknn2uQDEbc.roa (raw, json)
Hash identifier: xGk718hkRHf8+l8190eSnC/VynFwY4xkSpXGgYxnZW0=
Subject key identifier: 60:83:4A:E0:C1:9D:9D:A3:B9:C0:EB:F3:2A:49:E7:DA:E4:03:11:B7
Certificate issuer: /CN=D48114BF4928572B1E92F271003C6E0F2DC87E46
Certificate serial: 02
Authority key identifier: D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/YINK4MGdnaO5wOvzKknn2uQDEbc.roa
Signing time: Tue 10 Mar 2026 03:30:03 +0000
ROA not before: Tue 10 Mar 2026 03:30:03 +0000
ROA not after: Wed 10 Mar 2027 03:08:33 +0000
asID: 23791
IP address blocks: 2402:3880::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D48114BF4928572B1E92F271003C6E0F2DC87E46
Validity
Not Before: Mar 10 03:30:03 2026 GMT
Not After : Mar 10 03:08:33 2027 GMT
Subject: CN=60834AE0C19D9DA3B9C0EBF32A49E7DAE40311B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:70:72:6e:0f:3f:26:8b:05:9e:ba:88:5a:
8c:c9:5c:20:8a:6e:0f:81:aa:a5:ed:94:9c:9b:3a:
4f:10:e1:00:ef:05:b0:90:5a:55:5a:85:09:c3:52:
fe:34:b2:89:50:9d:95:0c:01:2c:e0:25:37:36:1d:
78:5a:22:da:22:a1:12:6a:58:23:43:e2:6a:b1:47:
2f:91:47:26:8b:58:56:5e:08:3b:08:fa:28:6c:b6:
16:11:62:a7:c3:63:f9:de:87:ba:10:7d:6b:3c:19:
33:e9:8c:61:24:f6:91:75:3e:b8:2c:af:7e:27:5a:
98:25:3e:99:0a:85:d8:0d:17:72:18:65:b4:b9:c8:
e9:9b:33:de:67:b7:45:ec:17:8d:f6:39:cf:da:4d:
93:d8:82:c6:19:df:c0:c9:b5:07:44:62:6b:58:c7:
46:64:cd:67:d8:19:6e:62:ab:ac:b0:61:1f:fb:e9:
bc:98:20:ff:90:4c:8c:dd:c9:d4:f0:b3:14:4e:53:
80:1a:38:a3:46:43:b1:c9:d8:0a:20:69:cf:b3:f4:
44:98:70:90:c0:06:0e:12:61:24:33:a1:2a:1a:8a:
94:cd:99:d9:f7:c8:6b:e9:19:dc:82:14:a2:76:fa:
1b:26:f3:cc:e2:6e:ee:e4:c0:b2:2b:89:ca:82:f8:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:83:4A:E0:C1:9D:9D:A3:B9:C0:EB:F3:2A:49:E7:DA:E4:03:11:B7
X509v3 Authority Key Identifier:
keyid:D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/YINK4MGdnaO5wOvzKknn2uQDEbc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:3880::/32
Signature Algorithm: sha256WithRSAEncryption
80:97:63:8c:b8:db:41:96:eb:52:b8:99:e4:d0:7a:13:58:12:
5e:af:64:09:26:03:2e:1e:f9:a9:5a:c4:6c:e5:09:8f:2d:3b:
6f:bb:23:62:85:b9:48:73:db:fa:99:af:21:37:90:7e:41:d5:
1d:c9:d0:d7:72:94:d9:a4:48:e3:99:a4:25:d8:f5:6e:c4:0d:
bc:f3:cc:3f:79:b7:dc:0c:39:dc:56:91:e1:e5:cc:f7:8f:96:
1e:ea:85:0c:b5:7d:52:3b:01:e9:53:b5:7b:49:6c:b0:f4:df:
5f:38:73:c6:82:47:2a:2b:82:6d:be:26:76:c1:91:1e:ee:29:
6e:88:05:fb:f0:5f:57:96:1b:f1:9b:b7:0d:a7:de:79:93:cd:
53:49:aa:aa:6a:fb:64:e0:0c:1d:57:2b:e6:39:5d:c7:5b:a1:
1e:06:5c:91:2f:e8:3a:c0:69:55:bb:f0:2c:3c:d0:34:a3:fa:
ff:3f:42:e7:c7:43:4c:e7:5c:40:8c:fc:67:65:39:35:f6:3e:
37:4a:fc:88:85:8c:2f:70:ee:0b:24:50:bd:80:e4:f0:4f:51:
da:9a:8a:f5:de:a5:b5:7e:37:d2:87:55:32:68:9b:a6:99:cc:
d3:14:04:88:3f:f8:5d:9c:88:8c:5e:60:e9:82:09:41:1a:00:
c0:c7:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:08:03 2026 by rpki-client