
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30443/lYpk9gNRztQMhY9D79LfYifao9s.roa
File: lYpk9gNRztQMhY9D79LfYifao9s.roa (raw, json)
Hash identifier: qoZUTGVz0TFCGRfGXZJ8WnqtsKREjwIfF05ubHFE304=
Subject key identifier: 95:8A:64:F6:03:51:CE:D4:0C:85:8F:43:EF:D2:DF:62:27:DA:A3:DB
Certificate issuer: /CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491
Certificate serial: 14
Authority key identifier: DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/lYpk9gNRztQMhY9D79LfYifao9s.roa
Signing time: Wed 11 Mar 2026 08:53:40 +0000
ROA not before: Wed 11 Mar 2026 08:53:40 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 131973
IP address blocks: 2401:d0a0::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 05:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DAF8DA0CEB9A4A4E6637D619AE4E712DA91AF491
Validity
Not Before: Mar 11 08:53:40 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=958A64F60351CED40C858F43EFD2DF6227DAA3DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:68:1a:c3:b3:a6:cb:e7:2b:42:13:a6:ea:
77:04:c7:e2:36:0c:f5:8d:3b:6c:01:ab:62:bc:db:
6f:e1:85:01:b0:27:2a:7b:cf:98:4c:d6:f0:f1:d6:
04:fa:fe:91:48:19:90:9a:5d:bc:7a:7e:cb:b4:a1:
9e:1d:65:ab:44:8e:29:3d:9e:ab:bd:6c:18:8d:7d:
b1:16:7f:6a:d0:6d:92:a6:62:e5:d6:87:4f:1b:a9:
04:21:b2:8f:bb:e3:f8:38:8d:bb:03:fe:f4:7a:5b:
56:82:75:2b:8b:8c:0a:89:ff:3d:31:74:ab:df:db:
f2:16:81:d5:dc:40:73:4a:d1:eb:5d:08:68:b9:71:
f9:5f:1f:bb:7d:e4:f0:74:43:af:2e:5d:35:d4:b7:
64:df:e5:02:20:d6:92:05:91:22:4a:8e:55:0c:8a:
58:00:ba:5d:82:36:57:23:0c:f7:62:66:f8:9d:64:
28:83:08:ca:a6:07:4d:cf:f6:8d:3e:d9:30:1e:41:
0b:cd:e0:58:9c:8a:dc:9e:87:45:5c:23:8a:8c:a8:
65:f9:6f:73:21:ab:6b:7f:e7:71:f3:7a:0f:a2:36:
51:1a:9d:9d:75:02:37:63:ef:36:d2:67:43:70:84:
e7:fc:20:0b:87:2c:d6:4b:84:1f:6d:2e:d3:f4:fd:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8A:64:F6:03:51:CE:D4:0C:85:8F:43:EF:D2:DF:62:27:DA:A3:DB
X509v3 Authority Key Identifier:
keyid:DA:F8:DA:0C:EB:9A:4A:4E:66:37:D6:19:AE:4E:71:2D:A9:1A:F4:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/2vjaDOuaSk5mN9YZrk5xLaka9JE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2vjaDOuaSk5mN9YZrk5xLaka9JE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30443/lYpk9gNRztQMhY9D79LfYifao9s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:d0a0::/34
Signature Algorithm: sha256WithRSAEncryption
7e:73:fd:b4:9e:be:42:b3:63:58:55:4e:2a:3b:6d:e3:7b:d9:
61:c1:5d:2c:48:0d:59:46:ed:12:1d:d6:b9:82:02:14:5b:02:
b8:ba:1d:bc:c7:9f:75:a9:94:ea:16:08:5e:fd:c6:9d:26:ac:
92:ee:bc:5e:78:30:23:0b:5f:4b:08:8e:f9:3b:bd:63:72:6c:
d5:6f:44:5c:d5:f0:f3:6f:2c:ec:0f:f7:d6:3f:42:33:02:1e:
76:04:48:50:de:65:53:ee:33:c1:af:71:e7:be:f2:38:14:6f:
21:be:d3:9e:23:ac:e5:98:75:32:b6:ce:39:b4:cb:ff:75:a2:
1a:3d:c9:03:b9:44:6a:fb:53:05:a2:2b:5e:3c:91:fa:f2:ff:
31:24:4d:e7:12:dd:b9:ec:18:b1:20:e3:96:4b:e0:61:af:ef:
ed:a2:6a:5e:07:7d:42:17:89:92:97:1f:81:6a:12:2c:d0:d8:
68:50:1e:9b:4b:fd:cc:d2:24:67:89:ee:96:96:3d:d3:b5:a4:
63:54:22:72:7e:42:6a:fd:6d:91:07:4a:7c:6c:dc:20:91:f4:
0b:b0:ee:e3:be:e6:c7:85:a2:08:b4:65:2d:fb:67:52:3d:6c:
94:ef:25:18:1c:33:12:34:0c:9b:44:e4:0c:9b:fb:2e:b8:5b:
eb:b5:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:17 2026 by rpki-client