
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30457/exXrQbpwiy8qE3qy26YdczAWc6U.roa
File: exXrQbpwiy8qE3qy26YdczAWc6U.roa (raw, json)
Hash identifier: qTH6hJdy0jycsTVnpl3p/XPf6EHU7sdy/BHDyOB0Wno=
Subject key identifier: 7B:15:EB:41:BA:70:8B:2F:2A:13:7A:B2:DB:A6:1D:73:30:16:73:A5
Certificate issuer: /CN=3F8DED57D242857BD20D6622080D938C868DCF5A
Certificate serial: 02
Authority key identifier: 3F:8D:ED:57:D2:42:85:7B:D2:0D:66:22:08:0D:93:8C:86:8D:CF:5A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/exXrQbpwiy8qE3qy26YdczAWc6U.roa
Signing time: Thu 09 Jul 2026 10:44:27 +0000
ROA not before: Thu 09 Jul 2026 10:44:27 +0000
ROA not after: Fri 09 Jul 2027 06:55:03 +0000
asID: 151378
IP address blocks: 2402:52e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F8DED57D242857BD20D6622080D938C868DCF5A
Validity
Not Before: Jul 9 10:44:27 2026 GMT
Not After : Jul 9 06:55:03 2027 GMT
Subject: CN=7B15EB41BA708B2F2A137AB2DBA61D73301673A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dc:b1:a1:3d:df:b6:4a:36:4d:e9:cf:c4:81:
11:d5:cd:89:c0:a6:b0:e6:26:c2:f9:ed:96:69:4c:
0c:4e:ce:ba:e6:b0:b4:ad:6b:2f:05:3a:d2:ad:7f:
ea:48:9d:bf:ea:a6:7d:f0:3f:aa:7e:ea:0c:77:9e:
a1:77:a7:ef:38:1a:be:f3:c4:9d:4d:76:2a:ce:84:
4a:d7:fa:86:dc:dd:33:1e:2a:ea:d4:d6:dd:16:7c:
ad:ab:b1:e0:73:89:dc:cd:26:e4:2f:75:91:b9:0e:
41:f4:93:9d:0e:cb:ca:8d:31:de:ec:bc:1a:33:5c:
96:74:cc:50:3f:33:cc:c4:29:03:56:94:83:7b:97:
6b:fc:bf:37:b6:1e:9d:89:29:3c:90:3a:30:09:f6:
5a:19:b8:e5:2b:f9:25:8d:b1:ab:01:23:9b:31:c6:
53:2e:ca:2b:d2:69:66:3b:93:95:b7:be:5a:68:6a:
58:6f:ed:a4:73:67:ca:17:9f:0d:48:8c:06:55:cb:
99:89:6f:2b:83:55:2c:06:51:ad:1f:09:60:31:00:
7a:f8:eb:8a:08:b7:26:29:7e:02:71:70:94:43:d1:
d8:25:0a:57:7b:5f:72:d6:a7:09:09:4e:b5:1f:59:
7e:95:2d:2d:2c:d9:57:61:a1:0c:c5:95:82:19:a4:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:15:EB:41:BA:70:8B:2F:2A:13:7A:B2:DB:A6:1D:73:30:16:73:A5
X509v3 Authority Key Identifier:
keyid:3F:8D:ED:57:D2:42:85:7B:D2:0D:66:22:08:0D:93:8C:86:8D:CF:5A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/exXrQbpwiy8qE3qy26YdczAWc6U.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:52e0::/32
Signature Algorithm: sha256WithRSAEncryption
08:c4:c1:69:f0:e5:dc:c0:65:47:72:03:c9:80:cf:d7:52:e4:
48:eb:57:d6:64:0b:05:9b:4e:21:3a:a9:2f:6d:3f:16:03:fb:
64:66:99:4c:a7:13:83:0b:f5:3f:22:8c:4d:78:c6:fe:17:96:
ae:94:3b:2c:5c:06:c8:ae:d8:74:7e:71:37:11:21:c4:f9:60:
88:c6:81:61:dd:9f:93:16:25:9b:0b:f8:ed:bb:7c:2b:ce:84:
cd:ba:87:44:03:c7:23:5c:6f:f3:06:d2:dd:ca:e7:7f:2c:fa:
65:bc:2c:5f:86:b2:e2:1f:fd:f1:e8:6b:ca:86:24:89:53:7f:
09:27:08:52:5e:6f:3c:e6:44:a0:7c:2d:64:5e:ec:db:35:ae:
05:cd:74:25:7c:33:87:9a:8f:f6:3a:c6:3e:1b:a5:70:e0:2b:
d1:7d:8d:3d:e5:5b:5f:74:01:4f:19:00:e5:9e:4b:9d:b1:a3:
ab:90:99:f4:5f:96:54:40:8d:c9:41:58:ba:10:b0:52:fd:04:
a9:07:6b:17:bb:b0:65:32:8c:9b:0d:a7:80:d4:c6:41:c4:18:
05:ae:3c:ca:c8:b1:e6:69:73:a1:fc:46:bf:55:87:9b:4e:02:
da:c4:18:6e:d6:ca:ba:23:e1:16:84:3f:59:93:1c:e1:94:08:
af:d3:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:01 2026 by rpki-client