
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-IZtcE6tp0zs3YvoPKFDGjqlK5A.roa
File: -IZtcE6tp0zs3YvoPKFDGjqlK5A.roa (raw, json)
Hash identifier: YS2d8yJ1dF4PZ890SJVO4dgZUPylHFN4Jodj2A86m6c=
Subject key identifier: F8:86:6D:70:4E:AD:A7:4C:EC:DD:8B:E8:3C:A1:43:1A:3A:A5:2B:90
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0621
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-IZtcE6tp0zs3YvoPKFDGjqlK5A.roa
Signing time: Sun 01 Mar 2026 02:21:07 +0000
ROA not before: Sun 01 Mar 2026 02:21:07 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:5300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:21:07 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=F8866D704EADA74CECDD8BE83CA1431A3AA52B90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:65:3b:08:dd:11:2c:11:ce:e9:a9:e0:d3:5f:
76:50:c0:d6:41:5b:84:12:e6:da:0b:f8:01:49:3a:
10:c7:80:e3:ae:2e:32:2b:1a:34:72:df:48:fe:b9:
57:2a:f2:30:1a:74:33:e9:d4:4d:3b:68:0d:16:86:
df:37:47:84:e6:de:27:69:6f:21:ac:6e:e4:e5:e9:
5b:17:32:ee:11:b9:15:0a:2d:77:cc:89:cd:49:a1:
fe:ad:e7:6c:62:cd:7f:38:bb:5a:cd:49:f2:08:db:
dd:b9:0f:88:8e:f4:b1:c8:78:72:ae:61:63:5b:1d:
c4:29:45:e4:ef:59:f2:cf:7a:2f:cd:0b:56:d0:07:
75:de:72:59:65:66:62:19:0a:3c:10:76:d6:50:47:
c0:1a:9a:c3:84:85:64:b2:e7:55:2c:c2:52:8a:77:
14:73:ef:10:18:8f:7f:4c:95:2e:5e:62:aa:a5:37:
b7:aa:2f:18:d1:67:2c:b9:73:96:e8:fb:15:d2:a1:
88:3f:eb:8b:08:0c:bc:a0:64:6a:e7:f5:f1:21:fb:
ce:5b:35:a5:9d:fd:b9:1b:72:7c:91:fc:12:41:4a:
62:d8:4f:5f:75:94:f2:04:57:8f:82:56:5b:97:09:
20:01:e8:b5:57:92:0b:7c:07:00:ad:f7:3b:b5:31:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:6D:70:4E:AD:A7:4C:EC:DD:8B:E8:3C:A1:43:1A:3A:A5:2B:90
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-IZtcE6tp0zs3YvoPKFDGjqlK5A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:5300::/40
Signature Algorithm: sha256WithRSAEncryption
c4:d5:bb:52:a8:f4:26:27:ec:60:3f:e6:13:ab:25:94:c8:23:
84:5e:5b:3b:b2:b6:99:46:e6:f1:15:62:c6:e0:ec:fb:32:4f:
aa:e8:e7:fd:35:97:90:55:70:9f:af:7d:29:c8:8b:ad:81:e4:
4b:c3:02:51:35:c4:59:9f:57:53:21:dc:ae:31:4c:2f:fd:67:
23:6d:d8:ee:ae:7a:a7:70:63:80:33:2f:f8:0c:42:6d:61:dd:
08:29:9a:ca:26:89:88:93:9c:58:82:2e:95:4a:00:3e:ad:41:
87:ed:9e:16:4d:be:ab:29:52:98:d1:54:72:61:22:07:26:03:
fb:ff:d4:a7:56:b9:44:e0:2b:4a:d1:49:7f:d3:61:b6:a5:84:
e1:c6:8b:3a:dd:a4:7a:c8:d6:9e:7b:0a:a7:c9:56:44:dc:1b:
eb:84:3a:a0:2e:10:8d:76:f9:4a:b9:a1:1a:34:ca:ec:fc:1c:
92:78:b2:ea:63:9e:71:c2:b6:db:41:70:37:f0:fd:c0:0a:df:
bf:45:fd:25:c6:cb:88:27:50:91:23:a3:ab:55:46:76:52:fb:
ea:09:34:44:70:97:35:31:6c:3f:5d:68:5b:35:31:df:55:2e:
1c:33:bd:22:ec:df:68:09:10:52:33:3f:92:fe:de:11:56:7a:
b5:3a:bb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:16 2026 by rpki-client