
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/A2-3IUU8X5xldO8hM8MpMZFvG-4.roa
File: A2-3IUU8X5xldO8hM8MpMZFvG-4.roa (raw, json)
Hash identifier: 4NeXlZyO7FQbPt78b7eQtQ83Gdfc4hc3zwXChs+s7Dc=
Subject key identifier: 03:6F:B7:21:45:3C:5F:9C:65:74:EF:21:33:C3:29:31:91:6F:1B:EE
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 056C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/A2-3IUU8X5xldO8hM8MpMZFvG-4.roa
Signing time: Sun 01 Mar 2026 01:52:12 +0000
ROA not before: Sun 01 Mar 2026 01:52:12 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ba00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 01:52:12 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=036FB721453C5F9C6574EF2133C32931916F1BEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:56:94:b1:42:12:8e:cc:18:cc:4a:9f:0e:
21:c5:d7:1d:a9:ef:53:9b:3c:1c:c0:53:86:b6:f2:
28:d1:3d:d0:19:a3:65:d3:dc:6b:55:a3:df:3b:f9:
ba:b5:d7:73:c6:7d:84:bd:09:89:56:91:65:3c:9f:
9e:d3:5a:d6:6b:ad:7f:f9:59:a0:1b:86:47:f4:32:
bd:54:3d:a0:74:9c:c5:28:4c:af:91:42:49:c1:89:
b2:83:ca:e7:01:42:f2:ac:d2:e3:66:26:f1:20:8e:
19:a7:86:3c:a5:ca:80:b0:e0:af:cb:7a:01:2b:12:
1f:ae:21:19:cb:e4:d9:09:d2:67:bd:b0:5c:73:57:
07:39:ee:67:c1:f8:f5:7f:9a:c3:d3:9a:d3:97:bf:
b0:b0:63:51:17:4b:87:fa:51:de:86:be:52:53:2b:
30:ac:ab:92:f2:70:31:43:f6:f1:57:e2:e6:4b:c9:
1f:d1:d2:aa:96:4e:1a:d9:59:59:2e:f4:8a:85:c8:
14:43:e2:2d:05:b6:96:57:2b:e3:ba:60:c9:0b:af:
91:c1:a7:53:da:7d:56:68:5a:1d:ba:ea:3a:04:a8:
29:60:e9:45:02:76:2e:ff:56:50:6f:fb:a2:12:f4:
68:b6:19:22:95:32:e4:88:d1:33:12:f2:39:fa:c3:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6F:B7:21:45:3C:5F:9C:65:74:EF:21:33:C3:29:31:91:6F:1B:EE
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/A2-3IUU8X5xldO8hM8MpMZFvG-4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ba00::/40
Signature Algorithm: sha256WithRSAEncryption
ca:27:27:9e:9c:0c:b1:43:91:ae:fc:46:58:c0:8e:cf:4b:70:
5c:ca:d2:a5:e5:9e:1c:e0:94:7d:d2:18:4b:f5:a4:8a:1b:7a:
cb:5d:42:bb:99:3c:17:a7:13:76:60:51:a0:17:a7:46:86:3a:
61:f9:7d:5e:7b:a5:cc:c6:12:34:38:00:32:8d:50:8e:7a:49:
db:f0:e4:af:d5:85:c0:cb:c2:ce:9c:de:34:4c:49:a4:ff:d6:
79:16:58:4a:da:32:84:0a:d3:10:6c:3e:27:71:50:7c:68:df:
2f:66:52:84:05:b8:fc:cf:67:0e:c3:50:b4:f6:90:85:c0:95:
01:94:ec:18:90:88:2f:05:e5:4e:1a:7e:42:07:8c:6d:af:0f:
3f:db:01:13:7c:53:28:34:cf:4a:e6:5d:2e:1a:76:28:62:57:
2d:05:fd:e1:08:18:57:d7:81:f8:1f:2a:61:aa:78:3f:1c:bf:
7a:eb:43:da:0e:2c:d5:c3:a2:4f:c7:b3:17:22:25:51:c5:4a:
f4:a5:71:44:c4:be:15:e7:63:b0:82:f2:0c:ea:98:fb:e4:5f:
09:ea:89:2d:91:62:62:22:06:0e:b0:0b:8c:a2:d3:df:54:a2:
94:78:af:f3:0e:9d:c2:b5:1a:2d:2c:e0:3e:30:1c:65:94:31:
f4:1c:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:22 2026 by rpki-client