
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CahBkTp14sTLjvJNT4flZ9aonuU.roa
File: CahBkTp14sTLjvJNT4flZ9aonuU.roa (raw, json)
Hash identifier: nI54NoDj5IsLdpBka1WQSGnZsQ+R1KMef9WIhZ5DTnc=
Subject key identifier: 09:A8:41:91:3A:75:E2:C4:CB:8E:F2:4D:4F:87:E5:67:D6:A8:9E:E5
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0553
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CahBkTp14sTLjvJNT4flZ9aonuU.roa
Signing time: Sun 01 Mar 2026 01:46:49 +0000
ROA not before: Sun 01 Mar 2026 01:46:49 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 01:46:49 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=09A841913A75E2C4CB8EF24D4F87E567D6A89EE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:87:92:93:19:78:f0:a8:6a:cc:99:b6:bf:
f7:97:9a:c3:92:e5:2d:18:14:97:bf:f7:c2:09:a3:
e3:bf:c9:27:54:fe:90:25:cb:18:02:02:f5:cb:a3:
32:b5:1b:7d:70:0d:ae:4f:b3:7c:3a:1a:9d:de:4b:
a5:a2:d6:0b:cc:42:08:a9:33:cf:de:46:f9:c6:0d:
6c:4f:5a:8f:32:de:bd:9e:3f:5a:fc:9e:36:5f:51:
d2:4e:c7:90:84:d7:09:32:7b:81:a8:e4:56:01:34:
8f:26:79:5b:bc:e1:bd:bd:b3:f1:0e:61:65:63:3d:
27:04:f2:a1:a3:24:26:c1:bb:16:90:e1:b3:42:73:
dd:0a:a3:c4:16:3e:ce:c2:1b:c3:35:b6:a0:d7:a1:
9d:25:60:bb:6e:bf:81:bb:fa:b6:55:6e:27:3b:33:
b0:e8:1f:b5:fa:db:27:62:10:a8:61:f8:c2:69:9f:
b4:64:00:6b:54:7d:1a:6a:d0:4f:f6:8f:e3:60:63:
4d:cc:ea:fc:8b:fa:59:df:c4:7c:bb:ca:30:a4:c4:
bb:80:16:06:c1:39:7d:18:d0:4a:e5:4e:93:09:a8:
b1:7f:05:73:8f:af:17:3b:f3:07:33:30:76:99:a9:
f1:1d:83:5a:d0:2b:e8:60:3a:97:14:35:87:f3:71:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A8:41:91:3A:75:E2:C4:CB:8E:F2:4D:4F:87:E5:67:D6:A8:9E:E5
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CahBkTp14sTLjvJNT4flZ9aonuU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
ae:9f:93:ee:6d:46:e8:62:dd:9a:2b:61:32:b0:5f:f4:16:e8:
e3:a2:f7:25:ad:18:c3:51:fb:a0:ab:6e:ad:e1:25:1f:df:64:
e5:6d:49:82:3e:b2:1c:b6:f8:f4:b6:fe:c6:72:01:f6:b1:82:
a4:f9:0c:e8:15:fc:cd:9e:52:61:92:bc:f2:24:51:5a:f2:ea:
de:ac:5f:f0:94:fb:2b:3f:f3:cf:dc:d7:0a:04:2a:89:20:23:
f2:06:a6:a3:d5:23:ef:10:18:d0:14:e1:bb:58:aa:0b:bd:2a:
d2:f1:76:79:c1:67:df:cc:6a:9a:21:e0:b8:ac:e9:f1:f6:cd:
68:9e:a2:7a:79:b1:62:de:7a:fa:4c:36:77:ea:ec:ef:6a:4c:
35:36:06:53:bd:fd:44:27:ac:c8:7b:6f:aa:b2:12:fb:64:a9:
1d:d6:af:dc:04:80:ec:5e:99:0e:89:dc:c1:ea:f8:60:91:12:
b4:62:78:10:de:99:6c:3c:09:36:0b:8b:e3:10:78:c3:93:fd:
d7:f4:df:4a:6a:c3:50:0d:bb:3f:2b:3c:f9:b8:75:e0:9f:38:
b1:4e:68:5c:d1:2e:84:85:56:7a:51:94:83:a8:67:4e:9b:2c:
3a:e0:43:d4:99:9a:c5:29:75:17:d8:7e:02:66:a0:4e:38:e4:
7f:8b:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:18 2026 by rpki-client