
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DfCdrQTvnNTClajJMfb7zbPqvrs.roa
File: DfCdrQTvnNTClajJMfb7zbPqvrs.roa (raw, json)
Hash identifier: N+3/ROUDtXMIQ5TnBUV0avVgT+0DnLqc1x8O8OTnH+w=
Subject key identifier: 0D:F0:9D:AD:04:EF:9C:D4:C2:95:A8:C9:31:F6:FB:CD:B3:EA:BE:BB
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 05D1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DfCdrQTvnNTClajJMfb7zbPqvrs.roa
Signing time: Sun 01 Mar 2026 02:05:38 +0000
ROA not before: Sun 01 Mar 2026 02:05:38 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:3100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:05:38 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=0DF09DAD04EF9CD4C295A8C931F6FBCDB3EABEBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e6:fc:49:40:93:9d:c3:74:37:7b:d1:ab:38:
bd:1a:5e:39:34:6e:04:6c:8e:1a:78:91:98:42:4b:
10:27:23:8a:c8:88:bd:a7:db:13:9f:55:7d:d0:60:
50:de:41:ea:d5:11:de:fa:d7:7c:b8:2b:98:ac:6c:
be:24:91:ca:23:7b:e8:24:f5:75:b0:ab:72:8f:95:
7b:d7:84:ef:ba:e1:7f:9b:b1:49:fe:b9:fd:b2:71:
c3:18:07:f9:ac:72:ed:06:67:a1:fd:ee:49:f5:76:
a2:a4:48:46:cd:f1:1b:e0:b5:86:10:32:2f:46:b2:
cc:1e:14:24:5d:40:61:98:94:c7:3e:a6:2d:6b:06:
ab:33:71:46:c7:f2:5a:48:18:cd:2d:fd:6d:cc:81:
c1:c4:8d:70:48:d5:6e:38:73:0c:70:84:1a:90:5c:
da:a8:14:d4:bb:99:2e:85:11:ad:b9:98:67:cc:43:
a4:08:ca:ad:14:e7:73:80:2d:7b:64:09:2c:7f:6c:
37:f0:81:f5:85:2e:e5:d8:8f:d3:27:2e:1d:31:32:
b2:2c:3c:3e:bc:8f:80:d0:85:62:38:65:dd:be:39:
e6:06:80:46:38:de:26:04:9b:7e:bc:2b:c6:4d:30:
bc:6e:f3:1f:14:1f:a1:d2:50:da:04:c3:fd:b4:21:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F0:9D:AD:04:EF:9C:D4:C2:95:A8:C9:31:F6:FB:CD:B3:EA:BE:BB
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DfCdrQTvnNTClajJMfb7zbPqvrs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3100::/40
Signature Algorithm: sha256WithRSAEncryption
25:5f:47:0d:03:e2:f0:d1:ee:fe:bb:72:6d:2a:2c:10:af:04:
17:14:7d:bc:77:96:0f:47:51:0f:5e:0b:01:1c:cd:85:02:7e:
06:27:45:94:a2:a4:29:af:81:5f:64:6d:c4:6b:d1:a0:ff:11:
c4:17:be:00:c0:22:76:cc:d3:21:0a:d8:93:35:d1:dd:26:42:
a1:44:f7:db:3a:83:25:48:2a:cc:8e:29:e2:74:1c:7b:da:d2:
02:be:9a:91:75:8e:80:af:5b:1a:60:cd:d4:d9:43:c2:a2:af:
bf:27:21:00:81:e6:36:e4:cf:f2:7b:49:a4:45:81:13:3f:73:
80:1f:cd:af:15:73:ff:a1:7e:38:c6:b9:e3:06:0e:2c:4f:05:
c7:e5:bc:e1:3f:70:93:56:6b:cd:1d:5f:41:35:ec:0c:34:33:
01:65:93:10:78:9d:b9:7f:94:03:38:88:11:08:23:75:95:41:
bc:12:88:4d:0e:61:2a:74:a8:ed:77:4d:9a:1b:e7:c3:3f:a3:
fa:ed:c4:36:55:6f:bc:00:dd:d3:01:25:78:1a:d4:84:6a:c8:
4c:a6:9f:f9:f4:57:c1:2b:a2:a6:e8:89:77:c8:38:0c:db:59:
9a:9f:cf:ad:bf:eb:68:0c:1b:b1:df:59:91:d5:56:0e:56:ad:
94:6d:69:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:25 2026 by rpki-client