
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IhwavzC2HVhJ6IkIwgMG6x9nDRY.roa
File: IhwavzC2HVhJ6IkIwgMG6x9nDRY.roa (raw, json)
Hash identifier: h9QsFoSqyJrEjYT23N+p1uYE5gOhWm0K82GQTirXXRU=
Subject key identifier: 22:1C:1A:BF:30:B6:1D:58:49:E8:89:08:C2:03:06:EB:1F:67:0D:16
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0601
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IhwavzC2HVhJ6IkIwgMG6x9nDRY.roa
Signing time: Sun 01 Mar 2026 02:16:16 +0000
ROA not before: Sun 01 Mar 2026 02:16:16 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:a700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1537 (0x601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:16:16 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=221C1ABF30B61D5849E88908C20306EB1F670D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:17:3f:74:83:80:0d:10:a4:89:6e:2f:0b:
a5:57:c7:dc:2a:34:b0:66:02:bd:7a:ba:1e:29:c3:
b0:54:bf:c3:fc:46:4d:b2:70:72:4d:4b:2d:55:7e:
a4:8d:6f:fa:5c:49:b0:1c:54:24:21:5e:ca:b0:08:
58:3d:16:3e:e6:78:cf:8a:6d:f9:84:01:4b:9b:f9:
11:8f:17:4b:de:13:c5:ec:39:56:d6:bd:9c:a5:89:
73:01:58:02:25:0c:7e:b5:96:4b:5e:0f:3d:71:16:
3d:17:e4:86:bc:50:de:2d:b5:92:6d:25:62:cd:f6:
61:09:d7:2e:cf:09:8b:24:9f:e1:e4:4c:b6:f5:b3:
94:91:3b:73:70:0f:d7:69:0b:ca:00:9e:b7:56:4d:
5a:e2:17:37:e6:9c:bf:54:2b:09:8b:77:75:52:67:
1d:a8:d1:b1:58:cf:fa:f1:22:3f:d2:e2:0a:b5:39:
15:f6:a6:b7:e8:53:34:cd:ee:f2:ab:7c:b6:79:42:
cb:bd:25:56:eb:65:cf:74:d7:45:8e:27:07:a2:8b:
5f:38:ee:0f:5c:66:de:b6:30:77:97:34:44:7f:45:
a1:f9:f5:44:c9:81:a8:48:32:61:fe:78:f0:4b:e9:
b6:5e:c6:50:30:27:35:04:a9:ae:49:7a:0c:f5:66:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1C:1A:BF:30:B6:1D:58:49:E8:89:08:C2:03:06:EB:1F:67:0D:16
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IhwavzC2HVhJ6IkIwgMG6x9nDRY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:a700::/40
Signature Algorithm: sha256WithRSAEncryption
5e:bb:ec:bf:84:e0:c4:69:72:dd:3f:9c:1d:7a:21:fd:26:90:
08:f1:7d:d0:02:1b:d2:ac:5b:09:3a:41:2c:1c:9e:28:71:81:
4c:19:01:47:70:89:cf:89:4d:8d:d9:09:ed:47:28:c7:33:9f:
ea:c8:f9:c7:ce:b2:f0:55:22:31:6d:1b:fd:05:d3:c8:0f:30:
0b:a0:07:b0:d1:7b:53:cf:fd:c9:d7:19:e9:e1:29:dc:ad:43:
57:e9:91:43:15:56:78:50:ab:97:08:f3:eb:83:a7:9d:f7:3a:
5c:d1:13:90:2d:96:cb:f9:42:65:a8:14:e9:0b:63:3a:7e:12:
f4:9b:a2:73:7c:97:76:87:a4:4b:b3:6f:11:c8:b2:e6:3b:3e:
71:bf:d8:a3:18:53:14:87:89:c2:05:c7:c4:b8:05:74:92:e1:
f0:77:22:fb:b3:b9:e2:16:74:30:05:28:c8:f7:43:df:4c:bd:
d1:9a:79:21:ed:9e:bc:91:3d:08:1d:99:d3:fb:00:ec:fa:01:
9c:bc:f4:dc:2c:9c:b0:09:e9:5a:6b:2b:48:5f:0b:83:da:99:
76:63:ec:f6:92:1e:99:0a:17:01:5a:a0:2c:51:1f:a9:3d:8e:
46:b2:cd:de:41:eb:97:b5:2c:6c:f0:2b:3c:27:b5:b0:9f:49:
81:b1:47:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjE2MTZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyMUMxQUJGMzBCNjFE
NTg0OUU4ODkwOEMyMDMwNkVCMUY2NzBEMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+pxc/dIOADRCkiW4vC6VXx9wqNLBmAr16uh4pw7BUv8P8Rk2y
cHJNSy1VfqSNb/pcSbAcVCQhXsqwCFg9Fj7meM+KbfmEAUub+RGPF0veE8XsOVbW
vZyliXMBWAIlDH61lkteDz1xFj0X5Ia8UN4ttZJtJWLN9mEJ1y7PCYskn+HkTLb1
s5SRO3NwD9dpC8oAnrdWTVriFzfmnL9UKwmLd3VSZx2o0bFYz/rxIj/S4gq1ORX2
prfoUzTN7vKrfLZ5Qsu9JVbrZc9010WOJweii1847g9cZt62MHeXNER/RaH59UTJ
gahIMmH+ePBL6bZexlAwJzUEqa5Jegz1ZjWBAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUIhwavzC2HVhJ6IkIwgMG6x9nDRYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9JaHdhdnpDMkhWaEo2SWtJd2dNRzZ4OW5EUlku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa6cwDQYJKoZIhvcNAQELBQADggEBAF677L+E4MRpct0/nB16
If0mkAjxfdACG9KsWwk6QSwcnihxgUwZAUdwic+JTY3ZCe1HKMczn+rI+cfOsvBV
IjFtG/0F08gPMAugB7DRe1PP/cnXGenhKdytQ1fpkUMVVnhQq5cI8+uDp533OlzR
E5Atlsv5QmWoFOkLYzp+EvSbonN8l3aHpEuzbxHIsuY7PnG/2KMYUxSHicIFx8S4
BXSS4fB3IvuzueIWdDAFKMj3Q99MvdGaeSHtnryRPQgdmdP7AOz6AZy89NwsnLAJ
6VprK0hfC4PamXZj7PaSHpkKFwFaoCxRH6k9jkayzd5B65e1LGzwKzwntbCfSYGx
R+E=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:57 2026 by rpki-client