
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M358SqH8YQQRkreuYE1bYf2n2-U.roa
File: M358SqH8YQQRkreuYE1bYf2n2-U.roa (raw, json)
Hash identifier: dEDlviSYN9UEQjwkuqAVf3SrAcyBYEL2NM7dNVe4mSU=
Subject key identifier: 33:7E:7C:4A:A1:FC:61:04:11:92:B7:AE:60:4D:5B:61:FD:A7:DB:E5
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 05D4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M358SqH8YQQRkreuYE1bYf2n2-U.roa
Signing time: Sun 01 Mar 2026 02:05:40 +0000
ROA not before: Sun 01 Mar 2026 02:05:40 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ae00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:05:40 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=337E7C4AA1FC61041192B7AE604D5B61FDA7DBE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:da:6a:e5:0d:24:d8:25:52:94:03:cf:10:
97:df:27:93:59:d6:a0:ff:69:80:8d:58:07:d3:8b:
74:86:55:b0:eb:24:02:fc:ab:1b:82:a0:f5:a5:0c:
d8:aa:3e:db:96:2d:e0:8c:cb:41:d7:22:32:55:df:
d5:65:b9:51:f5:30:cf:7b:00:06:a5:66:7d:40:94:
23:40:e7:3d:4b:b7:c5:f4:80:b8:0a:e4:e2:88:0f:
7a:28:c0:27:98:64:d5:96:1e:41:4b:59:88:25:04:
49:02:b0:a9:04:1f:d8:98:5c:ce:50:76:d8:7b:87:
58:c9:2a:82:51:6f:c2:4c:f0:51:47:08:b5:d0:46:
62:98:8b:fc:11:9d:a0:27:9c:98:44:66:30:d5:f5:
48:40:3f:24:bb:f9:ff:66:c9:42:c2:4d:4e:f2:9b:
d6:7d:67:47:dd:0a:29:e0:3a:2f:5e:e5:93:62:92:
d7:32:31:58:fc:06:d7:eb:1b:37:94:b9:e6:61:ce:
4f:06:43:06:a2:51:27:05:42:6b:73:94:ae:94:14:
fe:fc:8c:55:df:98:45:38:95:f1:8f:ac:8f:aa:e6:
5e:3b:23:9a:7a:22:ed:34:d5:be:77:a5:4d:dc:08:
4a:7e:c6:90:86:52:9a:67:3f:55:89:22:9c:b3:cf:
9e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:7C:4A:A1:FC:61:04:11:92:B7:AE:60:4D:5B:61:FD:A7:DB:E5
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M358SqH8YQQRkreuYE1bYf2n2-U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
40:b5:a1:53:b4:c8:ca:86:27:4b:fb:dc:7a:db:bf:8d:5c:0c:
5b:3b:f9:2a:01:db:e5:98:d1:51:14:d8:a5:86:35:40:03:22:
cd:62:8c:01:92:6e:eb:69:73:1d:43:d8:27:15:a9:53:89:36:
81:68:fc:e3:6d:1a:61:37:af:81:5c:fe:23:18:b3:d4:3b:d1:
c3:62:ff:c5:fa:97:4b:cf:7a:b2:07:e4:87:6d:97:b9:5a:1e:
84:94:46:16:69:34:41:b0:ba:37:f8:4e:4e:3d:c6:8f:21:82:
05:0f:88:69:53:e1:6c:e9:63:b3:f2:ee:db:d1:c1:6d:9e:77:
d6:ab:36:68:a4:12:f4:48:6f:af:70:0b:3d:a7:17:7e:45:bd:
91:06:c4:f1:9e:44:9f:bf:bc:3c:0e:5c:ff:33:8d:6b:41:5a:
66:9d:f1:a0:28:76:9b:e0:38:50:b5:5e:bf:51:72:e8:64:43:
1b:24:92:77:74:e7:df:2e:76:71:cd:30:23:33:05:49:41:8a:
26:e3:bb:38:b6:44:2f:b0:fe:48:57:a0:9c:be:b5:ab:49:2c:
f4:a2:c2:71:73:76:83:cf:df:89:4a:3f:2e:c2:9a:f7:88:3e:
a3:e1:46:12:39:c9:ff:ef:1c:c0:30:4d:7a:ac:c4:c1:e9:70:
71:10:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:58 2026 by rpki-client