
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OimOKjce1P9kbuQOi6qPTXcAf0E.roa
File: OimOKjce1P9kbuQOi6qPTXcAf0E.roa (raw, json)
Hash identifier: ieOYR3R0nIi0iX9Wkzdlke3RuilEMOwnV0YRKRuWmok=
Subject key identifier: 3A:29:8E:2A:37:1E:D4:FF:64:6E:E4:0E:8B:AA:8F:4D:77:00:7F:41
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0613
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OimOKjce1P9kbuQOi6qPTXcAf0E.roa
Signing time: Sun 01 Mar 2026 02:20:57 +0000
ROA not before: Sun 01 Mar 2026 02:20:57 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:1d00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1555 (0x613)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:20:57 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=3A298E2A371ED4FF646EE40E8BAA8F4D77007F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:a5:bb:82:1c:13:fb:70:f6:95:34:fe:2f:
d5:17:0c:b4:26:bd:7e:72:ea:11:e7:a7:34:97:ff:
bf:25:44:ba:47:be:a6:60:16:31:4a:3e:b1:03:c1:
8a:28:ed:30:b0:0a:f3:77:70:79:db:6f:bc:75:15:
70:8d:f7:9c:71:66:19:61:ec:5c:2a:a2:cc:55:ec:
ea:b1:63:ae:c4:79:ee:ba:cf:60:ed:9e:e8:33:32:
be:44:7c:fe:67:73:83:2f:68:e3:14:c9:93:9b:6a:
a6:7e:be:5e:aa:99:6c:60:af:df:64:36:71:1c:f4:
b2:be:3f:65:f6:c3:f6:28:2a:74:05:d5:15:bb:5b:
7d:2d:9d:b5:f3:78:22:50:b3:d8:2d:d2:76:4b:c9:
5f:c0:2e:fe:4e:25:80:f3:d2:b7:88:16:da:af:ff:
fb:a3:22:fe:18:40:07:ba:b0:a0:ef:c5:8c:e4:d1:
5f:2f:b9:8a:5c:db:e3:5f:43:39:4a:99:5b:6c:eb:
3c:b9:fd:90:db:a7:2c:ee:a4:70:33:07:22:97:fa:
28:45:0a:4d:00:b4:09:05:4d:87:ed:91:4e:85:24:
ce:e0:e3:b5:1d:5b:6d:73:08:0d:16:f1:20:04:8d:
1b:63:80:be:78:da:e6:44:8d:6d:8f:8e:e7:94:d2:
05:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:29:8E:2A:37:1E:D4:FF:64:6E:E4:0E:8B:AA:8F:4D:77:00:7F:41
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OimOKjce1P9kbuQOi6qPTXcAf0E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:1d00::/40
Signature Algorithm: sha256WithRSAEncryption
01:85:6f:66:07:a1:a4:17:23:a1:10:f3:27:80:d1:bf:92:9a:
64:40:88:01:cf:0c:e6:55:80:3f:b3:9e:e4:6b:e0:25:8d:82:
64:c1:31:12:9f:31:26:f5:ff:74:55:c9:d4:02:ef:7b:de:2c:
41:c5:57:cd:66:c7:f0:1e:65:49:c7:99:60:33:92:7b:ef:3a:
1e:bf:aa:d2:84:d7:b1:12:35:2f:60:e0:16:b7:dc:0c:50:85:
ad:a5:8d:62:7f:ae:1e:c9:84:d2:c5:82:04:f6:65:21:03:c6:
5c:a2:2c:40:eb:f0:31:ca:49:8d:4f:64:95:23:8a:f8:16:95:
90:2b:85:17:d2:6c:74:86:f6:0c:76:31:b6:22:26:df:64:9a:
19:e7:38:46:63:fc:d7:d3:2b:d0:3f:00:6b:8f:7f:c9:e9:d4:
79:da:6c:41:9a:3a:f9:e9:a0:42:c6:28:d9:9e:80:40:23:6f:
b0:fe:f0:9c:aa:1c:1b:89:b8:0d:05:a3:c0:ac:e7:f7:23:c7:
78:39:d6:c9:53:8f:eb:11:ca:6c:9a:cc:5a:0c:94:2b:14:a1:
d5:9e:5d:9f:46:b7:29:d3:8b:ec:46:64:aa:f1:34:59:54:bd:
31:3e:7d:d0:02:ea:de:ef:78:76:18:70:06:d5:6f:45:8e:6f:
f7:3e:3f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:39 2026 by rpki-client