
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q5s-FjSQLbcOdpwq_HGi0x-umNM.roa
File: Q5s-FjSQLbcOdpwq_HGi0x-umNM.roa (raw, json)
Hash identifier: zsjB9fg2xSvcYmwfgjsVa9PFf08MJXaZtsGiFSSR6fA=
Subject key identifier: 43:9B:3E:16:34:90:2D:B7:0E:76:9C:2A:FC:71:A2:D3:1F:AE:98:D3
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 05E0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q5s-FjSQLbcOdpwq_HGi0x-umNM.roa
Signing time: Sun 01 Mar 2026 02:10:59 +0000
ROA not before: Sun 01 Mar 2026 02:10:59 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:3:bfe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1504 (0x5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:10:59 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=439B3E1634902DB70E769C2AFC71A2D31FAE98D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:ce:07:97:1c:48:dc:6d:85:c9:55:6f:06:
3f:32:a8:2e:c9:1a:3f:fc:fa:70:31:b1:26:18:19:
e1:b2:0c:a9:55:1d:66:14:fd:5a:ec:51:92:89:4e:
fd:31:20:18:39:bd:03:ae:d3:aa:90:59:50:aa:85:
cf:68:33:67:7f:d8:79:dd:4a:23:ee:02:5a:fb:3e:
9d:0c:19:d5:ef:58:bb:66:ac:e0:86:b6:ce:f3:b1:
b2:3d:e8:0e:79:6c:de:c9:89:a7:6d:6a:08:29:eb:
a9:b8:33:63:bb:4f:ea:83:8a:63:37:ed:8a:c4:ca:
34:8a:52:e1:a8:0f:93:99:89:8b:17:5a:a7:4d:ef:
c4:7d:91:fb:ee:49:23:ae:59:71:4f:32:e3:32:5a:
cb:8b:bd:63:30:8e:86:61:1e:c0:0f:ea:e2:27:7c:
e4:f7:73:2f:4f:f5:13:a4:0b:f4:05:8e:35:9b:81:
ce:d8:a5:83:23:81:8e:b5:d3:03:c7:d5:7f:08:31:
ed:e1:10:58:7f:29:88:eb:49:a1:66:c2:d3:67:f4:
88:8b:b5:26:b0:8b:45:33:f0:e8:a0:13:01:cf:79:
55:0b:84:ed:d9:fe:ae:cd:d1:43:85:ee:9c:ed:f9:
3d:5e:99:96:bc:f3:6f:00:01:2b:09:37:e9:d0:61:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9B:3E:16:34:90:2D:B7:0E:76:9C:2A:FC:71:A2:D3:1F:AE:98:D3
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q5s-FjSQLbcOdpwq_HGi0x-umNM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:3:bfe::/48
Signature Algorithm: sha256WithRSAEncryption
53:07:da:8c:5f:90:c9:e4:51:f4:c4:b3:fb:4a:55:f1:bd:97:
8b:0c:2f:ea:08:66:e8:c7:8f:9a:22:6e:9f:b9:03:9b:1c:ae:
5f:9a:ac:4d:0c:7b:94:f7:24:a6:3e:e9:23:50:ac:06:a2:eb:
26:fa:62:23:d2:a4:4a:f1:b5:88:78:96:61:43:87:18:73:b9:
92:a5:75:3e:b7:bf:ef:4c:86:78:49:5f:5b:fb:74:03:3f:25:
bd:3e:ee:0e:25:f6:7b:15:a6:50:9f:a0:86:86:ab:fc:62:5b:
73:51:95:1f:4a:c8:f8:6f:ed:89:b6:e4:09:06:c2:cb:7f:2f:
65:49:6f:8b:40:08:76:43:f3:52:7b:7d:dc:06:63:80:aa:f2:
1b:bc:f7:aa:25:9f:80:e6:6a:f1:79:f3:fa:82:34:82:b5:e2:
5b:36:e1:7f:1e:ea:1e:9e:ce:9f:11:cf:79:b9:6a:58:2a:47:
26:e0:a7:d7:aa:fc:b0:1f:b1:32:a5:66:b2:b1:eb:35:22:26:
6d:ec:80:8d:1c:11:63:d6:2c:db:d6:5d:d4:99:1f:6b:6c:af:
e7:5d:0d:6d:fe:26:49:63:20:54:26:c6:be:d8:3b:a1:1b:75:
84:1d:5e:f5:e4:d6:43:8e:8d:13:dd:a3:14:da:07:68:68:12:
3f:63:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:18 2026 by rpki-client