
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZI8iQvGMGtCTMS8izdHiJNgfkIo.roa
File: ZI8iQvGMGtCTMS8izdHiJNgfkIo.roa (raw, json)
Hash identifier: 2R3E51UKA+4JbVNmFiu6oNtPJuU3BYEhHxdy6JRugRA=
Subject key identifier: 64:8F:22:42:F1:8C:1A:D0:93:31:2F:22:CD:D1:E2:24:D8:1F:90:8A
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 054A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZI8iQvGMGtCTMS8izdHiJNgfkIo.roa
Signing time: Sun 01 Mar 2026 01:41:18 +0000
ROA not before: Sun 01 Mar 2026 01:41:18 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:a500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 01:41:18 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=648F2242F18C1AD093312F22CDD1E224D81F908A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:6e:e5:eb:02:70:cd:69:a9:32:6e:38:39:
51:a1:dd:54:f2:27:9a:99:53:c7:6c:34:0d:e1:2c:
40:10:81:ad:18:99:45:05:93:84:5b:2c:8a:75:5a:
ab:4e:15:3c:b7:85:55:1f:24:75:cc:e7:17:63:74:
06:65:34:8c:8f:5c:37:4d:a5:5d:58:84:d6:69:48:
79:2d:99:d0:a6:e0:e9:6f:99:ea:b3:7b:5d:3f:5c:
f5:13:23:ef:64:71:7e:5f:0f:1c:a8:68:76:d0:12:
8a:48:df:fa:1d:05:24:a6:ad:a2:ad:a5:1f:d3:8b:
56:3f:8c:18:cd:f6:a7:1b:fb:60:6d:72:d9:c5:c0:
25:d6:9d:70:ed:02:a7:60:98:67:16:96:3c:02:b3:
6b:07:b8:43:61:fb:0e:28:c2:e6:cf:9d:ed:f7:13:
d4:6f:6d:ed:b2:2e:a7:26:26:70:31:fb:a6:32:4c:
a7:3a:9e:30:9d:f2:be:13:b6:1a:7d:c5:54:04:ec:
20:4e:47:79:80:41:b5:5d:91:06:87:4a:ba:d6:f5:
85:46:c3:c9:29:fb:6e:9a:b5:9f:77:d3:0b:81:f8:
8e:82:bc:ca:94:37:43:37:07:af:b4:ba:64:da:f1:
d9:3e:b8:ba:fa:8d:18:ef:06:91:86:26:61:f3:89:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8F:22:42:F1:8C:1A:D0:93:31:2F:22:CD:D1:E2:24:D8:1F:90:8A
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZI8iQvGMGtCTMS8izdHiJNgfkIo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:a500::/40
Signature Algorithm: sha256WithRSAEncryption
c8:cb:b6:fa:dd:6e:b3:f1:fc:6c:8f:8a:b5:cf:ef:18:28:76:
f3:26:06:d6:81:0b:61:d8:fb:c1:13:c3:52:3a:4a:08:ad:9c:
3b:c1:37:77:70:28:6d:b6:3b:58:27:58:22:b5:d7:98:84:41:
e1:fb:53:16:ea:29:c9:c2:a7:fc:40:3d:19:01:53:17:61:a1:
50:48:63:a5:5f:37:6d:6b:31:05:e3:ee:8a:e2:ed:05:96:f2:
d9:6a:fa:0e:77:49:b2:2d:39:96:78:3b:fd:d2:c3:c0:1f:7b:
45:4d:9e:17:d3:82:ea:19:f1:05:3a:d9:55:41:7d:02:d3:5e:
0e:f5:be:90:3f:91:a2:55:73:9f:21:f0:4d:07:77:77:ed:40:
9b:09:25:78:4d:d6:61:28:d7:4e:b2:b6:66:23:54:a0:d6:48:
4b:26:de:5c:63:a5:21:24:57:57:03:11:c8:55:29:e5:5a:f9:
31:68:a6:dd:1a:7f:ab:74:ec:29:1b:f4:ae:47:e9:e9:a3:1e:
40:d9:e9:38:28:99:ef:b5:03:70:9a:49:9a:d6:6e:94:8f:6e:
93:50:b5:a8:4e:e5:60:22:c1:c8:f2:ad:48:19:cb:5f:84:cf:
0e:5a:d6:11:db:5e:fe:96:41:45:f1:63:8b:0d:64:82:d2:fa:
30:77:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:32 2026 by rpki-client