
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aIO0BV0y1z7IBLiobZpl-iMjPdc.roa
File: aIO0BV0y1z7IBLiobZpl-iMjPdc.roa (raw, json)
Hash identifier: aicBtkvA25fQQnjFT+h9lvKUV10IPJS30l5j6XgCqpY=
Subject key identifier: 68:83:B4:05:5D:32:D7:3E:C8:04:B8:A8:6D:9A:65:FA:23:23:3D:D7
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0559
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aIO0BV0y1z7IBLiobZpl-iMjPdc.roa
Signing time: Sun 01 Mar 2026 01:46:53 +0000
ROA not before: Sun 01 Mar 2026 01:46:53 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:9100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 01:46:53 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=6883B4055D32D73EC804B8A86D9A65FA23233DD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:5a:05:d1:80:68:da:cd:d0:52:f5:99:8d:
46:9b:53:74:d5:88:05:dc:af:69:86:75:7a:6c:0b:
c5:2e:c3:ea:90:e4:5f:01:c5:bb:6c:87:53:0e:bf:
22:42:3d:72:64:f9:66:55:f7:d6:bb:bb:ea:e9:6e:
a4:dc:87:b4:93:cc:44:5e:02:3c:d6:8a:49:d9:86:
c5:56:8f:9d:88:66:9c:88:78:f3:d8:3e:aa:f3:47:
83:7c:ee:36:d1:4f:04:49:bf:50:5b:90:3d:7d:79:
fb:e9:f3:56:21:9b:bd:f0:db:75:f6:a7:06:15:b2:
d9:40:1f:d3:0c:ac:0e:dd:8a:91:2d:23:2a:cd:f9:
4a:73:fe:bc:e7:7b:94:25:a0:2f:5e:e0:7f:12:ad:
a3:89:ef:05:bf:ed:5e:9d:64:00:fc:36:32:dc:af:
12:f5:6a:15:51:3e:15:69:d4:48:26:60:bb:90:af:
27:d7:43:f9:0e:f2:1b:92:1d:c2:71:af:80:67:ac:
74:1b:1e:f5:5c:31:ea:82:fa:b5:3c:10:6c:41:20:
5f:7a:b1:26:c2:7a:c8:8c:25:71:ea:68:c7:6f:e2:
2a:aa:76:82:6d:cb:fd:94:3b:ad:c9:57:ca:ae:e7:
be:af:b2:98:16:5a:63:53:ad:ab:a4:1a:ac:64:d7:
74:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:83:B4:05:5D:32:D7:3E:C8:04:B8:A8:6D:9A:65:FA:23:23:3D:D7
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aIO0BV0y1z7IBLiobZpl-iMjPdc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:9100::/40
Signature Algorithm: sha256WithRSAEncryption
43:6f:6b:c7:96:01:64:a7:6a:f6:48:2e:9f:20:f2:b1:fd:0c:
fa:c6:b2:e9:2c:85:e6:8d:fc:d8:f4:2f:36:ab:c7:9d:19:92:
57:08:94:a6:8e:c1:4a:0d:a5:c9:1e:81:fc:69:e1:18:41:f4:
ec:ab:d2:4e:a0:e1:14:db:39:10:22:90:53:12:1d:3f:4a:19:
9d:d1:af:b5:9c:75:3d:8a:a0:40:0a:76:4d:44:15:fc:00:71:
e4:b8:e3:68:3b:c8:30:7d:13:1c:7b:bc:9d:f6:64:b2:e2:7b:
25:fd:34:bd:86:c0:44:70:a9:ae:43:8a:ec:c8:0b:27:e7:a2:
ba:db:84:4a:f7:35:10:06:fb:ce:44:7a:15:1e:e9:d4:3b:d2:
54:f0:95:40:5a:b1:ef:ea:91:df:50:0e:77:c8:a7:4b:b6:38:
91:29:f7:05:18:de:d8:d9:35:ae:e6:a5:46:10:2e:29:0b:ab:
d8:75:16:89:9c:fc:38:ec:df:1c:31:c9:b1:70:62:0f:d5:b2:
1f:06:ad:45:55:6a:4b:da:87:ca:62:5f:ee:7f:a0:ae:78:4d:
d7:06:44:11:1c:1f:29:33:04:f0:71:df:2e:bd:82:0f:5c:69:
22:af:94:8b:0a:97:ed:07:c0:8e:f9:4f:dd:25:13:2f:10:2d:
3d:49:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:02 2026 by rpki-client