
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aQ9iBkOMTxSJu29TCvbwOqfY0h0.roa
File: aQ9iBkOMTxSJu29TCvbwOqfY0h0.roa (raw, json)
Hash identifier: K5vJkXgDRMUu8azEgpjwl+F6bVP0eIw53BkBuou7SQE=
Subject key identifier: 69:0F:62:06:43:8C:4F:14:89:BB:6F:53:0A:F6:F0:3A:A7:D8:D2:1D
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 05B0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aQ9iBkOMTxSJu29TCvbwOqfY0h0.roa
Signing time: Sun 01 Mar 2026 02:00:55 +0000
ROA not before: Sun 01 Mar 2026 02:00:55 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1456 (0x5b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:00:55 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=690F6206438C4F1489BB6F530AF6F03AA7D8D21D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:10:a1:d6:c7:ae:32:c0:94:30:43:0e:62:
6a:90:7a:e6:6e:4e:f3:eb:e5:69:73:50:62:03:83:
d0:a3:e1:c4:f5:bc:ab:05:52:af:d1:2e:bd:eb:e3:
1a:5f:67:b1:c5:a6:dc:a9:0a:1e:ac:de:35:d3:ab:
68:2f:1d:4f:75:0a:a2:19:fc:9b:f9:e2:2f:9c:3c:
61:cc:2a:da:0e:d7:ed:cd:87:5d:2d:59:6d:81:f5:
47:f7:ab:03:94:10:b6:09:a5:7f:bb:40:4e:00:14:
44:a6:18:81:8b:e6:e6:43:ef:82:56:5e:29:51:56:
22:f9:8e:77:10:8f:a4:cc:5b:2d:d2:13:1a:ac:bf:
b0:0f:d9:6f:1a:26:b1:be:fb:5f:96:1e:ae:00:f4:
ce:fb:41:fd:49:e2:b3:35:db:1c:b5:a1:d6:58:f1:
02:b2:95:3b:7e:bd:ef:a2:81:7e:84:67:51:0d:31:
44:a4:4a:f3:30:c2:c5:ca:be:39:d1:36:8d:84:c6:
78:7b:cb:b6:d0:af:48:1c:c3:19:4b:50:05:8f:07:
c6:73:01:46:49:52:6b:39:e4:6f:70:f0:43:28:96:
b2:1e:dc:c8:b7:85:a2:53:8b:ea:c3:74:7b:55:4d:
75:9b:5b:f3:ed:46:4e:22:b2:4d:26:a7:67:cf:ad:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0F:62:06:43:8C:4F:14:89:BB:6F:53:0A:F6:F0:3A:A7:D8:D2:1D
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aQ9iBkOMTxSJu29TCvbwOqfY0h0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:4000::/40
Signature Algorithm: sha256WithRSAEncryption
ab:81:d8:b2:b6:7f:36:ef:dd:c3:33:1c:e3:35:8e:44:d8:14:
cf:0d:8f:7a:ea:3a:b6:6f:b5:2f:c7:77:00:11:86:e2:32:64:
21:c5:22:a1:bb:18:76:50:31:33:19:a8:81:8c:36:1e:a7:d5:
dc:7c:b5:69:e6:68:e1:97:c7:2a:b1:9e:6c:26:eb:c7:fb:0e:
ce:69:de:ec:2e:17:48:5e:8d:3c:81:58:78:59:b5:85:d8:ce:
91:06:f1:02:91:29:36:3d:75:1f:7e:16:54:95:89:0c:d6:5f:
11:93:28:61:c5:34:e6:ee:3e:34:b1:60:43:7e:9c:c2:4a:b7:
44:9f:91:6f:65:bc:3f:21:d3:8e:81:d6:a1:a4:a4:56:9e:6d:
e9:64:a6:ed:4f:4f:73:e8:c3:7b:b2:2d:43:e5:10:57:16:fe:
ae:92:04:38:8b:fa:66:42:a2:c7:be:84:33:5a:b6:65:ad:2c:
ef:b8:c9:dc:b9:5d:95:2c:c1:d4:d4:6d:cb:24:d0:fe:91:36:
58:64:a8:ac:63:81:4e:92:5d:fc:a6:d0:e5:37:a3:14:d4:9a:
86:db:33:b4:94:b2:af:34:da:99:7e:48:90:f7:4e:0a:5e:69:
af:a5:4b:18:d0:60:ce:d4:d8:c5:fd:09:59:d7:9d:72:69:bf:
56:81:a8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:24 2026 by rpki-client