
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/diaf3TarG29J4TOdh2YYkhXbyRA.roa
File: diaf3TarG29J4TOdh2YYkhXbyRA.roa (raw, json)
Hash identifier: aBBJBuoSl/stUXS6ZFYxleXtQHGVKeQZyJ8NQmUBSOQ=
Subject key identifier: 76:26:9F:DD:36:AB:1B:6F:49:E1:33:9D:87:66:18:92:15:DB:C9:10
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 05C1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/diaf3TarG29J4TOdh2YYkhXbyRA.roa
Signing time: Sun 01 Mar 2026 02:05:30 +0000
ROA not before: Sun 01 Mar 2026 02:05:30 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:8100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1473 (0x5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:05:30 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=76269FDD36AB1B6F49E1339D8766189215DBC910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:8f:88:4a:2c:3c:cb:5c:c1:7a:c0:68:d2:
22:f4:80:b9:8b:e2:97:0d:36:33:d4:61:43:21:5a:
6b:22:c2:08:7e:e4:e2:fd:97:2d:27:7b:0a:86:e2:
e5:d1:2c:5a:14:13:11:fa:bd:27:df:90:ac:e6:7c:
70:54:55:0c:1e:99:4c:84:a4:8b:39:ef:3e:b9:b3:
e4:78:59:57:0b:4a:c0:44:e5:09:75:68:95:62:55:
86:6a:cc:bb:6e:8f:54:8f:54:01:2d:5f:b9:e5:24:
92:8b:73:c5:da:57:c7:d4:19:c1:8e:09:6a:71:b5:
fc:32:83:ab:68:87:fb:15:a2:9d:97:5c:ba:01:30:
af:2b:88:71:8c:2b:43:3e:c2:71:0c:54:df:98:88:
1c:b8:f4:67:ac:5e:54:92:e6:fd:b4:b8:50:d5:6c:
ab:ed:5d:0a:f2:15:c3:97:ac:ed:5e:f8:85:09:32:
4d:f1:9b:89:f8:5c:83:9d:b7:66:b7:44:bd:fb:93:
81:46:e1:8d:db:19:95:01:6c:ba:06:01:b5:f0:05:
35:30:b9:11:4d:d7:26:7e:cc:b1:bf:dd:ed:8e:40:
c4:ce:05:07:0b:f4:25:9d:fb:b0:f4:86:9b:0b:96:
b3:b6:1b:37:a2:ad:fc:e9:b8:48:46:d0:7e:25:7a:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:9F:DD:36:AB:1B:6F:49:E1:33:9D:87:66:18:92:15:DB:C9:10
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/diaf3TarG29J4TOdh2YYkhXbyRA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:8100::/40
Signature Algorithm: sha256WithRSAEncryption
83:4e:64:13:d2:92:f6:48:3f:6a:f1:49:5f:dc:fd:80:7f:28:
e7:87:63:5e:1b:a7:45:55:52:4d:d4:5b:4f:d3:12:b0:6b:36:
b3:e8:c3:2a:12:d8:72:d0:2c:ee:b3:36:85:b8:59:ac:a0:1f:
a0:9c:c5:72:cd:f1:98:f6:e6:3f:d2:53:8e:57:be:35:6a:a2:
c3:df:21:63:63:a1:72:4d:64:66:62:d8:17:7e:55:25:31:97:
14:be:d5:5b:76:4d:49:b9:65:7e:bb:90:ca:7c:3e:d9:67:f9:
4c:38:ef:0b:95:fe:c6:e5:f2:6b:ab:3a:ce:ac:4c:fb:1e:e7:
64:3a:f5:66:86:7f:03:1a:d3:cc:8b:92:1e:9f:39:04:90:ab:
01:b9:66:11:d8:76:e1:78:b9:61:dc:d0:4a:fd:2d:60:b3:eb:
d1:de:dd:60:d9:48:6d:e5:ad:fc:31:4b:3b:cf:e7:a5:8e:6e:
76:41:62:ab:90:ee:6f:5b:c1:97:9c:b5:19:83:3a:20:5f:45:
3f:35:51:af:e6:37:5a:13:f6:93:28:63:ed:c5:61:c1:50:62:
f7:0a:f1:c9:f5:26:b2:24:75:4e:b4:90:2a:cc:53:9b:f7:80:
a6:16:c7:4d:41:31:4d:0b:e6:6d:3b:49:c0:f6:31:a6:bd:07:
9e:67:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:51 2026 by rpki-client