
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hKGLtFpHXPCGYdAQo6Oojgb106s.roa
File: hKGLtFpHXPCGYdAQo6Oojgb106s.roa (raw, json)
Hash identifier: OiCMBzqsmsxyvkXPMeHz3tqcS7DLB+Uawqjmdu9ykfc=
Subject key identifier: 84:A1:8B:B4:5A:47:5C:F0:86:61:D0:10:A3:A3:A8:8E:06:F5:D3:AB
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0551
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hKGLtFpHXPCGYdAQo6Oojgb106s.roa
Signing time: Sun 01 Mar 2026 01:46:48 +0000
ROA not before: Sun 01 Mar 2026 01:46:48 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:7b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 01:46:48 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=84A18BB45A475CF08661D010A3A3A88E06F5D3AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:40:e8:8e:59:1e:73:4c:7e:54:b1:0a:f4:
40:a7:9a:f2:72:2f:0a:62:27:6c:60:de:33:57:3b:
50:6e:a2:b0:a5:17:ba:d4:9c:89:db:aa:2c:3b:67:
2c:ff:6d:63:6e:b9:a7:57:84:72:c1:1c:84:94:5d:
a8:1d:94:0e:82:ce:7c:4d:b8:4e:d4:76:ab:51:f4:
5d:a5:7c:fc:61:e2:d1:8d:ad:01:0b:ac:94:39:c6:
18:69:23:f1:db:84:58:08:f1:32:ea:21:93:7a:69:
5b:e7:da:d3:4d:01:5b:67:3a:36:62:90:f3:7a:96:
70:8f:97:6d:f1:f5:69:d5:92:c3:ce:d7:29:fb:d9:
16:f0:8b:32:eb:77:d2:ac:97:19:f8:1d:f7:4e:a7:
5e:aa:db:4e:b1:2d:ee:03:8d:7f:24:94:c1:14:f4:
4d:3d:ca:00:6c:20:35:3b:41:79:38:14:12:28:0f:
5f:d4:fb:26:ee:13:7e:00:4c:aa:c2:a2:3a:5e:2e:
ca:18:ca:bd:12:d6:d6:6e:0b:42:f5:8b:55:ee:14:
a4:36:2f:61:71:ca:98:48:1b:10:c1:e5:53:3c:52:
9f:bd:c5:95:aa:ff:fa:7a:5d:6a:93:9a:4d:84:bd:
90:cb:ba:da:ba:9e:e4:7f:f4:b1:fc:05:c3:1a:00:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:8B:B4:5A:47:5C:F0:86:61:D0:10:A3:A3:A8:8E:06:F5:D3:AB
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hKGLtFpHXPCGYdAQo6Oojgb106s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:7b00::/40
Signature Algorithm: sha256WithRSAEncryption
7b:77:e9:a2:e2:c2:ca:a8:0f:32:23:8d:60:60:a5:60:88:bc:
89:98:2d:a9:58:19:10:46:b5:06:cf:d4:96:db:a2:08:bc:88:
4c:47:c2:46:25:8e:77:a5:ab:19:fa:e7:26:83:0a:56:49:90:
5f:c4:fa:ed:57:c2:86:ba:34:35:6b:e5:95:11:de:2d:0a:3e:
96:08:a5:37:cb:b1:e9:10:4f:43:54:67:e5:8d:2a:97:e5:89:
3d:df:c7:fc:a2:d0:b1:41:41:ed:40:5f:af:ba:40:4f:3e:eb:
2f:27:ee:0f:9a:61:74:53:02:57:72:35:1c:2c:6f:c5:7a:8f:
1d:2f:db:a9:d1:40:d4:f1:07:5e:7b:eb:a2:19:eb:91:a6:60:
d5:0d:3e:1e:d6:63:5c:f9:08:07:3c:dd:a6:c5:69:d8:20:01:
11:95:b2:d0:2f:93:44:d8:6b:b9:79:5e:78:80:30:8b:44:a0:
fc:54:de:13:8e:f8:54:e2:cf:9f:3a:3c:42:45:7f:df:fd:09:
88:2e:80:8f:fa:72:7c:d6:43:c3:44:f3:a5:43:25:17:f9:4e:
4b:a6:f2:48:87:fc:ed:9a:a0:18:7f:f0:c8:d6:86:bd:e8:b2:
36:1f:df:85:19:39:59:65:c1:11:f8:31:96:16:b8:2d:6c:63:
99:39:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:13 2026 by rpki-client