
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iW9cl6FmKlmxolIXYtoO600Z2sc.roa
File: iW9cl6FmKlmxolIXYtoO600Z2sc.roa (raw, json)
Hash identifier: hJ7JOY9ibgVltsVkqO8RLwBTwwtYXrILssHG0+wURmg=
Subject key identifier: 89:6F:5C:97:A1:66:2A:59:B1:A2:52:17:62:DA:0E:EB:4D:19:DA:C7
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 053D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iW9cl6FmKlmxolIXYtoO600Z2sc.roa
Signing time: Sun 01 Mar 2026 01:41:11 +0000
ROA not before: Sun 01 Mar 2026 01:41:11 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:4b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1341 (0x53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 01:41:11 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=896F5C97A1662A59B1A2521762DA0EEB4D19DAC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:aa:bc:05:09:23:d7:16:c4:b5:88:9f:fb:
3f:8a:6a:fb:c7:67:80:28:2e:af:85:d5:e5:71:f7:
15:78:38:b3:d5:cd:77:b9:40:08:46:5b:85:a5:cf:
63:cd:80:d1:70:68:6b:e9:7f:be:ca:72:03:9b:ed:
d6:7a:f5:0b:69:60:b8:7c:a4:ec:49:11:e5:51:6d:
3f:9a:97:3b:7b:87:e7:6c:d8:90:5b:26:16:83:be:
19:0a:08:22:93:6e:1f:c1:f8:68:52:db:2c:2e:60:
e3:fd:47:d5:85:37:ae:2e:39:e0:fd:14:14:f4:0e:
67:07:0b:86:b6:ee:aa:bb:db:85:b5:a7:cc:8b:89:
99:67:8e:76:d9:83:64:b8:32:78:e1:65:ed:22:f4:
da:fb:cc:3c:6d:be:f8:38:60:77:90:b3:26:c1:a4:
dd:50:9c:36:75:2c:fe:5b:11:a8:59:48:87:5a:c2:
c5:47:47:bd:85:71:df:ca:2c:b2:46:d5:76:f1:94:
b2:df:97:87:c3:a5:b9:2a:8d:26:62:01:b1:13:d4:
dc:2d:f7:27:ae:54:2f:73:47:46:b5:16:84:f9:72:
46:4c:62:15:c4:07:d0:c5:83:2c:3a:33:ed:22:de:
d5:93:00:a1:1c:e8:61:84:25:be:ff:73:ca:94:d4:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:5C:97:A1:66:2A:59:B1:A2:52:17:62:DA:0E:EB:4D:19:DA:C7
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iW9cl6FmKlmxolIXYtoO600Z2sc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:4b00::/40
Signature Algorithm: sha256WithRSAEncryption
1a:c2:da:1c:06:7b:9a:99:50:6b:b4:3c:13:92:58:eb:ea:6f:
3a:c6:7f:a3:35:d8:de:7b:b9:a7:f3:e0:f4:a9:5b:27:53:88:
aa:ed:0f:e6:28:d8:d6:a5:e5:5a:38:e4:16:6b:ae:fc:02:36:
90:8c:73:c8:c8:45:a6:df:6a:67:aa:c0:26:41:d6:04:e6:d4:
e2:8f:8e:14:8f:d6:75:55:1a:90:70:8d:90:7a:02:47:15:b7:
2c:b5:51:dc:6c:f4:16:12:06:62:8f:1c:33:b5:ae:4a:e3:7c:
1d:3f:2d:66:a6:9f:56:e9:bd:ad:8e:c9:3f:82:1c:12:47:0c:
04:1f:e5:a9:6d:cb:30:ab:c8:46:c3:7f:c4:64:31:27:ae:7a:
bc:e3:eb:ce:7b:2f:6d:07:65:fa:b0:02:b8:b4:b8:39:3a:49:
c8:58:d9:60:88:39:34:b1:fd:b7:a4:a1:35:bb:77:3f:45:90:
06:82:c6:f1:1d:ff:cb:c1:f2:bb:8f:1e:6f:7c:f0:5c:66:f3:
84:af:3a:6d:e5:f3:00:cf:8e:72:64:6d:e8:47:55:86:89:d5:
c9:b2:81:70:c6:46:c6:7d:63:4c:04:69:9b:be:06:fc:21:cc:
da:6a:f2:2c:39:fa:c8:e6:f4:a8:44:ce:08:79:fd:a8:d4:3b:
49:bf:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:19 2026 by rpki-client