
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nuc2q4-_krfay0ZPbTTKLTEOClI.roa
File: nuc2q4-_krfay0ZPbTTKLTEOClI.roa (raw, json)
Hash identifier: 8sDCx2TDXlLz+zFb4+kdbHy4UZeDgHO7O3IW4bXabDI=
Subject key identifier: 9E:E7:36:AB:8F:BF:92:B7:DA:CB:46:4F:6D:34:CA:2D:31:0E:0A:52
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 057B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nuc2q4-_krfay0ZPbTTKLTEOClI.roa
Signing time: Sun 01 Mar 2026 01:52:21 +0000
ROA not before: Sun 01 Mar 2026 01:52:21 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:de00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 01:52:21 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=9EE736AB8FBF92B7DACB464F6D34CA2D310E0A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:d2:66:66:1f:d7:6c:fd:ce:33:17:5d:24:
44:e5:42:b3:e7:08:40:85:f4:6a:24:3c:25:10:4f:
67:4a:80:42:5e:00:43:d1:6a:02:67:b1:35:34:6c:
40:ed:94:c5:ca:1c:c0:30:69:0e:9f:0b:b7:33:c2:
a1:dd:f7:a8:fe:dc:46:25:9b:91:b2:46:7a:0d:ca:
ff:0e:5b:fd:6d:ca:d1:ee:f3:cf:07:f4:0e:5d:d8:
f9:03:ca:35:31:b4:02:ee:c2:56:1c:08:7f:43:1f:
ca:67:33:c4:83:06:fe:86:42:a7:89:b2:36:7c:bb:
90:32:6e:71:65:b7:e2:9e:49:9e:c2:47:85:57:aa:
ef:d3:4a:e5:35:ea:86:a1:d4:a6:7a:93:47:a4:22:
6e:8c:8e:f5:94:9c:ab:4e:ee:04:1f:67:c8:5e:9a:
5f:63:9a:8b:50:cc:96:d0:83:c4:57:90:b5:c8:5d:
13:d8:4e:c8:99:0e:4b:75:b1:bb:c1:52:30:b8:9e:
a4:8c:97:79:17:23:9a:3c:78:32:87:e0:51:57:ca:
dd:86:9e:44:7a:82:0e:17:da:84:a2:a1:4c:7b:92:
42:e5:fc:3c:fc:87:9d:53:3f:69:a8:6c:17:e2:10:
14:08:ce:fa:dc:d0:ce:f9:3c:56:bb:e5:51:1f:62:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:36:AB:8F:BF:92:B7:DA:CB:46:4F:6D:34:CA:2D:31:0E:0A:52
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nuc2q4-_krfay0ZPbTTKLTEOClI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:de00::/40
Signature Algorithm: sha256WithRSAEncryption
2f:b1:5d:20:96:b7:81:07:18:65:c7:9c:82:ac:a8:16:59:dc:
c9:d4:eb:ea:1c:fe:0d:90:12:af:21:63:6a:b1:a2:de:e4:f4:
5d:27:b4:1c:a9:77:de:4e:d8:9f:e2:ff:0c:63:52:16:ac:16:
77:23:69:14:71:5e:1d:01:53:bb:01:16:55:e6:95:75:f3:fa:
eb:d8:c8:6c:26:a5:8c:3b:9d:64:55:d2:a0:be:57:4f:8b:fb:
a9:60:e6:52:5d:80:25:8b:ac:f8:f3:78:9a:18:e0:9b:99:5d:
79:5e:1e:f9:65:5a:42:9d:23:73:54:49:ac:cb:86:a9:66:6d:
cd:07:c8:e9:5c:5c:c9:5d:40:ea:f7:d4:5f:c5:95:e3:83:c0:
35:ff:3d:37:8c:24:a3:35:34:ac:b3:a7:32:eb:5f:85:10:10:
13:16:a2:b0:ae:fa:73:83:77:6d:f5:93:3e:94:21:9f:8c:6d:
85:5e:45:c0:02:fc:84:1f:1b:91:6c:f3:a3:ed:f6:be:64:35:
32:d1:30:a3:99:a9:a2:1c:a7:e9:62:25:c5:7c:30:2e:47:1e:
bb:8e:b9:43:ca:58:6c:b1:e3:88:fd:be:85:a6:2f:63:b0:9b:
5a:1f:ce:d2:32:e7:1d:ea:7f:5c:2d:96:9c:b4:e1:2b:f5:7e:
c8:7b:86:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:37 2026 by rpki-client