
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oiUqW5cfuEaiFmL4ILB7N9vtnAI.roa
File: oiUqW5cfuEaiFmL4ILB7N9vtnAI.roa (raw, json)
Hash identifier: shAqWvvHSSbtNbzjjmRNOE0J/NauVeTyDCe53lgTrDs=
Subject key identifier: A2:25:2A:5B:97:1F:B8:46:A2:16:62:F8:20:B0:7B:37:DB:ED:9C:02
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0642
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oiUqW5cfuEaiFmL4ILB7N9vtnAI.roa
Signing time: Sun 01 Mar 2026 02:30:50 +0000
ROA not before: Sun 01 Mar 2026 02:30:50 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:1f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:30:50 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=A2252A5B971FB846A21662F820B07B37DBED9C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:88:52:8b:a4:f3:61:00:63:30:bb:a4:06:
88:32:b1:ce:ba:ea:39:13:0f:ad:96:b7:28:a6:87:
67:42:e8:9b:41:57:c4:54:56:ed:74:f3:37:07:ca:
3c:b0:86:e6:e4:92:4f:e0:fd:75:d0:c8:c5:a2:98:
99:a9:cc:82:86:61:94:5a:54:87:be:85:a4:13:6d:
8e:7a:98:af:26:d8:64:1e:5e:d1:81:48:98:03:5e:
f9:b4:c1:ab:e4:67:5b:b9:97:79:08:87:69:53:a1:
33:2f:89:3d:58:50:48:89:fd:40:83:d8:6f:f8:2d:
af:1f:08:d1:04:62:4b:26:30:a5:d7:45:c4:f9:57:
46:97:a0:a8:86:6f:93:e0:90:08:99:d7:82:12:c4:
39:6c:a3:b6:07:75:f1:ff:fd:e7:9d:5f:a3:2e:27:
d0:bd:2c:48:b3:a9:cd:7f:95:b8:8a:bf:6d:23:34:
03:0b:44:9b:c2:24:cf:69:9e:43:75:89:4f:75:09:
fc:60:4d:d0:53:11:f3:53:7d:6b:d6:4a:c0:84:3f:
e1:88:4a:e8:68:ab:2c:13:ef:ed:6c:64:13:cb:bf:
53:ab:31:d8:fc:a4:0c:4f:cc:2a:55:75:2d:57:30:
40:fd:f1:0e:ae:24:f9:a2:f2:0c:b2:f2:d8:6b:99:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:2A:5B:97:1F:B8:46:A2:16:62:F8:20:B0:7B:37:DB:ED:9C:02
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oiUqW5cfuEaiFmL4ILB7N9vtnAI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
00:dc:af:3c:93:7d:7a:ed:4d:8e:b2:8f:51:7a:86:5e:66:f2:
76:ae:64:6a:c0:bc:0d:a7:40:f3:80:ec:d7:d0:98:dc:d2:a3:
10:f8:07:d0:81:3c:a1:62:e3:80:a9:a4:8a:a1:cb:28:66:99:
f1:f1:a6:a8:8b:ef:54:51:64:84:cd:7e:7c:46:c7:35:da:a8:
ca:04:2d:f5:22:b9:b6:80:40:22:eb:78:16:66:cb:37:89:37:
25:2e:39:75:b0:7d:c5:01:b7:86:e5:06:a5:5d:96:60:e9:fe:
cb:b9:6d:e0:d3:eb:3b:ba:ed:03:f6:42:69:20:5e:42:b8:72:
58:b7:57:b3:45:25:01:33:bb:82:f9:40:01:03:9a:5e:84:4e:
93:a6:e6:0f:30:4a:af:6e:9a:98:3b:f8:f0:f5:b9:04:0b:53:
00:da:09:cd:4b:fb:43:8b:52:b0:e8:80:5c:67:63:2d:12:a7:
86:a1:ef:9f:3a:93:e1:7b:da:f1:43:3b:c3:40:72:b8:dc:ec:
d8:cc:7d:18:f6:39:65:4e:d1:89:cf:82:47:a4:f4:b0:e2:9b:
2b:0b:da:a7:c7:af:5b:d0:d5:50:9a:da:32:4c:5a:75:30:d4:
c9:d6:09:47:76:fd:24:1f:24:b5:67:b6:10:f3:bf:82:7b:8f:
71:76:7f:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjMwNTBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyMjUyQTVCOTcxRkI4
NDZBMjE2NjJGODIwQjA3QjM3REJFRDlDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhpohSi6TzYQBjMLukBogysc666jkTD62Wtyimh2dC6JtBV8RU
Vu108zcHyjywhubkkk/g/XXQyMWimJmpzIKGYZRaVIe+haQTbY56mK8m2GQeXtGB
SJgDXvm0wavkZ1u5l3kIh2lToTMviT1YUEiJ/UCD2G/4La8fCNEEYksmMKXXRcT5
V0aXoKiGb5PgkAiZ14ISxDlso7YHdfH//eedX6MuJ9C9LEizqc1/lbiKv20jNAML
RJvCJM9pnkN1iU91CfxgTdBTEfNTfWvWSsCEP+GISuhoqywT7+1sZBPLv1OrMdj8
pAxPzCpVdS1XMED98Q6uJPmi8gyy8thrmRf5AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUoiUqW5cfuEaiFmL4ILB7N9vtnAIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9vaVVxVzVjZnVFYWlGbUw0SUxCN045dnRuQUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAax8wDQYJKoZIhvcNAQELBQADggEBAADcrzyTfXrtTY6yj1F6
hl5m8nauZGrAvA2nQPOA7NfQmNzSoxD4B9CBPKFi44CppIqhyyhmmfHxpqiL71RR
ZITNfnxGxzXaqMoELfUiubaAQCLreBZmyzeJNyUuOXWwfcUBt4blBqVdlmDp/su5
beDT6zu67QP2QmkgXkK4cli3V7NFJQEzu4L5QAEDml6ETpOm5g8wSq9umpg7+PD1
uQQLUwDaCc1L+0OLUrDogFxnYy0Sp4ah7586k+F72vFDO8NAcrjc7NjMfRj2OWVO
0YnPgkek9LDimysL2qfHr1vQ1VCa2jJMWnUw1MnWCUd2/SQfJLVnthDzv4J7j3F2
f8s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:49:45 2026 by rpki-client