
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sSLfBlvWtRweufYqta9ajBDIXCo.roa
File: sSLfBlvWtRweufYqta9ajBDIXCo.roa (raw, json)
Hash identifier: z7wOL/bK1z7/x2kruzcKXqgHlLd0N0+SqlzyC/Qz+WQ=
Subject key identifier: B1:22:DF:06:5B:D6:B5:1C:1E:B9:F6:2A:B5:AF:5A:8C:10:C8:5C:2A
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0634
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sSLfBlvWtRweufYqta9ajBDIXCo.roa
Signing time: Sun 01 Mar 2026 02:25:54 +0000
ROA not before: Sun 01 Mar 2026 02:25:54 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588 (0x634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 02:25:54 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B122DF065BD6B51C1EB9F62AB5AF5A8C10C85C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:4d:ff:d8:4b:07:e4:eb:67:ab:ab:52:57:
82:f8:c0:70:03:70:b2:6c:6f:3c:21:e7:bc:0e:a2:
46:06:c8:31:6e:f6:68:0b:93:da:e5:d9:cd:a1:ff:
b3:d2:a3:f1:3f:50:25:21:85:c1:07:cf:68:e3:fc:
9e:95:ec:1c:bb:31:7a:d0:64:4a:24:8a:c4:cf:44:
2d:46:78:da:80:56:86:d8:33:55:a0:0a:89:ea:8c:
37:ae:22:94:64:5c:ec:38:98:9c:c7:d5:97:3a:b6:
7d:0b:84:19:0d:e8:e0:a5:ba:7b:a9:01:dd:b3:0a:
41:03:0d:15:80:1a:1c:24:86:d3:60:1f:e7:ad:41:
75:e7:71:9f:2b:ec:6b:96:0f:64:5b:1c:14:14:fe:
4d:f3:b2:18:93:16:f7:56:e9:2d:4a:55:ce:b2:f4:
fb:4e:b3:e7:cc:e3:1c:9d:97:e2:eb:fe:51:e1:9c:
7a:89:f8:95:05:be:11:36:09:7b:ce:a3:ce:c1:8e:
63:80:28:43:82:6f:1e:2f:12:9d:09:d3:87:b9:b9:
9f:86:1d:5b:52:a1:2f:ba:4d:f0:f6:42:06:48:39:
8c:9f:2a:63:72:67:3d:6a:58:68:fe:29:01:29:0f:
03:b9:c4:af:79:62:b6:e9:47:a2:a4:a8:92:06:99:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:22:DF:06:5B:D6:B5:1C:1E:B9:F6:2A:B5:AF:5A:8C:10:C8:5C:2A
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sSLfBlvWtRweufYqta9ajBDIXCo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:70::/48
Signature Algorithm: sha256WithRSAEncryption
5d:30:9e:8b:04:1c:68:a3:03:d6:a3:2e:59:98:96:55:2a:a0:
18:f8:e9:48:aa:f1:a3:25:fa:69:95:c7:6b:b8:14:64:8f:58:
5e:eb:ba:0f:3e:5a:7b:48:ab:d2:53:ba:56:5d:a4:55:2f:a5:
04:de:17:54:00:72:4a:70:70:4e:2e:bb:bc:7c:9c:a4:14:4b:
f0:e0:68:e2:3c:d7:8f:1c:49:08:c0:cd:66:d9:f7:8d:2d:c6:
fa:6b:69:97:2a:f3:84:78:fd:51:eb:c5:5e:5d:4e:28:6f:b2:
ad:22:75:71:9b:83:2f:36:2f:9e:92:ea:47:7b:9a:55:da:6c:
0b:04:3a:0d:9c:e7:25:3b:15:0f:35:52:2f:20:a4:db:de:63:
32:7d:55:c2:c9:d9:a5:60:be:9d:60:05:18:57:0a:35:cd:7c:
75:eb:90:10:48:7f:68:bf:af:54:9c:21:91:0b:a4:24:64:d2:
59:50:4d:9f:f2:12:3c:c1:f5:fc:54:57:74:a3:9e:41:d4:d7:
b2:ac:7c:2d:7b:16:6c:9e:a7:40:89:51:db:e4:5d:67:76:cd:
d4:2e:fc:49:a0:62:d0:68:bc:c3:2b:e4:df:2a:31:97:fc:99:
ca:db:fb:39:04:f2:82:7f:7b:b8:36:c1:db:d3:63:ca:1e:90:
37:5a:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:52 2026 by rpki-client