
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sb_hxPNBAsWrX7bzNC5nK28ykvM.roa
File: sb_hxPNBAsWrX7bzNC5nK28ykvM.roa (raw, json)
Hash identifier: Y8N+7PXXR8dmNxVs8Gl8IRF7jqxgK9sNlRtKCbwXzgg=
Subject key identifier: B1:BF:E1:C4:F3:41:02:C5:AB:5F:B6:F3:34:2E:67:2B:6F:32:92:F3
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 05A0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sb_hxPNBAsWrX7bzNC5nK28ykvM.roa
Signing time: Sun 01 Mar 2026 01:56:44 +0000
ROA not before: Sun 01 Mar 2026 01:56:44 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:b400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 05:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1440 (0x5a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 1 01:56:44 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=B1BFE1C4F34102C5AB5FB6F3342E672B6F3292F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:9f:c8:07:8d:54:b3:6d:77:99:f8:6c:b5:
81:4f:6b:17:ec:40:6a:73:d9:02:7f:48:a4:51:3c:
87:5d:00:53:1a:51:2b:73:11:3e:af:f5:df:3d:0a:
66:56:ed:8a:95:fc:44:0d:60:5f:9e:c9:77:14:79:
30:98:01:6b:b4:ac:66:7d:41:7d:1b:4b:81:c7:e4:
e5:57:28:c2:ba:47:b9:38:bb:f0:f9:c2:e6:53:0f:
b2:aa:c4:62:8e:2e:d9:45:df:08:9c:13:04:df:26:
3e:b6:29:96:36:cd:3d:8a:64:d0:c3:4a:a5:42:46:
5a:28:4b:d5:41:9d:ba:66:52:90:a1:3b:7a:ca:93:
09:59:b0:87:1b:6e:5d:78:d0:0a:84:af:28:ee:8a:
2d:f9:50:f2:33:39:f2:b0:74:d2:36:2a:5b:1d:fb:
af:f9:3b:1c:72:13:bb:07:e8:35:1a:a2:35:4f:f7:
40:57:f5:fb:af:75:88:d7:12:ae:91:f4:89:29:37:
c2:fe:03:41:ae:2f:f4:f2:ca:4b:d7:1c:3a:79:a5:
cd:dc:e0:8e:60:1e:21:e3:fb:dd:bb:9d:98:44:18:
51:60:52:b2:07:95:c2:4e:22:df:f9:8d:db:21:4f:
b7:b0:eb:20:22:d5:75:6f:d0:aa:e1:8f:6b:eb:e3:
c8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BF:E1:C4:F3:41:02:C5:AB:5F:B6:F3:34:2E:67:2B:6F:32:92:F3
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sb_hxPNBAsWrX7bzNC5nK28ykvM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:b400::/40
Signature Algorithm: sha256WithRSAEncryption
8f:03:9e:5c:29:90:c6:c4:fd:51:12:28:57:a7:ab:31:ea:e0:
49:1f:e2:ee:9c:1c:33:76:1e:fe:2f:a7:88:bc:71:a3:97:bc:
5f:23:e2:8d:dc:1b:97:a2:c0:c2:0c:58:5d:a8:4e:47:b6:42:
84:10:b2:4f:79:c1:46:1f:3e:53:73:37:be:eb:c3:1d:d7:9f:
06:97:02:bc:3d:9c:60:d2:e1:fc:02:39:ab:66:0a:db:1f:81:
01:b2:5a:e8:9a:72:3b:67:1c:33:65:95:bf:12:23:8b:74:e7:
76:26:28:65:1d:1f:ec:7c:44:8e:8b:2d:66:74:10:9b:22:16:
a4:26:01:5f:c8:be:86:df:b8:32:a4:38:ac:f5:cd:2d:52:73:
44:4e:c4:43:65:16:40:98:1f:7e:04:44:dc:2d:64:32:cf:19:
e5:05:76:2a:12:cb:ec:dc:0f:42:dc:52:29:8c:d3:a2:8d:79:
c9:f2:30:63:69:27:47:cf:3e:d9:f2:6b:53:5e:7e:a6:ff:4f:
b5:f6:0f:8b:a3:e7:a4:f4:d9:1b:ca:a3:50:e9:f3:64:e4:4d:
d9:40:94:7c:9f:89:8a:04:ab:a3:4f:88:cb:39:f7:cf:c3:d1:
32:d6:f5:18:fc:94:f6:8b:56:fd:b3:2b:17:db:2d:92:db:37:
b7:bf:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:43 2026 by rpki-client