
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30310/heheyzDv8xd5rNoeYRpLOYrpsuQ.roa
File: heheyzDv8xd5rNoeYRpLOYrpsuQ.roa (raw, json)
Hash identifier: pcSMx5OOl/427DgO5T22lIo6PYz0fC2XNmbmupJAgts=
Subject key identifier: 85:E8:5E:CB:30:EF:F3:17:79:AC:DA:1E:61:1A:4B:39:8A:E9:B2:E4
Certificate issuer: /CN=9DDC7377517D53593BF1AC966C3B71AF6F5C09CA
Certificate serial: 55
Authority key identifier: 9D:DC:73:77:51:7D:53:59:3B:F1:AC:96:6C:3B:71:AF:6F:5C:09:CA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ndxzd1F9U1k78ayWbDtxr29cCco.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/heheyzDv8xd5rNoeYRpLOYrpsuQ.roa
Signing time: Sun 01 Mar 2026 01:28:31 +0000
ROA not before: Sun 01 Mar 2026 01:28:31 +0000
ROA not after: Mon 15 Feb 2027 01:30:02 +0000
asID: 23778
IP address blocks: 2401:cbc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/ndxzd1F9U1k78ayWbDtxr29cCco.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/ndxzd1F9U1k78ayWbDtxr29cCco.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ndxzd1F9U1k78ayWbDtxr29cCco.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DDC7377517D53593BF1AC966C3B71AF6F5C09CA
Validity
Not Before: Mar 1 01:28:31 2026 GMT
Not After : Feb 15 01:30:02 2027 GMT
Subject: CN=85E85ECB30EFF31779ACDA1E611A4B398AE9B2E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:f3:b2:c1:f7:ac:d3:90:24:4c:03:75:25:
45:af:02:a9:74:c1:39:1d:67:dc:31:df:ee:c0:05:
44:7a:4c:17:3b:a3:f3:94:65:a1:44:56:b5:4f:ac:
8e:a5:20:1b:41:7a:ed:0f:fc:fb:1e:0f:b3:0e:d7:
2e:21:d3:ac:6d:00:09:4e:8c:82:79:d7:a8:a2:08:
1e:89:f7:12:d0:56:31:d8:75:39:be:5f:05:dd:f1:
bc:dd:34:33:cd:4b:ec:c1:cc:f0:c2:11:c3:76:38:
c1:e0:11:f3:9e:c8:5e:af:2a:dd:92:dd:ea:09:6a:
86:49:20:66:d6:98:46:ec:e3:c6:cf:d6:1e:00:8f:
8d:74:4a:2a:5a:87:e0:5f:cd:08:2b:1b:23:3d:70:
f6:84:27:4c:a9:0e:02:4e:ae:11:34:2b:3c:97:1f:
72:ec:06:c7:70:4d:c2:03:9f:59:fe:73:69:44:37:
00:95:7d:df:82:a5:17:3f:58:7c:e5:0c:cb:1c:bb:
33:cc:80:c4:98:37:f6:6d:46:13:51:40:7d:d6:fa:
78:1d:be:b5:3a:66:68:aa:a0:be:30:f5:9c:76:39:
14:be:66:21:f7:ed:96:8b:c9:13:d7:d9:f7:b7:d3:
18:93:99:c4:a9:52:c9:04:2d:c8:38:89:78:bc:0e:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E8:5E:CB:30:EF:F3:17:79:AC:DA:1E:61:1A:4B:39:8A:E9:B2:E4
X509v3 Authority Key Identifier:
keyid:9D:DC:73:77:51:7D:53:59:3B:F1:AC:96:6C:3B:71:AF:6F:5C:09:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/ndxzd1F9U1k78ayWbDtxr29cCco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ndxzd1F9U1k78ayWbDtxr29cCco.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30310/heheyzDv8xd5rNoeYRpLOYrpsuQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:cbc0::/32
Signature Algorithm: sha256WithRSAEncryption
36:a3:8b:9b:77:6a:6a:fb:27:e3:c1:4a:98:87:32:cc:46:7b:
7f:68:19:b3:49:2f:da:2e:45:7a:da:15:50:2f:de:c0:29:b6:
3f:99:80:8a:a2:04:b2:5d:ee:59:4c:2f:d0:99:79:31:77:21:
20:20:ad:ce:7b:75:0a:f8:16:90:d9:7e:31:24:2e:4c:b7:16:
83:bc:f8:58:23:6c:07:69:47:ae:70:50:8c:3c:92:69:18:64:
22:34:6e:64:57:19:37:35:2c:e2:ae:55:fe:ab:ad:e8:2c:fc:
8b:78:ac:8d:84:dd:c8:ec:7f:31:45:92:37:a1:a9:4e:60:c8:
4f:ca:53:92:24:5b:9a:57:15:a3:63:47:b9:1a:74:4e:35:dd:
06:c9:df:85:1a:19:db:a4:ce:8d:14:d1:aa:7d:8f:49:98:22:
51:3a:ea:69:98:aa:22:2e:2e:11:3c:90:26:0d:ea:f4:1d:89:
9e:42:63:11:01:86:98:cb:cd:61:27:a9:59:6b:41:3b:29:8c:
c2:a5:8f:f6:aa:ef:58:59:32:0f:d6:3f:89:50:58:95:12:00:
42:45:73:51:61:88:57:d4:a1:79:de:eb:8a:21:26:a6:4f:b4:
df:4e:d8:e2:28:53:58:c2:a7:2d:0c:d0:14:b8:d2:63:41:d7:
1c:80:55:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:05:20 2026 by rpki-client