
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/aJmHh_yGGleYLqzwoBHceRWGaNQ.roa
File: aJmHh_yGGleYLqzwoBHceRWGaNQ.roa (raw, json)
Hash identifier: OX43COYnF4bLQTJYTH5fil23C/xOZmvxNhug3CnJHis=
Subject key identifier: 68:99:87:87:FC:86:1A:57:98:2E:AC:F0:A0:11:DC:79:15:86:68:D4
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 017D
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/aJmHh_yGGleYLqzwoBHceRWGaNQ.roa
Signing time: Tue 31 Mar 2026 07:38:10 +0000
ROA not before: Tue 31 Mar 2026 07:38:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 10021
IP address blocks: 61.120.192.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Mar 31 07:38:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=68998787FC861A57982EACF0A011DC79158668D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:98:5c:63:05:b4:14:f9:f1:72:30:8d:b5:
0e:14:85:41:d2:4b:1b:ed:78:bf:f4:42:b7:08:26:
81:c4:ff:4f:07:8b:56:69:d2:07:9b:47:a2:a5:f6:
45:01:ef:4a:41:52:c1:63:de:d2:91:1a:2b:d2:2f:
d9:5a:92:71:e0:71:ab:b7:87:4a:dc:89:5e:47:6b:
79:72:c9:58:c5:a3:60:68:7d:3b:ad:83:f4:60:37:
42:de:7b:53:41:8c:58:fd:28:c4:3e:4f:5d:5d:7f:
43:8e:85:48:7a:7f:3d:6d:a3:ff:5e:0f:0b:06:9d:
1e:db:d3:bf:1e:32:1c:b3:8e:c3:a0:62:48:64:b0:
d0:02:30:db:74:1f:cf:07:61:49:96:81:04:dd:b2:
d0:59:8a:9e:37:00:43:6c:d7:51:64:fe:39:d8:a0:
de:6a:24:d3:52:8d:17:07:da:63:51:85:8e:ed:d5:
71:6a:28:70:3c:92:62:3e:89:4c:b9:9c:fa:8a:91:
8b:06:b7:75:84:eb:95:bf:76:a1:e2:e3:f3:70:bc:
f8:ff:ba:87:85:78:ee:d7:5a:a7:81:61:cf:ef:28:
4e:0e:90:74:03:81:83:1b:c2:45:9a:1b:44:67:b2:
bb:d1:43:04:74:b8:0d:8d:24:25:d3:a3:c4:05:38:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:87:87:FC:86:1A:57:98:2E:AC:F0:A0:11:DC:79:15:86:68:D4
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/aJmHh_yGGleYLqzwoBHceRWGaNQ.roa
sbgp-ipAddrBlock: critical
IPv4:
61.120.192.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:fe:e4:34:64:39:90:31:ed:bf:d2:38:fa:55:77:cf:39:a6:
42:a9:c5:ef:b4:42:32:d1:ab:68:d8:f9:c7:18:1a:9b:d0:65:
5b:6f:80:e5:a5:b6:20:70:78:5e:26:3f:d8:af:8a:69:07:37:
82:9b:6c:7b:9d:b5:50:0e:97:0e:47:56:40:0a:2a:ac:d6:df:
c8:80:a8:6c:5a:4e:db:14:11:7a:a1:e8:a0:fb:2a:cf:6b:70:
be:4d:b2:a1:17:43:e4:a2:53:0e:9a:bf:f3:63:58:45:1a:1a:
ea:76:f4:07:f5:60:39:3f:5d:87:60:d8:4e:e7:8c:8f:a5:2b:
1a:8b:ec:9f:79:38:ae:d6:d9:01:89:0f:77:c3:a5:48:ab:94:
20:da:48:0e:f3:96:68:dd:62:df:06:05:b6:d1:42:e6:e9:35:
37:91:6b:8a:d1:bb:78:47:80:ea:ca:08:c7:b9:49:23:a5:07:
07:10:0e:77:27:d6:cd:e9:0e:6b:7f:c3:b8:9b:02:0d:09:12:
e6:72:4b:54:1d:2c:26:7a:90:b9:2d:7d:ef:fb:53:52:ac:f4:
df:e9:c9:a3:ae:56:e7:74:12:b2:1f:c3:36:b3:71:7c:1a:0f:
eb:25:36:b4:04:00:96:cf:de:bc:d8:16:e0:77:64:08:85:6b:
04:7c:b3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:19 2026 by rpki-client