
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/pv6Bxs0Fae7JJNVov4ABC0Sf8UE.roa
File: pv6Bxs0Fae7JJNVov4ABC0Sf8UE.roa (raw, json)
Hash identifier: VMz2OM+2AUlj+OrcGM4jDHbLaQ3sNyPvMaAX2gtDqB0=
Subject key identifier: A6:FE:81:C6:CD:05:69:EE:C9:24:D5:68:BF:80:01:0B:44:9F:F1:41
Certificate issuer: /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial: 62
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/pv6Bxs0Fae7JJNVov4ABC0Sf8UE.roa
Signing time: Tue 31 Mar 2026 07:52:10 +0000
ROA not before: Tue 31 Mar 2026 07:52:10 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 131921
IP address blocks: 153.124.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 04:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Validity
Not Before: Mar 31 07:52:10 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A6FE81C6CD0569EEC924D568BF80010B449FF141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:00:d4:9c:22:48:d8:48:5a:6f:36:d8:fa:
95:23:79:f1:d5:d8:ac:cb:7e:4c:3d:06:f9:54:4a:
da:5b:80:56:b5:e9:c0:bc:13:b3:3a:eb:cc:6b:83:
fa:4e:1c:d4:81:21:1a:31:49:46:a9:7e:82:be:bc:
4b:dd:eb:ee:c5:ef:cf:36:1a:c2:7d:7f:7a:8e:d0:
2e:5a:53:5b:b5:1b:de:73:f1:7b:80:a7:4e:81:a7:
1b:a0:77:9b:60:4a:34:6e:c7:da:8e:5a:86:37:1b:
6d:96:1d:cd:5e:c5:1b:44:1e:cd:14:8a:17:c0:55:
8b:f8:d0:71:ae:3b:c7:ae:e7:68:d6:cf:8b:a0:67:
d9:c7:24:6a:5d:10:39:37:d2:b3:78:bb:c7:04:55:
d2:b0:14:90:48:cd:3a:d1:6c:ae:4c:87:df:ff:4e:
ef:68:f8:16:92:74:a2:d3:0e:54:16:5c:a5:2f:d5:
07:e0:71:74:8f:82:2a:8e:9c:6f:39:c7:ea:98:36:
fe:3c:37:1b:e6:73:73:ca:63:a5:b7:bb:9c:b0:73:
8b:b0:24:8a:5b:7e:a1:1e:d1:cd:75:9b:4c:09:35:
22:5f:58:29:44:9e:70:98:4d:6e:90:72:78:12:5f:
29:08:05:0a:fd:d3:60:0d:fc:4c:d7:51:8c:4c:89:
ad:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:81:C6:CD:05:69:EE:C9:24:D5:68:BF:80:01:0B:44:9F:F1:41
X509v3 Authority Key Identifier:
keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/pv6Bxs0Fae7JJNVov4ABC0Sf8UE.roa
sbgp-ipAddrBlock: critical
IPv4:
153.124.128.0/20
Signature Algorithm: sha256WithRSAEncryption
48:53:9d:4b:54:e3:d5:ab:42:46:1d:ec:17:dc:79:96:7d:e5:
35:23:ea:35:61:82:8d:00:34:d2:13:bc:d0:22:05:a8:a4:c5:
f5:2d:79:9d:eb:74:9e:84:eb:c0:70:34:a0:5b:95:38:d2:ae:
be:e3:c9:5f:51:87:05:55:24:9f:de:88:3b:a0:d7:93:72:e9:
d2:43:44:e8:87:6e:bb:fe:65:99:5c:10:d1:be:79:5c:24:3b:
f4:f4:db:bf:59:96:32:76:0b:8e:08:ca:5d:83:e5:36:51:9b:
12:67:63:7e:00:3f:fe:3a:31:62:16:9c:95:31:bf:9a:55:90:
b8:8d:ad:63:28:e9:55:dc:80:fb:2f:8c:a0:de:5a:4f:80:87:
7c:d6:45:00:b7:9b:3b:4a:23:bc:82:6b:c3:d2:ef:1b:fb:1a:
c4:66:2e:69:71:05:58:7a:ce:e5:69:08:d1:06:6e:ab:18:44:
e1:22:95:a0:67:12:0d:32:45:62:fa:c0:5c:55:99:36:5b:0d:
fc:28:07:1c:66:2e:b3:0c:98:21:a8:2e:91:8e:89:c9:67:67:
73:19:61:c3:b2:90:b0:58:ff:fd:45:bc:02:85:b4:06:3d:46:
1f:80:e5:3e:df:fc:dc:d2:75:9b:e1:a8:47:48:5d:ef:ff:9c:
47:10:d1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:45:01 2026 by rpki-client