
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa
File: ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa (raw, json)
Hash identifier: A7BpN0DE1SVceN4ck/Zdck/qCulEbbdiLmGl2I3Qkv0=
Subject key identifier: 64:09:17:00:F0:EF:86:62:7F:2E:1E:70:2E:1E:36:34:9E:D9:15:4E
Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial: 5C
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa
Signing time: Tue 31 Mar 2026 08:33:50 +0000
ROA not before: Tue 31 Mar 2026 08:33:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24259
IP address blocks: 126.52.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 16:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Validity
Not Before: Mar 31 08:33:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=64091700F0EF86627F2E1E702E1E36349ED9154E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:e6:14:28:6b:c4:c6:47:04:d6:31:a2:cc:
06:10:1a:22:e5:99:3c:65:8f:fe:d3:07:b6:a4:94:
a4:56:bd:40:b7:b3:e7:58:96:46:2f:a6:59:10:72:
59:28:12:1d:58:a3:81:ec:18:e2:bc:8b:7f:34:38:
cd:45:48:ce:11:16:eb:65:76:ad:87:01:f7:9f:10:
b7:a2:a6:37:95:79:b6:fa:be:a3:8d:ab:8a:d1:70:
56:a8:24:20:55:0a:ce:a4:a5:dd:e4:5f:02:34:26:
b9:93:0a:a7:c3:58:d9:73:f7:f9:72:be:63:80:d1:
8b:f4:95:03:7a:06:2d:08:bb:73:ba:75:62:31:9d:
3d:63:07:6f:a8:83:a9:58:f6:da:9a:cf:42:1e:86:
1c:ff:14:2c:de:61:de:6d:52:a0:98:b6:ac:3f:e5:
68:1a:37:f4:3e:be:d3:63:c9:f6:c5:56:49:85:c4:
90:3d:a3:46:d4:3c:11:40:35:a3:ed:d3:6b:42:e6:
f3:86:6c:35:78:66:f6:07:89:00:a1:05:b5:49:46:
26:91:de:91:e2:17:66:6a:ed:f2:d3:58:44:0b:67:
d9:9d:4c:31:f6:52:fb:aa:a2:3b:2a:c3:62:06:5f:
50:0c:3d:c8:5b:ae:b9:3d:fd:d2:c8:8d:a1:4d:bd:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:09:17:00:F0:EF:86:62:7F:2E:1E:70:2E:1E:36:34:9E:D9:15:4E
X509v3 Authority Key Identifier:
keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa
sbgp-ipAddrBlock: critical
IPv4:
126.52.16.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:6a:f8:57:a1:99:cf:81:cc:63:1b:54:5c:50:38:a7:6c:41:
d0:42:30:ed:db:ce:e7:5b:89:a3:36:fa:34:59:03:e1:f4:28:
24:9d:18:a8:96:74:51:a5:92:70:40:0e:68:4c:60:75:f1:93:
1d:c0:14:9a:47:14:cb:61:f0:48:8e:4d:29:88:ac:82:6a:67:
60:12:24:77:45:22:cc:4e:7b:db:97:39:d4:39:2c:b5:e8:4a:
5e:c1:c8:09:41:aa:6f:51:f4:19:b1:12:74:74:3d:4f:98:fc:
10:9c:d5:b6:11:f6:d9:ac:a0:02:72:90:87:17:3c:2c:fa:10:
0c:44:34:19:6a:25:a1:b1:f1:7c:d1:b3:69:d1:7c:15:66:d5:
d5:e9:06:bd:9c:5c:fa:09:0a:9a:a4:49:96:ba:0e:87:10:34:
15:60:68:2d:53:a5:8b:72:c2:fe:c4:06:09:f7:db:45:fd:a5:
12:22:57:13:b8:f2:06:f2:43:79:8c:0c:23:a6:ef:14:5a:0f:
39:2d:e6:94:1a:9a:3f:1d:c9:da:13:98:62:93:6f:bb:54:54:
38:f9:da:87:8d:5e:4d:b8:fb:02:f7:14:5c:0c:a9:df:50:08:
25:a6:fd:60:cc:18:d4:a6:0d:3f:23:a0:87:8d:96:29:94:5d:
9f:b1:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:31 2026 by rpki-client