
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2FRc-kHV81qfF7yTcMhNvk3wQQU.roa
File: 2FRc-kHV81qfF7yTcMhNvk3wQQU.roa (raw, json)
Hash identifier: /3QqtiNZA+aBa8VKspTkSV1w/4wj/Bw+j/zFhYvfxFo=
Subject key identifier: D8:54:5C:FA:41:D5:F3:5A:9F:17:BC:93:70:C8:4D:BE:4D:F0:41:05
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 064D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2FRc-kHV81qfF7yTcMhNvk3wQQU.roa
Signing time: Tue 31 Mar 2026 08:25:32 +0000
ROA not before: Tue 31 Mar 2026 08:25:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:df00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1613 (0x64d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:25:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=D8545CFA41D5F35A9F17BC9370C84DBE4DF04105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f3:90:61:b3:73:1c:9d:16:56:f0:62:a2:3d:
af:41:5f:a5:37:5b:19:6e:87:fa:71:01:e8:b7:4e:
54:3a:8c:3e:2a:5a:29:ae:d0:85:81:48:74:de:f4:
91:15:31:85:95:ff:3e:40:d0:65:10:ee:88:ad:cc:
54:54:71:65:23:af:a3:46:a1:55:4a:c1:f9:d2:99:
97:31:04:d5:1d:72:22:c6:77:53:ef:c1:ac:69:36:
ad:90:0f:07:87:1a:2b:52:8f:3c:79:0e:fa:5e:4a:
73:17:92:7a:23:cc:70:e8:93:1e:bf:5d:ba:b5:3e:
90:8e:06:99:6e:fd:2f:75:9c:50:02:76:81:c4:7f:
3c:f7:7d:dd:c2:47:0e:e4:cd:c9:c0:e8:c4:a3:82:
0d:0d:37:e4:0c:56:f0:8d:d7:18:c1:e8:a8:a9:b1:
69:5a:f8:92:cd:26:e0:09:15:f6:9b:8e:13:75:43:
76:b5:84:cb:b8:18:87:ec:08:48:3c:f7:d2:7b:a4:
bc:2f:c7:9d:f1:ae:c9:af:53:b3:ea:f7:c6:ad:a4:
cf:43:0b:7d:14:56:de:4a:b4:3a:35:57:16:e5:6f:
2c:45:a3:48:a6:a4:f0:e0:b4:75:97:7b:83:c1:5b:
7f:77:66:97:fb:8f:9e:f6:17:11:0d:82:ab:17:b5:
b8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:5C:FA:41:D5:F3:5A:9F:17:BC:93:70:C8:4D:BE:4D:F0:41:05
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2FRc-kHV81qfF7yTcMhNvk3wQQU.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:df00::/40
Signature Algorithm: sha256WithRSAEncryption
3e:82:e1:03:f9:94:1f:3f:da:84:f2:90:44:65:4f:f7:45:a9:
86:b7:fe:cb:48:b1:9d:f0:b6:a5:c3:46:5c:12:e7:fe:49:d9:
55:c9:ed:6f:85:10:f0:f3:91:bc:e6:07:d4:11:84:a3:04:69:
4f:a6:bc:83:01:bd:31:3b:8f:c5:3d:e6:49:23:e4:39:27:39:
44:77:d5:46:7e:06:e4:52:85:f9:42:de:77:62:87:1d:af:a6:
a0:f1:da:da:d2:c9:9f:f4:95:4c:ee:5d:e6:3b:0d:32:5c:6d:
bf:3c:9f:c0:e2:c0:27:05:c8:0b:dc:e6:98:4b:01:0c:bc:c5:
c3:80:74:8d:c5:28:e3:35:b6:8b:a4:18:a3:d0:fb:0e:0a:3a:
c5:25:ea:3d:d4:73:27:97:38:9b:5d:7d:61:a2:fc:7c:2d:3a:
dc:90:0a:cc:01:f9:47:2b:9c:63:0a:dd:ac:6d:da:19:a5:dd:
06:1d:a9:d9:85:6d:cf:72:d8:60:9b:ae:50:66:0c:ae:c2:0c:
cf:99:c8:ad:73:5e:51:84:e5:1e:b3:77:85:bd:47:0f:98:89:
c2:a2:43:cd:58:a5:23:40:a0:31:26:3c:ad:1a:56:2f:ea:24:
fd:6f:61:7f:b5:44:f4:fa:9f:25:94:31:2c:9a:47:42:0b:e3:
8f:33:a8:c9
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBk0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1MzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4NTQ1Q0ZBNDFENUYz
NUE5RjE3QkM5MzcwQzg0REJFNERGMDQxMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr85Bhs3McnRZW8GKiPa9BX6U3Wxluh/pxAei3TlQ6jD4qWimu
0IWBSHTe9JEVMYWV/z5A0GUQ7oitzFRUcWUjr6NGoVVKwfnSmZcxBNUdciLGd1Pv
waxpNq2QDweHGitSjzx5DvpeSnMXknojzHDokx6/Xbq1PpCOBplu/S91nFACdoHE
fzz3fd3CRw7kzcnA6MSjgg0NN+QMVvCN1xjB6KipsWla+JLNJuAJFfabjhN1Q3a1
hMu4GIfsCEg899J7pLwvx53xrsmvU7Pq98atpM9DC30UVt5KtDo1VxblbyxFo0im
pPDgtHWXe4PBW393Zpf7j572FxENgqsXtbjRAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQU2FRc+kHV81qfF7yTcMhNvk3wQQUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS8yRlJjLWtIVjgxcWZGN3lUY01oTnZrM3dRUVUucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa98wDQYJKoZIhvcNAQEL
BQADggEBAD6C4QP5lB8/2oTykERlT/dFqYa3/stIsZ3wtqXDRlwS5/5J2VXJ7W+F
EPDzkbzmB9QRhKMEaU+mvIMBvTE7j8U95kkj5DknOUR31UZ+BuRShflC3ndihx2v
pqDx2trSyZ/0lUzuXeY7DTJcbb88n8DiwCcFyAvc5phLAQy8xcOAdI3FKOM1touk
GKPQ+w4KOsUl6j3UcyeXOJtdfWGi/HwtOtyQCswB+UcrnGMK3axt2hml3QYdqdmF
bc9y2GCbrlBmDK7CDM+ZyK1zXlGE5R6zd4W9Rw+YicKiQ81YpSNAoDEmPK0aVi/q
JP1vYX+1RPT6nyWUMSyaR0IL448zqMk=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:57 2026 by rpki-client