
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4rS5aMQCfxgygvlnPwA2wnKRyYo.roa
File: 4rS5aMQCfxgygvlnPwA2wnKRyYo.roa (raw, json)
Hash identifier: qcSIsBlidZZQAhtu1fE4obBjqnR8f0V2D8OVLrSVrSA=
Subject key identifier: E2:B4:B9:68:C4:02:7F:18:32:82:F9:67:3F:00:36:C2:72:91:C9:8A
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0683
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4rS5aMQCfxgygvlnPwA2wnKRyYo.roa
Signing time: Tue 31 Mar 2026 08:25:59 +0000
ROA not before: Tue 31 Mar 2026 08:25:59 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:7600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1667 (0x683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:25:59 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E2B4B968C4027F183282F9673F0036C27291C98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:f6:d5:8d:b9:e2:1a:09:12:3c:1b:a4:a3:
86:e0:db:00:ad:d6:25:a5:55:2a:c1:71:c9:cb:2a:
e4:5a:37:5a:7d:c7:b8:d1:b5:2b:af:af:f5:26:aa:
da:33:49:9b:ed:2e:62:0b:cc:0e:c4:a1:ad:54:95:
ac:8d:ca:32:2b:cb:ac:45:90:9e:42:5d:1d:a6:a8:
b2:0c:56:93:20:f8:35:ac:b5:6b:cd:55:2d:08:ef:
a4:c9:7e:0c:b4:67:3e:93:a1:49:d6:ee:00:e2:02:
7c:bd:56:de:a5:f3:0d:c3:69:fa:e5:5f:44:28:dc:
67:f5:26:84:77:60:2e:4d:4d:74:ca:52:62:ae:06:
99:f3:ba:5e:b7:a4:89:70:0c:4a:14:9c:2e:bc:2a:
17:f5:65:e7:21:c3:a5:8d:fc:af:a9:48:2e:30:14:
87:c7:41:bd:4b:de:a9:fd:00:1d:b5:98:91:93:a5:
cd:c4:d2:d8:67:af:c9:07:d6:2c:06:07:8c:4a:25:
0f:f8:92:38:b4:fd:45:aa:4b:f9:dd:54:ad:8b:bc:
a9:a8:34:90:73:0b:07:43:d1:5f:04:44:77:e3:6d:
0e:59:33:69:98:e9:25:bc:b0:f7:a2:61:6a:aa:c3:
8d:af:ef:2d:09:e5:b8:4c:24:39:76:95:34:c6:15:
85:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B4:B9:68:C4:02:7F:18:32:82:F9:67:3F:00:36:C2:72:91:C9:8A
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4rS5aMQCfxgygvlnPwA2wnKRyYo.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:7600::/40
Signature Algorithm: sha256WithRSAEncryption
35:d3:e1:1d:1f:c4:37:32:13:01:41:72:23:32:41:b0:ca:3f:
d4:58:5a:41:a4:1b:55:62:3e:6b:9f:fa:cb:25:ba:ab:ee:00:
81:90:b0:6f:5c:06:95:51:cd:72:bb:09:8b:4e:4c:35:6e:5a:
11:7e:d3:d2:4b:3d:2a:ed:b2:3c:99:da:aa:1d:7a:05:fc:4c:
4b:a0:8e:48:de:35:2c:34:db:8a:3e:cc:d2:41:55:5a:ca:6e:
de:67:2f:cf:6d:dc:ac:58:18:79:39:37:e8:26:45:7c:cb:01:
5e:c9:c4:47:2a:13:eb:51:55:b2:41:d1:24:b4:1a:7b:fe:3d:
8a:dd:50:b0:51:cb:fa:cf:c3:05:9d:3f:12:c5:47:b9:48:95:
08:8d:f6:02:15:38:8f:2f:da:6e:f5:af:4b:9b:1e:a1:6c:9a:
26:89:52:75:cc:71:d5:83:a3:3b:95:ed:e6:01:6d:21:84:2e:
0a:7a:14:f7:09:07:4d:f0:dc:ad:89:02:ad:94:2d:f5:35:9c:
4b:7a:ff:df:96:62:18:8b:c1:34:0c:f4:21:dd:d9:30:cc:59:
1b:7a:f6:f6:42:b3:92:af:3d:b9:98:dc:83:ee:ec:60:08:26:
c0:62:50:27:c3:73:d3:29:cc:a0:e5:c3:80:41:b1:50:fd:a7:
59:6e:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:56 2026 by rpki-client