
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/89lsr4xjjW7D_yY0bQsfR9EGqnE.roa
File: 89lsr4xjjW7D_yY0bQsfR9EGqnE.roa (raw, json)
Hash identifier: bqMlAhWFGra7gWOT56VlxQx+aiA5T/prFTejzciuSjY=
Subject key identifier: F3:D9:6C:AF:8C:63:8D:6E:C3:FF:26:34:6D:0B:1F:47:D1:06:AA:71
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 075E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/89lsr4xjjW7D_yY0bQsfR9EGqnE.roa
Signing time: Tue 31 Mar 2026 08:27:45 +0000
ROA not before: Tue 31 Mar 2026 08:27:45 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:f500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:45 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F3D96CAF8C638D6EC3FF26346D0B1F47D106AA71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:d2:1f:66:c8:76:fe:31:d0:5c:f5:7c:59:
ae:d2:ed:ed:ed:df:71:19:8b:80:b1:6c:46:0e:6e:
66:4c:4a:06:85:3c:54:ed:6b:89:f3:7a:0b:88:30:
09:b7:5e:03:0d:da:da:d4:a1:4c:c7:b4:45:75:35:
c1:40:65:38:ea:b4:84:94:dc:a8:bd:43:e4:82:03:
d6:83:6b:5d:95:96:54:c1:b8:f0:fa:7a:54:45:ad:
19:ed:f5:98:6c:78:c9:c7:bf:81:fa:a5:da:06:91:
09:41:0f:1f:10:3e:a4:ee:c3:91:55:54:f0:9c:c7:
c0:be:f2:b9:80:05:e6:2f:bb:e8:7f:6b:37:04:78:
b0:c0:10:f0:9f:97:90:0f:c3:74:02:4e:50:9e:f3:
39:c4:2d:56:4d:9c:9c:54:bc:7b:81:ae:b3:fc:bd:
8b:01:f5:ec:5c:92:b7:ec:8a:36:b8:29:fe:1a:da:
b6:cb:c9:f2:c0:d7:19:c1:9d:2e:c0:81:2f:8a:a0:
b6:e2:a0:51:3e:03:80:14:a4:dd:a1:ff:f9:60:30:
11:e9:82:b4:e8:f2:ab:a0:71:c8:13:f9:ff:54:0f:
b7:30:6b:db:43:4b:d3:1f:d7:9a:8a:1b:10:02:4e:
6b:d3:69:da:7f:af:35:cf:0b:ed:d1:44:03:81:21:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D9:6C:AF:8C:63:8D:6E:C3:FF:26:34:6D:0B:1F:47:D1:06:AA:71
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/89lsr4xjjW7D_yY0bQsfR9EGqnE.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:f500::/40
Signature Algorithm: sha256WithRSAEncryption
2e:42:38:02:05:4d:28:dd:b6:f9:65:ef:0d:b3:5b:70:74:bb:
df:1f:30:ce:e2:c8:ec:cd:e6:b7:c8:16:78:69:24:7f:19:32:
a9:69:65:fd:f2:71:5d:28:12:51:bb:df:1a:96:ae:92:96:91:
bc:33:49:60:48:ce:6d:b3:e5:95:17:7c:30:aa:63:08:6e:b8:
89:68:d0:9b:1a:82:d4:3f:ec:68:35:42:4e:b8:41:0d:cd:44:
14:e2:8a:2b:03:d4:6c:0e:da:e0:e3:96:e5:40:7d:12:94:70:
b9:15:9f:e7:67:fa:e4:a3:a5:bb:ac:a0:80:6b:76:6d:98:6b:
81:33:ef:d8:ac:31:95:4e:53:aa:c9:8d:a4:b6:bb:9e:d5:32:
20:e4:ed:14:74:14:65:1b:42:23:3c:5f:34:5d:a6:a2:23:d3:
4d:79:6e:d2:26:f9:e1:e6:08:dd:7b:5b:b8:fb:4a:b6:c6:2c:
4e:54:ab:58:46:4a:b8:f3:3c:21:fe:2d:fd:6b:ed:1b:6a:03:
7e:d9:93:dc:e5:6e:24:71:1a:cc:da:97:61:55:ce:ce:6c:65:
b1:84:96:15:8c:f2:35:27:f6:9a:5f:cb:28:0e:bd:b2:20:14:
e7:59:f8:f9:aa:17:a7:92:b3:d7:5e:79:01:a6:9f:1b:cc:6e:
5d:7e:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:28 2026 by rpki-client