
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9hZC3lgzwk-QZ1ynf8dWddcPB6w.roa
File: 9hZC3lgzwk-QZ1ynf8dWddcPB6w.roa (raw, json)
Hash identifier: TPcm6VmxdgvUlqv8CBDAjguhZX/gkWjWZHX5kmejINM=
Subject key identifier: F6:16:42:DE:58:33:C2:4F:90:67:5C:A7:7F:C7:56:75:D7:0F:07:AC
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 072D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9hZC3lgzwk-QZ1ynf8dWddcPB6w.roa
Signing time: Tue 31 Mar 2026 08:27:21 +0000
ROA not before: Tue 31 Mar 2026 08:27:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:3a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837 (0x72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=F61642DE5833C24F90675CA77FC75675D70F07AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:3e:1e:25:0f:c5:5a:8e:82:a1:17:c0:ec:
69:e9:74:a8:ae:b2:ae:16:6f:d9:30:2f:88:ae:45:
a7:82:f6:d1:83:eb:5a:cc:ac:f1:f9:d0:5e:d2:8f:
d0:ae:b1:ca:e8:02:72:82:30:b2:8e:da:38:d0:30:
58:bb:02:2d:a4:50:ec:27:94:81:7b:2d:05:8b:fc:
9e:50:d8:d6:03:11:b5:8c:89:0c:b2:82:2a:ab:75:
22:96:4a:0a:e8:ff:e1:fc:8a:90:9b:87:41:3a:0c:
33:ca:3e:a6:19:75:26:83:55:77:71:cb:90:85:1e:
8c:e3:78:c4:2e:fc:8c:c9:cc:1f:0b:8e:4c:7d:22:
9b:c0:0a:de:bd:19:fe:a1:6d:c5:dd:77:26:ec:e3:
83:d2:42:a8:0b:a4:77:21:68:26:dc:2e:a5:9f:27:
60:59:52:53:00:55:e0:67:af:c0:e4:69:df:42:5c:
c7:4d:de:09:ee:f7:7c:31:38:59:0a:8c:ed:7c:5d:
35:27:b8:66:9a:09:ea:7b:d5:14:6c:2f:7b:c5:a8:
75:e7:62:7c:cd:25:1e:e1:5a:61:e7:49:bb:c8:54:
45:26:0c:15:a9:ab:cd:69:82:b0:44:60:c9:58:7e:
29:26:a1:32:79:79:96:ff:98:0b:65:4a:e4:2e:34:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:42:DE:58:33:C2:4F:90:67:5C:A7:7F:C7:56:75:D7:0F:07:AC
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9hZC3lgzwk-QZ1ynf8dWddcPB6w.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
22:11:3c:ee:13:ea:06:b3:4f:6c:ca:c0:30:96:6d:c3:b7:66:
74:27:94:d0:84:29:85:24:8e:2e:b7:c2:f3:45:69:1d:ae:ce:
60:7b:7f:b5:e8:57:a2:7b:b1:8a:75:f7:25:52:0f:0e:8c:30:
f6:21:6c:b6:f6:e5:24:e6:82:e5:0f:d9:42:82:06:ad:27:ce:
2a:0f:9f:81:b8:b9:a0:5c:6a:5d:a3:56:37:6e:4d:98:af:4f:
2d:fa:6e:16:13:92:0c:12:0e:e9:da:e4:7a:36:ea:54:c8:5f:
ff:38:56:8e:c7:da:98:b2:ef:5b:c7:d9:f5:58:c4:ae:88:98:
f2:f1:8e:0f:20:c9:53:af:85:57:52:19:a6:67:05:6c:5f:bf:
fd:78:da:54:97:29:8f:06:8e:7f:14:51:93:22:d6:79:05:4a:
0a:d3:d3:8a:7d:ed:a4:78:11:7a:e7:0a:15:0e:8d:b0:8a:05:
a2:3c:a1:11:b9:bd:eb:3d:ed:54:a8:35:3d:0e:58:be:e1:9c:
b7:ae:5c:82:0c:ea:26:ad:80:17:89:e4:18:92:be:7e:bd:b1:
41:0d:f7:e7:bf:76:46:03:ae:03:4f:3f:5d:57:a5:87:a2:04:
4b:28:3c:1b:ae:38:72:89:2d:bd:cf:4f:e7:3c:03:06:50:1b:
97:3b:d3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:49 2026 by rpki-client