
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AjQK-s2ohMBknms7sIDzP8dDtqQ.roa
File: AjQK-s2ohMBknms7sIDzP8dDtqQ.roa (raw, json)
Hash identifier: MP+RYUmCOm6VGlscTua0a/VaRHudb0PkvbKR5IZhllU=
Subject key identifier: 02:34:0A:FA:CD:A8:84:C0:64:9E:6B:3B:B0:80:F3:3F:C7:43:B6:A4
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 067E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AjQK-s2ohMBknms7sIDzP8dDtqQ.roa
Signing time: Tue 31 Mar 2026 08:25:57 +0000
ROA not before: Tue 31 Mar 2026 08:25:57 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:dc00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:25:57 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=02340AFACDA884C0649E6B3BB080F33FC743B6A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:40:07:57:05:0b:d9:2f:75:73:96:9c:84:f5:
97:a3:3f:b2:28:5d:aa:97:c9:ea:d8:44:4d:45:7b:
27:f4:b3:1b:24:56:66:6b:c9:b1:73:e3:08:2b:80:
a2:5e:04:2e:a5:ab:c3:25:39:6c:df:05:b0:b5:12:
25:b7:ab:db:65:97:c4:fb:ee:85:81:cc:1c:45:d7:
2d:f3:56:96:0b:a4:f1:23:c7:c4:ff:04:2f:11:60:
19:95:97:b8:12:b0:11:e0:19:63:4c:ad:4d:53:92:
1d:5d:7d:78:0b:d0:8a:d9:55:ed:c8:e0:49:68:d4:
a3:03:d7:28:71:9e:1b:b0:53:b4:0a:2d:8f:67:3e:
c1:32:92:21:2e:ab:a1:0b:3e:5b:99:03:13:00:52:
19:00:7a:14:6e:b0:d7:84:b7:ee:7b:87:6d:ed:01:
46:e4:95:75:8f:e1:da:63:22:43:29:a6:ba:4d:ce:
40:58:d0:aa:9c:e4:9e:56:71:d9:48:c3:3a:4b:ea:
2f:69:78:4f:ee:0e:a8:df:9d:64:4c:5b:1b:93:46:
25:a9:11:52:1a:6b:c8:8a:d0:c7:f1:93:b7:d9:fe:
48:7b:8c:9a:21:b7:14:39:ce:ca:08:8f:3c:41:25:
98:0a:0e:41:b7:c7:29:46:ac:10:d9:f5:03:2f:a9:
ed:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:34:0A:FA:CD:A8:84:C0:64:9E:6B:3B:B0:80:F3:3F:C7:43:B6:A4
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AjQK-s2ohMBknms7sIDzP8dDtqQ.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:dc00::/40
Signature Algorithm: sha256WithRSAEncryption
c7:cb:5b:23:a9:a9:80:8a:e0:a2:2a:31:37:c8:d0:3a:97:a7:
e1:80:02:5a:49:19:56:5b:13:b3:0e:00:3c:c2:00:56:3e:ce:
a4:28:7c:25:9e:a8:de:35:3b:b8:dc:16:5b:15:36:d7:bd:6e:
28:cc:0f:3b:cc:9e:4f:b2:6b:bf:2b:96:77:90:b9:f8:30:8c:
04:cd:ea:29:03:69:ae:e6:f4:ad:f7:a7:32:15:c4:97:84:24:
fe:a0:1e:6b:95:46:93:ac:3b:66:59:0a:c4:86:14:06:c1:d0:
b9:55:7c:5b:d9:5b:ba:81:23:69:36:be:eb:a9:d1:4e:e4:e9:
33:42:ef:be:6f:01:6c:e3:04:6f:d2:0e:81:05:cc:a2:7a:69:
ec:af:0d:be:45:17:0f:2f:cf:cf:18:19:6f:9b:29:94:2f:6d:
d0:62:f7:88:85:90:34:96:be:72:bd:b0:d6:50:ad:40:61:b1:
47:1a:a5:fa:83:81:79:4d:76:e9:c6:ac:c6:d3:28:e6:67:89:
df:9c:e8:ea:f6:aa:90:60:72:b8:83:96:43:6c:b2:2b:f7:93:
75:63:ca:8b:10:0f:92:0d:f2:89:52:57:20:eb:dd:42:24:92:
32:36:ae:b2:a0:ac:b4:7c:18:00:c5:39:81:ce:4f:0c:53:2a:
77:03:7a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:56 2026 by rpki-client