
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/As8XR8QmK1qgu4YvATgOXEAmuV0.roa
File: As8XR8QmK1qgu4YvATgOXEAmuV0.roa (raw, json)
Hash identifier: obJD8zId/K/BVcW7vZiWY8PzOwph9li70jqGWZaR3T4=
Subject key identifier: 02:CF:17:47:C4:26:2B:5A:A0:BB:86:2F:01:38:0E:5C:40:26:B9:5D
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 06BF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/As8XR8QmK1qgu4YvATgOXEAmuV0.roa
Signing time: Tue 31 Mar 2026 08:26:28 +0000
ROA not before: Tue 31 Mar 2026 08:26:28 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:fd00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1727 (0x6bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:26:28 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=02CF1747C4262B5AA0BB862F01380E5C4026B95D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:ac:15:c4:58:a6:7e:b5:24:8b:e0:f3:49:
22:ba:65:23:c1:d0:df:87:2f:9e:93:c9:57:d1:aa:
81:6a:84:28:8f:f8:e8:db:a7:90:dc:6d:bf:b4:4b:
02:bc:f9:ab:90:62:df:5b:39:d9:e9:19:ba:46:07:
24:67:f1:a8:33:eb:82:be:98:76:bb:07:5e:c2:4c:
fb:8c:33:b6:20:c4:54:e2:c6:59:9d:62:b3:9b:79:
7a:4b:4e:83:0a:e9:fc:e5:1f:07:37:e4:e1:86:a5:
08:1d:63:05:d2:7c:d5:f2:bd:75:51:48:36:18:fd:
5c:2c:11:47:2d:82:b8:e8:f6:f8:b5:a3:b2:a0:6a:
f2:48:bb:90:11:97:8c:fc:5c:b0:2a:16:3f:c1:42:
b7:47:3c:2e:ba:a1:a5:6e:5b:6c:cd:6a:25:bd:cd:
8e:90:b6:1f:6b:7d:b8:a3:38:b2:40:d9:52:25:c6:
e5:3d:2f:2d:68:37:9a:86:2a:57:c1:9d:55:a7:ec:
42:19:f1:0f:fd:23:36:e1:fd:eb:ec:58:b8:0c:41:
c4:fe:b7:89:cd:b0:fc:5f:de:1a:1a:62:8e:81:ba:
5e:39:6f:f5:ca:71:5d:b4:1d:de:48:95:19:6c:2f:
87:bb:ad:84:6e:53:b1:ec:a0:a1:0e:31:13:9c:86:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:17:47:C4:26:2B:5A:A0:BB:86:2F:01:38:0E:5C:40:26:B9:5D
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/As8XR8QmK1qgu4YvATgOXEAmuV0.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:fd00::/40
Signature Algorithm: sha256WithRSAEncryption
83:c1:a4:89:01:7e:43:78:e3:02:4f:5a:f4:41:15:a2:75:d1:
59:d6:dd:3b:51:ac:c2:2e:3f:55:d0:8b:d9:a2:38:73:f1:9d:
8d:16:e1:97:e6:b2:86:78:0c:be:c9:ad:bf:f1:f7:1c:b1:0b:
86:bb:ac:09:8a:a9:c4:50:92:8d:0c:ce:6f:b0:2e:99:ac:ec:
76:cf:94:35:34:68:5c:8d:42:ce:de:d4:cf:35:a7:a2:1f:b5:
ba:d3:02:da:2f:da:63:eb:b4:ab:fb:50:78:5d:ad:59:ad:59:
26:0a:27:bd:e0:09:6b:3b:31:3b:04:13:f3:a2:4a:5f:5e:bc:
7c:16:df:7f:22:92:90:a7:fc:95:99:44:59:d6:93:61:75:c3:
25:84:5b:0e:76:bf:01:93:84:30:0c:47:1b:6b:43:71:23:16:
31:cd:5b:fd:34:be:6f:22:ea:ca:63:c0:e2:5f:31:cb:9e:e2:
1d:b5:3e:c5:f1:6b:78:b3:dd:59:a0:2c:cd:3f:3b:92:1a:a9:
5d:19:1e:ce:d5:65:b8:0c:9b:fa:05:a7:8c:72:05:20:64:d6:
ff:21:8b:65:10:8c:2f:48:76:12:83:2c:d4:75:d4:5b:a9:2b:
86:f6:ce:25:b7:39:bc:24:33:e2:21:1c:4a:99:7b:fe:4d:b1:
05:13:18:69
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBr8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyQ0YxNzQ3QzQyNjJC
NUFBMEJCODYyRjAxMzgwRTVDNDAyNkI5NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDo66wVxFimfrUki+DzSSK6ZSPB0N+HL56TyVfRqoFqhCiP+Ojb
p5Dcbb+0SwK8+auQYt9bOdnpGbpGByRn8agz64K+mHa7B17CTPuMM7YgxFTixlmd
YrObeXpLToMK6fzlHwc35OGGpQgdYwXSfNXyvXVRSDYY/VwsEUctgrjo9vi1o7Kg
avJIu5ARl4z8XLAqFj/BQrdHPC66oaVuW2zNaiW9zY6Qth9rfbijOLJA2VIlxuU9
Ly1oN5qGKlfBnVWn7EIZ8Q/9Izbh/evsWLgMQcT+t4nNsPxf3hoaYo6Bul45b/XK
cV20Hd5IlRlsL4e7rYRuU7HsoKEOMROchgF9AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUAs8XR8QmK1qgu4YvATgOXEAmuV0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9BczhYUjhRbUsxcWd1NFl2QVRnT1hFQW11VjAucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa/0wDQYJKoZIhvcNAQEL
BQADggEBAIPBpIkBfkN44wJPWvRBFaJ10VnW3TtRrMIuP1XQi9miOHPxnY0W4Zfm
soZ4DL7Jrb/x9xyxC4a7rAmKqcRQko0Mzm+wLpms7HbPlDU0aFyNQs7e1M81p6If
tbrTAtov2mPrtKv7UHhdrVmtWSYKJ73gCWs7MTsEE/OiSl9evHwW338ikpCn/JWZ
RFnWk2F1wyWEWw52vwGThDAMRxtrQ3EjFjHNW/00vm8i6spjwOJfMcue4h21PsXx
a3iz3VmgLM0/O5IaqV0ZHs7VZbgMm/oFp4xyBSBk1v8hi2UQjC9IdhKDLNR11Fup
K4b2ziW3ObwkM+IhHEqZe/5NsQUTGGk=
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:24 2026 by rpki-client