
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CcnBhrwU92Zz5W98ihYxjR7rMWY.roa
File: CcnBhrwU92Zz5W98ihYxjR7rMWY.roa (raw, json)
Hash identifier: CNdCllH07v6Fqv0jFQzmFX7QbZf/xdLL/74mk1NTzYQ=
Subject key identifier: 09:C9:C1:86:BC:14:F7:66:73:E5:6F:7C:8A:16:31:8D:1E:EB:31:66
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 06AB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CcnBhrwU92Zz5W98ihYxjR7rMWY.roa
Signing time: Tue 31 Mar 2026 08:26:19 +0000
ROA not before: Tue 31 Mar 2026 08:26:19 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:4700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1707 (0x6ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:26:19 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=09C9C186BC14F76673E56F7C8A16318D1EEB3166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:81:8d:25:c1:2a:32:2e:10:44:1a:ba:0b:
d9:6b:f1:ee:b1:06:cf:a6:6d:c3:0b:3e:11:40:3a:
4e:9b:6f:51:4d:06:1f:95:0b:5d:fa:b9:53:44:bc:
6b:ec:42:38:82:e2:58:76:47:a3:be:a8:48:0b:78:
d3:1d:e8:6d:77:ed:a3:0b:1b:c4:d2:36:0f:23:97:
d0:a2:88:f8:7d:b9:c3:69:21:0d:58:f9:1a:6f:2c:
26:c7:21:44:b4:31:b2:73:22:67:4d:15:8d:53:db:
25:ad:29:47:e4:08:ef:01:ce:f5:ca:cf:06:31:b6:
8e:8f:93:de:16:cb:bd:be:37:dd:a2:ef:b2:80:1c:
f2:d2:23:95:a6:06:8b:7e:65:da:65:50:dd:8e:83:
c4:4d:78:a7:ad:b8:d3:c1:5a:7b:fb:5a:38:d7:c6:
d1:fb:76:94:1f:72:9a:cb:bf:08:54:f6:d1:b0:23:
49:4c:6b:77:3a:82:54:32:14:8e:42:1d:95:fc:cb:
a1:ab:18:35:76:37:60:6b:b2:77:3e:94:2b:15:90:
dc:04:fe:d8:fe:66:00:c5:56:8f:04:fa:e3:a9:1b:
80:1e:20:56:5a:39:b8:c5:d5:dc:6c:cc:77:3a:e7:
0e:96:50:1e:b6:5b:a7:e2:12:cb:ad:91:81:0f:3e:
31:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:C1:86:BC:14:F7:66:73:E5:6F:7C:8A:16:31:8D:1E:EB:31:66
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CcnBhrwU92Zz5W98ihYxjR7rMWY.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:4700::/40
Signature Algorithm: sha256WithRSAEncryption
59:ce:87:ca:38:3b:2d:6a:05:05:4f:9d:20:f3:c3:f1:38:5f:
43:6d:c8:2c:6d:9f:1a:61:36:90:18:4e:eb:57:ee:da:a2:81:
eb:26:d1:68:8b:cc:76:76:b4:1f:b5:ff:9e:d3:01:ab:f9:0b:
ee:21:0c:2d:31:52:bd:8c:43:3c:be:d6:a9:1f:83:89:73:e6:
b0:a1:25:39:d8:a4:47:cc:e5:20:7e:2a:14:86:a5:44:e1:12:
59:07:ad:59:e7:a8:48:cb:fe:22:88:4c:7e:68:e4:6c:8c:14:
77:af:75:90:95:14:e0:eb:61:5d:5c:2d:76:2f:3e:be:db:56:
12:f9:49:93:b2:9c:b5:09:44:33:fd:db:6d:f0:e8:a9:cf:d6:
af:56:37:26:9e:ca:d8:7b:cb:ec:30:5d:17:b2:95:f3:1a:40:
38:57:fb:77:15:d7:43:8d:3c:b4:03:a0:39:b7:e1:96:05:d7:
39:03:76:2f:7d:a8:03:66:87:3e:33:23:f7:c9:36:59:6c:9d:
be:41:30:d3:e1:d1:93:9d:ec:99:85:35:b2:a5:3f:36:82:2c:
ba:2b:7d:cc:b0:12:76:f8:f4:0a:c3:48:ff:17:1f:65:00:53:
bf:32:91:e6:07:d1:e2:1e:49:08:30:05:3f:bc:d6:9c:b8:15:
bb:6b:c9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:59 2026 by rpki-client