
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HslZYC7N-m3rejDl0Q4nT4KTohw.roa
File: HslZYC7N-m3rejDl0Q4nT4KTohw.roa (raw, json)
Hash identifier: C3obR/2uHN2znNXsWkMndbVfsjaR0nLlGZFN++CzIRc=
Subject key identifier: 1E:C9:59:60:2E:CD:FA:6D:EB:7A:30:E5:D1:0E:27:4F:82:93:A2:1C
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0688
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HslZYC7N-m3rejDl0Q4nT4KTohw.roa
Signing time: Tue 31 Mar 2026 08:26:04 +0000
ROA not before: Tue 31 Mar 2026 08:26:04 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:1b00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1672 (0x688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:26:04 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=1EC959602ECDFA6DEB7A30E5D10E274F8293A21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:68:d1:50:5e:10:4b:e4:89:2f:b7:80:dc:49:
06:d8:b1:7d:06:f3:c5:13:7f:63:b8:34:46:67:ce:
bf:90:d4:18:f7:34:fe:bf:1a:83:8b:06:30:83:9f:
a1:a5:c8:e3:8f:57:13:4b:ea:17:17:a8:f7:f4:d0:
76:cc:ee:fd:3a:4a:ec:8b:15:de:46:e4:f7:72:03:
0a:19:6f:d6:b6:9c:13:03:7b:ee:51:5c:90:b2:76:
b7:e1:8c:74:86:3d:d3:a0:6a:cb:4f:b8:a7:a1:44:
fa:d0:dd:79:a9:3a:c2:1d:76:75:f3:48:56:9b:32:
1f:da:ef:c0:24:d8:85:88:f9:14:bd:bd:d5:14:2d:
f4:17:ed:0c:f8:e9:a6:31:7e:23:a1:10:68:68:87:
04:7a:31:83:cf:df:6e:17:9b:3e:1c:5e:53:61:28:
5c:0a:20:62:ae:80:94:dc:f9:7f:98:a1:c7:5a:8a:
a8:7b:b2:17:aa:fd:6d:e7:24:64:bf:46:42:27:b2:
6c:ab:05:84:71:19:c5:bf:d0:b4:0d:dc:85:68:f5:
5b:58:ef:26:d4:11:fb:e0:06:d6:d6:02:68:b1:ad:
e5:ec:45:e2:42:09:57:57:8a:5c:70:e0:a2:79:18:
a4:df:af:3d:f4:47:ec:cd:32:2f:77:c0:e2:5b:01:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:59:60:2E:CD:FA:6D:EB:7A:30:E5:D1:0E:27:4F:82:93:A2:1C
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HslZYC7N-m3rejDl0Q4nT4KTohw.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:1b00::/40
Signature Algorithm: sha256WithRSAEncryption
c3:f2:02:83:97:2f:15:21:2c:53:9d:66:a5:ae:27:b7:14:98:
41:39:c7:03:c5:25:27:9b:17:39:88:bb:da:a3:7d:95:72:bb:
b8:f2:94:a4:30:37:a7:8f:46:8a:51:a7:67:67:05:8c:51:e1:
bc:d2:58:57:70:1f:95:5e:ab:dd:89:36:f3:64:eb:c1:e7:1e:
1e:25:a3:8f:a4:74:88:4b:77:ab:de:de:6a:fd:cc:22:33:e1:
d6:f6:58:37:82:e6:9d:4e:8f:f3:c5:c8:7a:54:dc:ef:78:39:
4b:24:a3:16:d4:80:84:36:dc:96:cc:41:c5:30:74:57:97:ae:
49:d3:38:fe:f3:50:70:6f:57:33:d5:b1:19:74:87:e0:96:f3:
57:a9:34:62:78:58:fe:a1:56:c6:78:7c:0f:0a:0e:1f:46:55:
d1:46:b3:4b:a7:f8:2e:ca:ac:fe:c5:73:8d:88:ba:d6:cd:eb:
c2:27:81:61:54:72:3f:e0:19:86:cd:4c:f1:9f:ce:f9:77:a3:
6d:43:1c:83:3a:6b:e3:dd:d2:10:c6:0c:96:c9:7b:66:69:ef:
2b:10:53:77:67:a8:95:00:70:78:da:52:1d:c9:1f:7d:d9:f8:
15:23:27:b9:60:bb:dc:d7:9a:16:96:87:45:7c:37:4f:b4:3d:
64:c2:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:39 2026 by rpki-client