
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OPFVcBNjvNvVPbXrqd2fW_t3l1U.roa
File: OPFVcBNjvNvVPbXrqd2fW_t3l1U.roa (raw, json)
Hash identifier: zpPAuiCyqoa8H7dtXumrvvO+sh9oRauuR+a0hsOB7PM=
Subject key identifier: 38:F1:55:70:13:63:BC:DB:D5:3D:B5:EB:A9:DD:9F:5B:FB:77:97:55
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 066D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OPFVcBNjvNvVPbXrqd2fW_t3l1U.roa
Signing time: Tue 31 Mar 2026 08:25:49 +0000
ROA not before: Tue 31 Mar 2026 08:25:49 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:2c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:25:49 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=38F155701363BCDBD53DB5EBA9DD9F5BFB779755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:77:99:08:17:6f:08:d9:27:cf:2b:46:fa:
65:23:05:c3:f9:9d:20:33:a3:e7:07:98:78:0a:8f:
f6:7a:d9:c5:80:96:d4:6d:2c:89:bc:9d:5e:48:47:
10:f3:a0:f5:ec:5b:d1:fe:79:e4:d2:a5:6d:ce:ea:
6f:f4:b8:85:85:ee:75:05:d3:44:ad:d1:1b:d7:a7:
14:3e:51:9c:cd:e0:e3:fb:c7:d8:8f:8b:fe:cb:8e:
ce:57:34:87:fb:a4:5c:0d:17:8c:7a:47:8c:68:d8:
a4:a9:8e:99:73:02:b6:60:f7:4e:e3:23:4c:b4:74:
4a:9a:38:19:d9:f1:4d:b7:f9:8e:6f:dd:e1:0c:29:
9a:3d:cd:02:fd:f2:5d:ab:b0:eb:cd:f9:f4:41:e7:
0f:52:d5:a3:4a:e9:5b:85:43:5d:b0:e2:d1:ec:2c:
50:31:ff:83:89:6c:84:19:1a:9d:81:54:16:87:96:
d2:d4:c5:77:4b:3f:42:c7:43:b7:dd:7f:7d:e5:75:
b0:2e:0a:76:40:bd:fd:f5:16:35:b5:60:54:8a:29:
e6:da:c6:b5:d6:37:1d:6e:f4:3e:20:58:bc:8c:b0:
dd:80:b7:8f:64:2a:4e:df:f0:33:0b:42:48:63:94:
c7:16:75:2a:09:3b:74:06:d7:21:d6:87:11:38:01:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:55:70:13:63:BC:DB:D5:3D:B5:EB:A9:DD:9F:5B:FB:77:97:55
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OPFVcBNjvNvVPbXrqd2fW_t3l1U.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:2c00::/40
Signature Algorithm: sha256WithRSAEncryption
9d:d6:54:82:cf:1f:e7:f6:d1:62:52:33:b7:49:3f:73:75:c9:
f3:07:a5:37:35:d7:da:1a:ca:12:9d:57:22:a8:bd:98:fa:15:
aa:7c:78:fd:43:41:ff:19:b4:7b:26:1f:f5:38:69:4d:fe:61:
14:bc:08:6c:35:2a:81:b1:21:18:cd:87:c0:ef:84:f7:81:4d:
4d:af:79:e5:b4:fa:ae:25:5f:35:0f:6a:b7:0f:8e:8a:ce:50:
84:af:a0:c2:50:f5:7f:e4:22:67:b7:d7:52:d1:5b:c7:be:b2:
0d:c6:9b:cc:d6:01:2e:c9:3a:81:24:96:73:d1:c2:fd:f2:7f:
13:d1:c1:94:75:1b:c8:f9:33:d6:4c:b7:8c:c0:21:f7:c4:c3:
be:38:bd:13:ad:da:3e:f8:af:4d:4a:f9:43:dd:39:d3:c4:11:
7f:51:37:ec:64:59:a6:83:c3:55:22:10:9a:47:e5:44:f3:de:
c1:af:f1:0d:78:00:5a:4d:3c:4f:91:55:38:26:92:32:38:6d:
b4:db:10:6b:99:8a:ce:9e:af:ed:3d:35:5d:ed:99:1c:31:d0:
1f:28:8f:e9:28:47:5a:56:b1:2d:ac:12:1c:0e:a9:51:f0:46:
fe:bb:38:28:49:ec:b2:b4:2b:ce:dd:2e:ef:65:e4:59:04:bf:
16:fe:1a:b6
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1NDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM4RjE1NTcwMTM2M0JD
REJENTNEQjVFQkE5REQ5RjVCRkI3Nzk3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDavHeZCBdvCNknzytG+mUjBcP5nSAzo+cHmHgKj/Z62cWAltRt
LIm8nV5IRxDzoPXsW9H+eeTSpW3O6m/0uIWF7nUF00St0RvXpxQ+UZzN4OP7x9iP
i/7Ljs5XNIf7pFwNF4x6R4xo2KSpjplzArZg907jI0y0dEqaOBnZ8U23+Y5v3eEM
KZo9zQL98l2rsOvN+fRB5w9S1aNK6VuFQ12w4tHsLFAx/4OJbIQZGp2BVBaHltLU
xXdLP0LHQ7fdf33ldbAuCnZAvf31FjW1YFSKKebaxrXWNx1u9D4gWLyMsN2At49k
Kk7f8DMLQkhjlMcWdSoJO3QG1yHWhxE4ASfXAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUOPFVcBNjvNvVPbXrqd2fW/t3l1UwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9PUEZWY0JOanZOdlZQYlhycWQyZldfdDNsMVUucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAaywwDQYJKoZIhvcNAQEL
BQADggEBAJ3WVILPH+f20WJSM7dJP3N1yfMHpTc119oayhKdVyKovZj6Fap8eP1D
Qf8ZtHsmH/U4aU3+YRS8CGw1KoGxIRjNh8DvhPeBTU2veeW0+q4lXzUParcPjorO
UISvoMJQ9X/kIme311LRW8e+sg3Gm8zWAS7JOoEklnPRwv3yfxPRwZR1G8j5M9ZM
t4zAIffEw744vROt2j74r01K+UPdOdPEEX9RN+xkWaaDw1UiEJpH5UTz3sGv8Q14
AFpNPE+RVTgmkjI4bbTbEGuZis6er+09NV3tmRwx0B8oj+koR1pWsS2sEhwOqVHw
Rv67OChJ7LK0K87dLu9l5FkEvxb+GrY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:02 2026 by rpki-client