
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OltZiPfqS21r6V3JXw9BZmeyoyQ.roa
File: OltZiPfqS21r6V3JXw9BZmeyoyQ.roa (raw, json)
Hash identifier: yrA+ECTEEK0GrTr8gR+KAyy/PsDPDsUs/1u0EWhB010=
Subject key identifier: 3A:5B:59:88:F7:EA:4B:6D:6B:E9:5D:C9:5F:0F:41:66:67:B2:A3:24
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0784
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OltZiPfqS21r6V3JXw9BZmeyoyQ.roa
Signing time: Tue 31 Mar 2026 08:28:05 +0000
ROA not before: Tue 31 Mar 2026 08:28:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:61:6c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:28:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3A5B5988F7EA4B6D6BE95DC95F0F416667B2A324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:8c:e7:48:16:0c:07:09:50:cc:b3:70:2a:d7:
f3:df:c1:05:44:62:a3:79:60:53:4b:fd:c7:29:0c:
b7:c9:d5:f2:10:95:d9:03:21:08:a2:74:8a:3c:f8:
97:e2:76:2c:42:38:4d:68:ff:24:4e:31:12:b4:16:
58:69:90:ca:91:78:1f:e0:ca:15:6b:62:d5:4e:ee:
a9:d9:89:46:a4:b9:aa:70:f5:6b:ac:4c:32:ed:e4:
b8:2d:53:a6:f3:c4:76:c6:9f:b9:ea:e9:fe:2e:dd:
b7:70:1e:95:dc:d4:0c:de:31:d7:35:02:cb:9a:d5:
1b:36:55:b9:e7:01:31:5e:db:f0:53:d6:33:0b:63:
48:12:66:12:d2:eb:12:30:df:11:b8:e6:55:c8:c4:
b9:7b:8a:d9:0a:30:e3:46:bf:73:75:27:17:0e:41:
fa:90:cd:eb:59:3f:61:d8:8d:7e:cc:ee:58:4a:69:
d0:ba:5a:73:14:07:aa:e8:57:8e:58:d8:e7:f8:18:
14:8d:57:10:61:40:4f:f2:28:6b:05:8b:69:a1:43:
5e:77:a1:9a:18:eb:30:61:fe:c5:a1:d9:e3:85:cf:
41:5a:30:4c:df:cb:ec:d2:bd:ec:03:34:32:85:f2:
93:23:f9:8f:4f:6d:54:7f:95:97:47:4c:e1:90:a9:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:59:88:F7:EA:4B:6D:6B:E9:5D:C9:5F:0F:41:66:67:B2:A3:24
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OltZiPfqS21r6V3JXw9BZmeyoyQ.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:61:6c00::/40
Signature Algorithm: sha256WithRSAEncryption
42:81:5c:c5:49:40:23:ae:36:50:2b:83:1f:38:8f:6e:56:76:
23:91:f5:b5:e0:50:46:fd:70:7f:0a:b7:30:95:a4:f3:63:5c:
6c:a8:0e:d9:ca:94:1d:d1:b1:6b:3c:07:fb:7f:d2:70:40:ff:
f5:d1:f4:72:ba:5a:87:0a:18:87:29:cf:aa:d5:e2:0a:46:d6:
f4:4c:71:98:95:5c:19:b7:bc:5f:f6:4d:04:7d:3b:91:a3:49:
6a:9d:d9:fe:bb:ba:9c:15:e5:e9:4c:64:d5:4b:79:09:28:fe:
94:f0:49:99:fa:57:31:86:0c:55:6a:77:f1:5d:0a:4e:d2:ac:
36:a1:1d:fb:f1:6a:d9:28:ff:2f:50:1f:72:ca:61:c7:6f:a6:
c4:b8:09:aa:da:0d:3b:74:f5:1e:d4:63:53:9d:cc:00:58:f8:
c5:f8:91:7d:dd:bb:12:f2:4d:6e:6c:8d:73:ee:2d:13:a9:b5:
dd:82:25:e7:e6:2e:fd:6a:d0:a3:79:6d:30:0e:da:45:b7:33:
ce:9e:24:06:cc:43:2c:a4:5d:4d:55:5e:86:fa:4f:28:52:e6:
90:1c:0a:cf:66:c5:f0:94:2e:8b:96:c4:cd:17:df:d6:6d:42:
e9:86:2d:9f:cf:63:a3:e2:e4:2b:a9:e9:85:7d:92:20:f6:55:
e3:16:3e:a4
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI4MDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNBNUI1OTg4RjdFQTRC
NkQ2QkU5NURDOTVGMEY0MTY2NjdCMkEzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxjOdIFgwHCVDMs3Aq1/PfwQVEYqN5YFNL/ccpDLfJ1fIQldkD
IQiidIo8+JfidixCOE1o/yROMRK0FlhpkMqReB/gyhVrYtVO7qnZiUakuapw9Wus
TDLt5LgtU6bzxHbGn7nq6f4u3bdwHpXc1AzeMdc1Asua1Rs2VbnnATFe2/BT1jML
Y0gSZhLS6xIw3xG45lXIxLl7itkKMONGv3N1JxcOQfqQzetZP2HYjX7M7lhKadC6
WnMUB6roV45Y2Of4GBSNVxBhQE/yKGsFi2mhQ153oZoY6zBh/sWh2eOFz0FaMEzf
y+zSvewDNDKF8pMj+Y9PbVR/lZdHTOGQqWZ1AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUOltZiPfqS21r6V3JXw9BZmeyoyQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9PbHRaaVBmcVMyMXI2VjNKWHc5QlptZXlveVEucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAYWwwDQYJKoZIhvcNAQEL
BQADggEBAEKBXMVJQCOuNlArgx84j25WdiOR9bXgUEb9cH8KtzCVpPNjXGyoDtnK
lB3RsWs8B/t/0nBA//XR9HK6WocKGIcpz6rV4gpG1vRMcZiVXBm3vF/2TQR9O5Gj
SWqd2f67upwV5elMZNVLeQko/pTwSZn6VzGGDFVqd/FdCk7SrDahHfvxatko/y9Q
H3LKYcdvpsS4CaraDTt09R7UY1OdzABY+MX4kX3duxLyTW5sjXPuLROptd2CJefm
Lv1q0KN5bTAO2kW3M86eJAbMQyykXU1VXob6TyhS5pAcCs9mxfCULouWxM0X39Zt
QumGLZ/PY6Pi5Cup6YV9kiD2VeMWPqQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:35 2026 by rpki-client