
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UNlz8HQeRXlFXTctG5r0Bq4s0PU.roa
File: UNlz8HQeRXlFXTctG5r0Bq4s0PU.roa (raw, json)
Hash identifier: s/Xes5nl2LjgWFZHHV/ZqXRhFBQF9eSJfeGmFMwJ9aI=
Subject key identifier: 50:D9:73:F0:74:1E:45:79:45:5D:37:2D:1B:9A:F4:06:AE:2C:D0:F5
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0648
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UNlz8HQeRXlFXTctG5r0Bq4s0PU.roa
Signing time: Tue 31 Mar 2026 08:25:30 +0000
ROA not before: Tue 31 Mar 2026 08:25:30 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ab00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:25:30 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=50D973F0741E4579455D372D1B9AF406AE2CD0F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:68:c2:fc:47:f6:a5:f4:46:e3:37:e1:2f:37:
e6:6b:3b:00:c2:88:86:6f:c4:af:e5:78:1d:6f:78:
89:af:f6:9f:ef:21:fc:a5:ab:6b:b9:29:ee:0d:a9:
94:7d:00:7f:7b:f4:1c:12:3b:28:eb:1f:8a:fc:46:
b6:be:42:bc:59:79:7c:b4:a1:aa:0d:d2:10:48:5e:
7d:ca:c9:5e:be:35:cf:77:8d:12:4d:18:89:d9:ae:
11:3e:21:5e:da:cf:e4:d8:fe:a4:a8:d9:9e:72:ff:
6a:b8:ca:dc:80:1d:4a:93:10:c0:08:f3:74:11:b8:
0d:3c:f2:4b:a1:67:44:8b:16:de:f2:78:44:ee:ac:
00:78:6c:42:e4:ac:e0:cf:b2:a8:c8:02:67:0b:db:
57:4c:b3:2b:d5:61:e3:89:af:2f:2e:05:a0:9c:83:
a6:69:95:dd:43:b8:06:d5:07:5f:c6:48:aa:3e:36:
12:51:dd:87:6a:e7:c7:f8:74:e6:29:a8:c8:2b:99:
28:da:61:f8:0f:f3:77:87:ab:e5:4d:b3:cb:d5:1d:
ee:75:a2:79:2c:84:8c:c3:4d:88:75:e7:c3:a3:37:
3b:ef:3d:1e:16:15:eb:29:16:49:46:fb:80:53:27:
a2:29:26:84:8f:71:79:f7:9f:cb:e8:61:71:ec:b0:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:73:F0:74:1E:45:79:45:5D:37:2D:1B:9A:F4:06:AE:2C:D0:F5
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UNlz8HQeRXlFXTctG5r0Bq4s0PU.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ab00::/40
Signature Algorithm: sha256WithRSAEncryption
01:eb:9b:9b:43:6f:86:11:36:bf:65:e6:83:ae:96:b5:cc:90:
69:bb:e6:51:c1:a7:39:90:e0:58:66:ff:ca:9c:39:9e:d6:d4:
e8:d4:6a:98:5f:63:68:61:49:cb:b3:2d:57:5c:2c:b5:f2:11:
26:ec:0c:7a:ba:87:97:3e:64:1f:8f:b6:db:c6:14:48:ae:2d:
68:3f:9d:0d:d4:a4:43:f6:18:c3:09:cc:d5:6b:8d:cc:bc:28:
ee:f9:2e:71:12:c9:ca:66:fd:3c:ca:5e:5d:9a:91:c2:16:70:
a1:9d:f3:38:ef:98:27:fd:a7:a5:5b:f6:9a:9d:07:4b:7f:71:
77:70:31:15:1a:50:e0:e7:0d:f4:25:78:cf:76:66:dc:73:c8:
b8:26:f0:a1:ac:0c:9b:ef:a9:75:e8:82:d2:c5:e7:ea:af:fc:
5d:33:58:7d:9c:05:67:f8:14:81:85:74:41:62:13:85:2e:55:
f9:80:c2:a1:4a:3c:7c:0a:5b:50:19:97:10:b2:83:4f:d0:e3:
da:2c:f8:27:2c:a2:b4:59:7c:50:9e:93:d1:1a:eb:10:49:3d:
7f:20:75:a6:09:74:7e:c3:35:10:76:ba:0d:d8:6a:ff:14:16:
70:5d:89:10:64:c4:07:10:6d:84:46:94:8f:09:b6:3d:e5:9c:
0c:f8:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:34 2026 by rpki-client