
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Xr_EKBNR-0vWkwJev7dNyD7XVoA.roa
File: Xr_EKBNR-0vWkwJev7dNyD7XVoA.roa (raw, json)
Hash identifier: JAtRLzz9gXrJuadisplGLuDRu7+b2c9Xbx1nbSppM3g=
Subject key identifier: 5E:BF:C4:28:13:51:FB:4B:D6:93:02:5E:BF:B7:4D:C8:3E:D7:56:80
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0747
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Xr_EKBNR-0vWkwJev7dNyD7XVoA.roa
Signing time: Tue 31 Mar 2026 08:27:33 +0000
ROA not before: Tue 31 Mar 2026 08:27:33 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:7500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:33 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=5EBFC4281351FB4BD693025EBFB74DC83ED75680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:15:c4:42:65:f6:57:de:7e:81:d7:ea:d6:
1a:3b:03:b4:05:43:ff:56:1e:93:65:6b:a9:b0:e8:
66:11:e9:36:d1:1f:4f:24:d0:02:19:e9:b2:c1:f7:
7e:63:93:d1:5e:2c:c6:ff:80:10:21:fa:ee:50:f8:
24:ef:39:07:81:1a:fe:3d:bb:bc:32:50:43:fb:3c:
d3:f9:a5:30:2a:41:5d:85:53:f9:e0:57:9b:ff:03:
f3:37:a9:2e:9e:03:00:c5:57:6c:0a:29:49:cf:c5:
e0:fa:c5:77:bd:f9:18:0d:fa:74:7b:75:f2:23:cf:
1f:31:07:a1:8e:1a:d4:b4:ff:c7:77:3d:5e:f2:80:
57:bf:70:da:7e:2d:bc:71:a6:54:aa:0a:59:39:ce:
7b:bf:a9:fd:e2:c4:1b:7a:33:a1:1f:af:f0:fb:f0:
cd:df:21:7f:7b:de:e4:f7:31:17:55:f8:bc:ef:ff:
e0:4b:21:fd:49:42:98:20:5c:10:07:f4:cb:22:97:
4e:9a:1b:4d:83:bf:91:4e:74:d4:6b:12:b3:37:e2:
8d:75:38:b9:e8:b4:b2:46:ec:eb:d3:ce:e1:57:55:
d7:81:82:51:91:b6:f6:7c:50:ff:ca:44:31:a5:9f:
8f:5c:a7:b6:10:55:28:b8:5e:cb:bb:74:46:89:21:
0f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BF:C4:28:13:51:FB:4B:D6:93:02:5E:BF:B7:4D:C8:3E:D7:56:80
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Xr_EKBNR-0vWkwJev7dNyD7XVoA.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:7500::/40
Signature Algorithm: sha256WithRSAEncryption
24:e2:c5:18:f4:5a:aa:23:93:cd:70:43:3b:1e:7d:03:71:c3:
27:07:a3:46:e3:b4:c4:fd:94:88:5b:ee:a9:cc:63:bb:a1:1b:
a3:4d:6f:ca:44:1a:38:24:21:10:d5:ee:21:83:40:d7:d3:bd:
95:b9:55:8e:24:3a:91:58:1d:c2:88:52:f9:90:a8:12:50:fa:
f1:19:e3:8f:93:7b:be:42:f2:f3:00:ae:be:d9:49:8e:64:76:
8f:18:45:71:d9:98:d7:95:26:9a:49:bd:8e:b3:09:29:ac:e4:
ad:df:c4:60:74:0d:56:03:b4:47:ee:54:50:1f:4f:38:1d:07:
41:bf:ac:90:0b:3b:52:26:6e:8f:56:68:68:6f:d4:e0:ff:e1:
a5:96:71:cb:61:6a:c7:e7:87:62:76:4f:d5:b8:e8:8a:0b:ff:
72:da:81:a3:3a:3a:61:54:15:44:8a:25:30:30:d7:8f:cc:a6:
af:10:94:36:71:fe:00:87:c7:32:8a:65:52:9b:3a:ee:15:5d:
6b:95:26:0b:85:4c:67:53:02:3c:e3:0b:1e:5e:f0:48:2f:f5:
29:5c:fc:06:48:84:76:5c:0e:5b:09:bb:26:14:fd:dc:f9:44:
1f:ab:39:c6:92:e1:98:c8:d6:33:92:3e:f2:d3:23:98:37:02:
b8:51:92:4d
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVFQkZDNDI4MTM1MUZC
NEJENjkzMDI1RUJGQjc0REM4M0VENzU2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhixXEQmX2V95+gdfq1ho7A7QFQ/9WHpNla6mw6GYR6TbRH08k
0AIZ6bLB935jk9FeLMb/gBAh+u5Q+CTvOQeBGv49u7wyUEP7PNP5pTAqQV2FU/ng
V5v/A/M3qS6eAwDFV2wKKUnPxeD6xXe9+RgN+nR7dfIjzx8xB6GOGtS0/8d3PV7y
gFe/cNp+LbxxplSqClk5znu/qf3ixBt6M6Efr/D78M3fIX973uT3MRdV+Lzv/+BL
If1JQpggXBAH9Msil06aG02Dv5FOdNRrErM34o11OLnotLJG7OvTzuFXVdeBglGR
tvZ8UP/KRDGln49cp7YQVSi4Xsu7dEaJIQ/xAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUXr/EKBNR+0vWkwJev7dNyD7XVoAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9Ycl9FS0JOUi0wdldrd0pldjdkTnlEN1hWb0Eucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa3UwDQYJKoZIhvcNAQEL
BQADggEBACTixRj0Wqojk81wQzsefQNxwycHo0bjtMT9lIhb7qnMY7uhG6NNb8pE
GjgkIRDV7iGDQNfTvZW5VY4kOpFYHcKIUvmQqBJQ+vEZ44+Te75C8vMArr7ZSY5k
do8YRXHZmNeVJppJvY6zCSms5K3fxGB0DVYDtEfuVFAfTzgdB0G/rJALO1Imbo9W
aGhv1OD/4aWWccthasfnh2J2T9W46IoL/3LagaM6OmFUFUSKJTAw14/Mpq8QlDZx
/gCHxzKKZVKbOu4VXWuVJguFTGdTAjzjCx5e8Egv9Slc/AZIhHZcDlsJuyYU/dz5
RB+rOcaS4ZjI1jOSPvLTI5g3ArhRkk0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:56 2026 by rpki-client