
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cHa7vDITagOFQChBpxUGCk6mcZ0.roa
File: cHa7vDITagOFQChBpxUGCk6mcZ0.roa (raw, json)
Hash identifier: unWYEfMOqEXAetN/skGko0esbDelp/F65RCakO3FnUM=
Subject key identifier: 70:76:BB:BC:32:13:6A:03:85:40:28:41:A7:15:06:0A:4E:A6:71:9D
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 06A3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cHa7vDITagOFQChBpxUGCk6mcZ0.roa
Signing time: Tue 31 Mar 2026 08:26:16 +0000
ROA not before: Tue 31 Mar 2026 08:26:16 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:8400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699 (0x6a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:26:16 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=7076BBBC32136A0385402841A715060A4EA6719D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:09:28:8a:84:fa:1a:c3:8c:1c:78:c9:c5:
d9:91:54:84:ae:2b:ef:d8:07:79:9f:88:4a:f1:be:
78:1a:c7:33:28:c9:61:59:ff:05:e7:53:87:ae:17:
f0:05:79:7e:1a:78:e7:b4:c6:5b:0b:3b:14:ec:09:
82:52:30:da:dc:a7:04:40:e1:22:73:f1:d2:56:25:
ce:6d:ba:57:eb:55:9e:03:a4:cc:aa:0c:eb:a4:c1:
7d:1e:74:45:4f:27:35:08:5e:06:ac:6c:58:f1:ab:
e6:54:0b:cc:55:35:98:ce:cd:2e:cb:40:d8:d1:6a:
05:70:60:16:65:e9:45:93:94:9c:0f:b5:b5:0f:52:
7a:1e:0d:f0:00:e6:63:15:7b:6f:0b:47:5c:07:fd:
73:f2:dc:79:5b:9c:f4:6e:7a:aa:2b:a7:d1:63:f3:
13:3c:21:62:ea:a0:8b:1b:45:5d:a8:7c:60:b0:f4:
c5:25:71:6c:06:93:1f:08:2f:9d:cd:f6:d0:e0:3e:
00:92:f2:49:2f:79:7c:4d:5a:f2:a6:be:62:a6:d7:
00:5d:92:c8:94:1e:08:20:0b:7a:ab:6e:a1:fa:61:
ac:1e:d6:8c:80:03:cd:6e:a6:a6:a9:9f:d5:b4:5a:
22:e1:52:a2:8d:3c:06:9f:3a:65:14:06:e7:b4:20:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:BB:BC:32:13:6A:03:85:40:28:41:A7:15:06:0A:4E:A6:71:9D
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cHa7vDITagOFQChBpxUGCk6mcZ0.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:8400::/40
Signature Algorithm: sha256WithRSAEncryption
16:4c:40:8f:39:5c:84:86:54:e9:f2:84:07:12:5c:57:55:53:
99:f3:c9:fe:21:60:b8:4f:c1:10:ad:e2:33:a7:cd:30:aa:a9:
6c:f6:a3:3e:96:a3:23:58:72:74:69:ca:09:cd:a3:2d:1e:19:
22:46:8c:40:b8:c6:f6:5d:57:1b:25:90:5f:3c:b6:ab:4f:c3:
32:a0:ba:f7:d0:f6:06:6f:32:50:4d:17:7d:93:f6:35:28:83:
48:bb:77:31:90:e2:ff:b4:94:86:97:48:f6:2a:ad:84:1f:57:
c0:9f:8c:ac:35:6c:db:28:fb:a3:33:a4:0d:a6:cd:17:5f:66:
64:50:45:73:00:50:0b:2e:b2:93:4a:e0:5d:02:94:7e:3d:22:
a2:7b:4b:26:c0:a6:f0:4a:58:0b:b8:80:4c:bc:65:70:2c:98:
5f:6e:c7:90:c1:43:7a:9c:da:01:f6:8a:2c:25:c7:ff:2d:d7:
ba:58:eb:4b:ab:9c:4e:11:88:55:ed:88:5e:a8:67:d6:d7:dc:
7a:83:5c:a0:3b:72:b9:c7:5e:0a:39:a1:c5:dd:54:08:77:f2:
b9:6c:c2:6f:29:c3:3a:c8:40:81:e9:82:45:19:ec:32:e5:e9:
fc:48:82:9f:a3:a0:44:86:f8:b3:12:9f:09:f4:86:a9:4a:bc:
48:d4:c7:3c
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwNzZCQkJDMzIxMzZB
MDM4NTQwMjg0MUE3MTUwNjBBNEVBNjcxOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrQAkoioT6GsOMHHjJxdmRVISuK+/YB3mfiErxvngaxzMoyWFZ
/wXnU4euF/AFeX4aeOe0xlsLOxTsCYJSMNrcpwRA4SJz8dJWJc5tulfrVZ4DpMyq
DOukwX0edEVPJzUIXgasbFjxq+ZUC8xVNZjOzS7LQNjRagVwYBZl6UWTlJwPtbUP
UnoeDfAA5mMVe28LR1wH/XPy3HlbnPRueqorp9Fj8xM8IWLqoIsbRV2ofGCw9MUl
cWwGkx8IL53N9tDgPgCS8kkveXxNWvKmvmKm1wBdksiUHgggC3qrbqH6Yawe1oyA
A81upqapn9W0WiLhUqKNPAafOmUUBue0IFrBAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUcHa7vDITagOFQChBpxUGCk6mcZ0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9jSGE3dkRJVGFnT0ZRQ2hCcHhVR0NrNm1jWjAucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa4QwDQYJKoZIhvcNAQEL
BQADggEBABZMQI85XISGVOnyhAcSXFdVU5nzyf4hYLhPwRCt4jOnzTCqqWz2oz6W
oyNYcnRpygnNoy0eGSJGjEC4xvZdVxslkF88tqtPwzKguvfQ9gZvMlBNF32T9jUo
g0i7dzGQ4v+0lIaXSPYqrYQfV8CfjKw1bNso+6MzpA2mzRdfZmRQRXMAUAsuspNK
4F0ClH49IqJ7SybApvBKWAu4gEy8ZXAsmF9ux5DBQ3qc2gH2iiwlx/8t17pY60ur
nE4RiFXtiF6oZ9bX3HqDXKA7crnHXgo5ocXdVAh38rlswm8pwzrIQIHpgkUZ7DLl
6fxIgp+joESG+LMSnwn0hqlKvEjUxzw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:56 2026 by rpki-client