
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ch3Fkxxlt2LZXMGnWqLSuuHWHSI.roa
File: ch3Fkxxlt2LZXMGnWqLSuuHWHSI.roa (raw, json)
Hash identifier: hveRttJE9RRiCKkLXVAotLTRji1LEDek/xn8qaicXy4=
Subject key identifier: 72:1D:C5:93:1C:65:B7:62:D9:5C:C1:A7:5A:A2:D2:BA:E1:D6:1D:22
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 06B2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ch3Fkxxlt2LZXMGnWqLSuuHWHSI.roa
Signing time: Tue 31 Mar 2026 08:26:22 +0000
ROA not before: Tue 31 Mar 2026 08:26:22 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ef00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1714 (0x6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:26:22 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=721DC5931C65B762D95CC1A75AA2D2BAE1D61D22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:bf:ec:cb:e1:ab:4e:4c:3d:78:d5:90:73:
16:fb:8b:01:4e:a1:9d:de:4b:67:ca:60:5d:09:29:
ec:42:60:b5:4a:9a:76:19:ef:89:08:66:39:f9:75:
6d:f7:1c:b0:dc:f4:1c:57:9b:89:8a:48:f1:a5:8f:
e3:aa:3c:a2:96:aa:d5:ba:6a:e3:9a:28:f4:48:a1:
d4:3f:38:5f:15:64:91:ed:d0:39:61:05:aa:ce:e1:
7e:07:1c:e9:9a:3d:a2:54:ff:60:25:8f:43:b0:6c:
bc:03:bb:a2:64:ef:a3:9f:8b:e3:12:66:59:20:5b:
14:ed:16:59:00:46:51:08:4f:bb:24:24:3d:dc:51:
98:68:4c:13:0f:f3:2a:2a:95:52:b3:70:1e:32:be:
56:ae:49:4a:5e:d3:e0:91:b2:28:ce:d8:2f:76:c3:
cb:e4:86:8a:5f:2b:9f:50:6b:d6:db:73:93:71:c7:
c3:9c:8f:3b:92:1f:83:36:42:49:8d:eb:d4:22:18:
df:61:96:19:8a:e7:05:d4:ba:f3:d5:2e:95:49:30:
c6:48:bf:77:4a:8a:9d:c2:00:e8:7a:94:a0:9e:42:
98:9d:7d:fc:e7:e1:77:05:c3:96:77:26:64:72:23:
83:79:ed:b5:f9:66:db:71:bd:46:22:45:84:c5:55:
46:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1D:C5:93:1C:65:B7:62:D9:5C:C1:A7:5A:A2:D2:BA:E1:D6:1D:22
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ch3Fkxxlt2LZXMGnWqLSuuHWHSI.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ef00::/40
Signature Algorithm: sha256WithRSAEncryption
c2:76:12:0d:23:fe:be:b6:43:26:ef:e7:82:0a:92:46:55:b7:
c1:26:18:c8:d9:53:89:87:04:40:cc:98:7e:f0:b5:ee:85:ad:
82:c3:51:42:55:0d:b4:ba:ad:75:23:f9:3c:38:82:16:71:b3:
ca:d8:c3:b2:08:24:bd:3f:67:fc:d3:3e:bb:a0:10:50:e3:d8:
a4:45:6b:7d:81:02:a1:21:bb:ab:6d:50:55:c6:6e:ec:e4:5b:
e2:02:f2:dc:1a:76:f5:4c:39:c8:ed:d7:76:59:d5:3e:31:d0:
e5:48:69:b4:50:36:33:7c:60:9a:bc:22:e7:8d:fa:55:e0:1d:
bc:2d:b6:76:a1:d1:28:54:de:93:50:3f:8f:b0:2c:32:77:0d:
a9:0f:63:a5:35:3c:82:3d:47:d4:eb:c9:e8:ff:e0:b1:85:9b:
f6:67:83:67:6e:1f:8b:e7:8a:cb:01:3e:9a:12:31:bb:7e:0a:
b9:f1:d7:49:74:62:0f:33:f5:32:62:1b:e6:5c:54:5d:f4:7a:
0c:99:b0:31:c9:b8:b6:42:43:eb:ca:38:3a:b6:37:ec:d6:4c:
fa:dd:ed:e8:4e:37:43:f4:b0:b9:ac:2e:8c:e5:02:71:7c:9b:
39:1b:b2:c0:93:18:14:31:48:50:da:97:f3:08:00:49:f8:20:
f1:1d:6f:a2
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcyMURDNTkzMUM2NUI3
NjJEOTVDQzFBNzVBQTJEMkJBRTFENjFEMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/lL/sy+GrTkw9eNWQcxb7iwFOoZ3eS2fKYF0JKexCYLVKmnYZ
74kIZjn5dW33HLDc9BxXm4mKSPGlj+OqPKKWqtW6auOaKPRIodQ/OF8VZJHt0Dlh
BarO4X4HHOmaPaJU/2Alj0OwbLwDu6Jk76Ofi+MSZlkgWxTtFlkARlEIT7skJD3c
UZhoTBMP8yoqlVKzcB4yvlauSUpe0+CRsijO2C92w8vkhopfK59Qa9bbc5Nxx8Oc
jzuSH4M2QkmN69QiGN9hlhmK5wXUuvPVLpVJMMZIv3dKip3CAOh6lKCeQpidffzn
4XcFw5Z3JmRyI4N57bX5ZttxvUYiRYTFVUazAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUch3Fkxxlt2LZXMGnWqLSuuHWHSIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9jaDNGa3h4bHQyTFpYTUduV3FMU3V1SFdIU0kucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa+8wDQYJKoZIhvcNAQEL
BQADggEBAMJ2Eg0j/r62Qybv54IKkkZVt8EmGMjZU4mHBEDMmH7wte6FrYLDUUJV
DbS6rXUj+Tw4ghZxs8rYw7IIJL0/Z/zTPrugEFDj2KRFa32BAqEhu6ttUFXGbuzk
W+IC8twadvVMOcjt13ZZ1T4x0OVIabRQNjN8YJq8IueN+lXgHbwttnah0ShU3pNQ
P4+wLDJ3DakPY6U1PII9R9Tryej/4LGFm/Zng2duH4vnissBPpoSMbt+Crnx10l0
Yg8z9TJiG+ZcVF30egyZsDHJuLZCQ+vKODq2N+zWTPrd7ehON0P0sLmsLozlAnF8
mzkbssCTGBQxSFDal/MIAEn4IPEdb6I=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:37 2026 by rpki-client