
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hMAe0Lj0ipqoT41WIXEf8hjhRIc.roa
File: hMAe0Lj0ipqoT41WIXEf8hjhRIc.roa (raw, json)
Hash identifier: AZqsV5EPnkMEk5AAqxeh3Bq7+PTMJYFKy0zHsnZotGA=
Subject key identifier: 84:C0:1E:D0:B8:F4:8A:9A:A8:4F:8D:56:21:71:1F:F2:18:E1:44:87
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 071A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hMAe0Lj0ipqoT41WIXEf8hjhRIc.roa
Signing time: Tue 31 Mar 2026 08:27:12 +0000
ROA not before: Tue 31 Mar 2026 08:27:12 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:4400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818 (0x71a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:12 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=84C01ED0B8F48A9AA84F8D5621711FF218E14487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:79:7c:66:d0:b7:97:f5:97:a1:74:6c:6a:
2d:5d:ad:76:ce:54:6c:53:46:92:6b:5a:d8:95:49:
08:4b:1d:7d:93:90:ee:74:cb:4c:ec:57:a9:51:19:
71:88:f7:45:cf:5c:26:dd:f6:89:99:3d:dc:21:2b:
90:22:34:2f:c3:21:d9:e0:f4:c5:25:eb:65:67:c8:
1b:5c:c7:1e:82:b1:50:0d:f8:d2:84:92:04:01:01:
83:09:8d:c3:5f:ff:6e:fc:34:42:24:4a:fd:59:81:
81:a4:9e:6c:a6:75:69:50:e8:6a:64:b2:e3:4d:27:
7c:ce:ff:f1:ea:37:d1:32:ef:04:29:b3:ca:74:5b:
bf:c7:01:3e:e7:0b:f1:2e:b0:41:3b:14:fc:c0:22:
db:52:42:ac:f2:62:d2:cf:6d:e3:52:3b:d9:1c:6a:
9c:74:16:56:a2:e2:c1:fa:5f:6e:96:94:c2:a6:9d:
ce:eb:e7:53:26:ee:dc:22:38:f6:40:1e:6a:24:d3:
f5:50:b5:f1:7a:ff:f8:2b:a9:a0:1c:bb:0c:1c:f0:
7f:17:6a:1c:d8:78:16:c6:f4:6a:06:41:63:6f:cd:
87:c9:bd:03:84:c1:7d:20:77:9a:95:4b:93:61:a2:
75:3b:12:41:b9:a2:98:04:1a:81:06:b6:2a:6e:a5:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C0:1E:D0:B8:F4:8A:9A:A8:4F:8D:56:21:71:1F:F2:18:E1:44:87
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hMAe0Lj0ipqoT41WIXEf8hjhRIc.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:4400::/40
Signature Algorithm: sha256WithRSAEncryption
7d:28:74:aa:2b:0b:c6:f6:46:0d:ed:68:e3:3c:28:63:6d:58:
9f:d5:79:64:2b:ce:c6:68:42:73:e7:5c:e5:86:7a:e2:fb:b8:
4d:e5:80:5e:7f:1c:25:a4:53:61:de:76:4c:61:4a:e3:8f:b3:
44:fb:6c:42:f0:2a:75:ca:8d:3f:76:68:b0:80:90:6f:04:da:
62:e5:c3:4c:ec:bd:9e:03:83:90:6e:30:df:b2:67:01:63:42:
34:b6:c1:34:ac:da:92:3e:fe:2b:c5:ed:4e:51:a8:d8:d2:46:
88:55:a2:43:42:af:82:74:7c:c5:2b:0d:26:a7:10:23:fc:a9:
3a:bf:30:3c:d0:88:32:b1:49:71:5a:e1:51:79:17:5e:af:1a:
45:44:6c:59:c9:ba:a5:bf:49:6e:6a:72:47:23:6b:98:a8:90:
2e:2d:d6:a9:87:c9:c2:7b:7c:a3:0d:f8:43:b4:16:97:78:38:
a0:a0:b9:4d:49:0e:4c:06:65:7f:a7:57:b8:4c:99:c5:9b:da:
d9:03:a8:1b:93:ad:cf:33:ce:f4:0d:6f:65:fc:68:38:ea:89:
77:9d:2e:ba:e5:96:24:de:f7:08:4c:d5:df:62:49:52:55:5d:
eb:cc:80:ae:25:ee:89:25:ec:0e:a0:b9:55:5d:20:2d:23:e7:
a4:2d:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:54 2026 by rpki-client