
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kALA0WLcHvUMqEbbl3bWK72zYTI.roa
File: kALA0WLcHvUMqEbbl3bWK72zYTI.roa (raw, json)
Hash identifier: K6Kx5M39BwxHTUYxK0aRrjT1Cb1KilRhnbOcY4hVHTg=
Subject key identifier: 90:02:C0:D1:62:DC:1E:F5:0C:A8:46:DB:97:76:D6:2B:BD:B3:61:32
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 070E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kALA0WLcHvUMqEbbl3bWK72zYTI.roa
Signing time: Tue 31 Mar 2026 08:27:07 +0000
ROA not before: Tue 31 Mar 2026 08:27:07 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:d100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:07 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9002C0D162DC1EF50CA846DB9776D62BBDB36132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:68:81:5d:9c:c6:ab:41:98:38:68:79:a9:
a3:a6:d5:be:fd:50:c1:3c:af:71:4d:6a:1b:d1:7a:
f1:88:2b:73:fd:aa:ac:d3:9e:4e:aa:84:f0:20:d1:
a6:ee:60:19:0b:ea:de:48:84:66:97:f3:25:47:2a:
e2:fc:b0:2a:04:d1:61:79:e9:24:fd:51:c0:ab:f0:
2f:79:9a:2c:26:b0:7c:d6:db:30:9d:c0:a6:ca:54:
d1:64:bf:48:0b:46:00:28:f9:e3:ac:49:ba:3e:bd:
fb:0b:eb:98:d6:9d:27:19:a9:e7:4b:04:b7:18:c5:
1c:da:87:e9:7b:61:39:8b:13:c2:73:77:f5:3b:b5:
5a:50:cc:6b:8f:53:44:e5:ff:59:d6:4b:7e:74:52:
dc:58:6f:c3:26:2d:4f:0d:b1:af:ff:39:e5:36:32:
aa:75:5c:8b:1e:6b:f1:0f:dc:d8:f6:35:b3:f3:d1:
79:4c:ea:78:cb:d3:23:ec:9c:87:25:f7:c5:b5:af:
8b:db:7c:86:97:d2:e1:03:20:0e:12:56:46:e8:1c:
91:f8:9f:9a:f8:cb:1e:4a:30:0a:a7:68:16:c2:ae:
d5:81:21:8b:a7:50:ee:cd:b5:a3:a7:fc:ab:83:c0:
6d:ff:fa:cf:12:e3:ac:f5:ba:a4:f6:fb:de:bc:ae:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:02:C0:D1:62:DC:1E:F5:0C:A8:46:DB:97:76:D6:2B:BD:B3:61:32
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kALA0WLcHvUMqEbbl3bWK72zYTI.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:d100::/40
Signature Algorithm: sha256WithRSAEncryption
03:4e:12:b1:b9:6c:c4:c9:29:4f:f1:7a:38:63:e6:c2:ba:41:
f9:21:48:3b:5e:8f:54:6f:56:57:48:ff:dd:e0:06:87:8e:34:
81:2d:01:1d:92:52:c7:04:63:e9:8d:8a:f8:dd:b3:31:31:dc:
ac:a4:d9:01:8d:b7:6d:df:c4:22:fd:b8:ac:c5:7e:9f:ec:50:
8d:ae:ac:07:fb:21:ce:86:86:57:2f:e7:0e:39:0e:7a:f0:28:
11:64:9a:4f:30:ce:d1:63:c6:5a:f5:e4:b1:a3:83:6e:8c:59:
14:5d:98:ba:f0:ee:27:68:28:06:8e:2f:f1:45:c0:6d:f2:67:
51:1f:40:a1:74:48:2a:b6:86:fc:88:a4:8b:50:f0:ef:46:9f:
72:db:24:df:f2:86:9c:bc:c9:3c:89:e4:a4:ff:28:78:87:08:
a0:50:84:f4:24:36:69:39:d7:5f:d8:16:6c:86:36:1e:ec:9c:
ed:ee:62:ca:3a:ac:ec:fb:7c:fc:bf:52:0a:4a:02:6a:9c:1c:
f8:23:0f:49:6b:65:8d:e3:40:d0:ac:ac:b6:86:4b:8a:e7:8f:
28:11:a0:d8:41:fc:70:44:d1:26:98:7d:d1:f7:61:bb:7c:64:
92:d2:2c:01:02:82:12:55:64:d3:19:4c:14:a1:44:db:b9:8f:
de:b1:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:52 2026 by rpki-client