
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lAoU-tg1WtiznOuqfKiajapyMEQ.roa
File: lAoU-tg1WtiznOuqfKiajapyMEQ.roa (raw, json)
Hash identifier: F8P7ELIcBp5lQryAkUTb2UgJf4edywhNDjTj7EhYvFs=
Subject key identifier: 94:0A:14:FA:D8:35:5A:D8:B3:9C:EB:AA:7C:A8:9A:8D:AA:72:30:44
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 06AF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lAoU-tg1WtiznOuqfKiajapyMEQ.roa
Signing time: Tue 31 Mar 2026 08:26:21 +0000
ROA not before: Tue 31 Mar 2026 08:26:21 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:61:1e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1711 (0x6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:26:21 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=940A14FAD8355AD8B39CEBAA7CA89A8DAA723044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:07:45:b4:08:4e:f6:d8:bc:58:b9:5e:95:
70:ea:56:5e:c8:dc:bd:23:b9:fd:32:2f:60:af:07:
32:b9:19:c8:f2:41:65:19:09:80:15:e7:6d:ce:03:
77:4b:3e:f5:dc:23:55:3e:37:b1:ab:30:25:02:2e:
4d:cb:76:0f:c4:21:bf:80:a3:19:7d:df:c4:ca:c2:
88:40:28:ff:9a:5e:56:83:34:3a:7a:98:b8:37:49:
4d:a0:e4:2d:62:13:0f:73:75:d1:67:88:d5:53:2f:
e2:6e:6b:e7:10:81:bc:25:ac:7c:85:9b:3b:07:21:
00:29:51:4c:9a:10:23:48:5f:2c:7a:42:65:ce:c0:
bf:74:d7:57:4d:d4:c2:33:ee:40:e4:7a:e4:2e:e4:
c9:76:3e:8e:3e:75:97:56:e3:36:cd:73:ec:93:27:
c7:65:6a:7f:c1:21:59:85:09:d1:ad:3b:49:e2:b5:
5e:20:b1:9e:be:77:94:5c:47:89:1e:bc:3f:8f:88:
c8:56:78:2b:33:9e:6b:1b:1f:a9:8f:7b:36:f8:a9:
65:f6:c8:03:c2:e0:36:20:a8:02:32:d4:8e:9c:6e:
ed:c6:cd:b2:bd:fb:56:19:19:cc:dc:71:fc:89:83:
d8:93:79:30:b5:21:92:bd:f8:b9:5c:0e:ae:b0:d0:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0A:14:FA:D8:35:5A:D8:B3:9C:EB:AA:7C:A8:9A:8D:AA:72:30:44
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lAoU-tg1WtiznOuqfKiajapyMEQ.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:61:1e00::/48
Signature Algorithm: sha256WithRSAEncryption
92:98:85:74:d0:17:f7:50:56:d0:34:32:77:2f:51:92:f4:6c:
0b:6d:e4:d7:23:76:e9:e2:a5:c2:d7:57:d4:4a:d3:85:99:dd:
fd:68:55:cf:b1:ca:be:93:56:ce:a5:5b:08:a2:34:19:95:0b:
ac:5e:8a:b9:cf:aa:14:9e:69:70:79:ae:b7:5f:ef:ac:64:9e:
84:4b:c2:0b:61:e2:a0:00:d5:d5:af:ab:83:20:89:f1:f4:28:
d8:6d:c7:c0:4a:3a:0b:84:d2:9a:0c:3c:24:70:b1:00:5e:49:
09:35:5a:c4:75:85:2b:03:e8:15:cd:4f:28:59:5d:53:24:5f:
70:e0:1d:0e:74:ed:2f:82:de:05:84:64:1d:be:08:73:98:b9:
2a:55:13:90:67:2b:4e:c2:f8:d4:79:18:58:3a:1d:f4:e5:90:
5b:b6:ee:76:b0:c9:43:96:4a:42:27:3d:e9:d7:c0:b8:93:55:
3f:cd:cd:3b:9d:aa:eb:6e:44:12:36:c2:28:82:5a:43:f0:94:
5e:78:ee:14:45:90:25:23:6c:67:f5:e2:de:c7:b6:86:8b:76:
22:3a:53:b5:ca:f7:23:ae:d2:6e:79:7d:c2:38:6f:5f:6e:6a:
55:0b:84:29:6d:18:ad:f0:c0:fd:50:4a:68:a7:14:d2:e1:09:
cf:52:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:26 2026 by rpki-client