
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lRofE-lpjjwSEjOjKrrIpe5Bp1c.roa
File: lRofE-lpjjwSEjOjKrrIpe5Bp1c.roa (raw, json)
Hash identifier: d+O6lMxWO+EWJLS3/pZrVYI1UpCiJAh7MX85Adddip4=
Subject key identifier: 95:1A:1F:13:E9:69:8E:3C:12:12:33:A3:2A:BA:C8:A5:EE:41:A7:57
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0653
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lRofE-lpjjwSEjOjKrrIpe5Bp1c.roa
Signing time: Tue 31 Mar 2026 08:25:34 +0000
ROA not before: Tue 31 Mar 2026 08:25:34 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:4800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:25:34 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=951A1F13E9698E3C121233A32ABAC8A5EE41A757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:c8:ef:b9:60:4e:52:ea:ff:61:ab:11:6a:
a0:4d:ae:7f:69:8a:54:58:85:94:1c:94:9b:9b:8a:
61:8b:e6:f6:1c:ac:e7:ea:1a:58:c2:ee:a0:6b:69:
3b:35:30:02:9a:5e:3a:6f:73:64:9d:3c:88:89:b4:
55:b3:ab:b7:90:20:14:f0:d2:1b:13:65:73:7f:d5:
3a:e9:7c:cf:41:89:a8:ff:cd:b3:b1:22:0d:20:da:
96:de:71:c9:f8:78:ae:0f:c7:6a:e5:ae:ac:9a:09:
7a:b7:9b:54:9b:2e:2d:6d:c1:f1:44:d4:e2:9b:c2:
27:d1:a5:d8:eb:36:da:4e:d2:01:bf:d2:e6:8d:5e:
37:e4:8a:79:15:a7:a0:bc:fb:9b:a5:30:76:11:70:
95:71:5a:86:d3:be:4b:31:4c:55:1a:4e:ca:5d:de:
8b:06:49:14:a4:5b:e1:2b:8c:bd:f2:99:a8:af:c9:
0a:1e:64:66:4f:0f:d4:4f:29:98:2b:ca:d5:af:1c:
5e:d9:05:6a:0a:c8:fd:f4:57:be:f4:dc:ab:35:af:
6e:f0:8d:52:da:98:3d:e7:3e:52:46:ba:b9:d9:1b:
c5:1a:f5:d0:1a:b3:67:c8:f1:b5:87:ba:60:cd:55:
4b:a7:04:e9:a8:0d:bd:50:a0:60:95:f8:6e:22:17:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:1F:13:E9:69:8E:3C:12:12:33:A3:2A:BA:C8:A5:EE:41:A7:57
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lRofE-lpjjwSEjOjKrrIpe5Bp1c.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:4800::/40
Signature Algorithm: sha256WithRSAEncryption
ab:67:44:37:cb:5d:c9:ad:b8:14:11:f1:68:4d:f6:f9:03:5e:
6e:b9:6d:fb:40:53:73:bc:25:eb:d5:db:5c:e0:a7:c7:be:f4:
de:d5:e7:a3:66:de:b8:70:b4:c0:38:f2:d6:53:f9:1e:c4:aa:
b9:fd:f4:ee:79:6a:26:24:fc:7f:07:67:8b:13:b4:af:35:f0:
f0:d8:be:da:1a:0b:78:13:25:87:49:f1:b6:20:5c:d3:dc:ee:
5d:80:7b:59:61:7a:1c:b3:84:22:71:a6:9b:c3:9d:13:81:3f:
fc:aa:f3:b7:aa:c0:d1:79:a3:c0:ed:14:cf:00:e0:a7:4a:5e:
a5:b6:24:54:92:22:12:71:9e:3b:f1:88:5b:8f:f6:81:f9:61:
ab:e3:54:6c:36:44:fc:ae:a6:c6:ff:d6:32:e1:96:09:a9:74:
8b:56:bf:2f:af:2d:d8:53:39:49:1e:b1:f6:0b:77:44:2b:9e:
e5:57:29:94:ba:49:c9:d9:3d:43:1f:15:06:d5:54:86:7c:17:
46:b8:fc:1d:06:3c:c9:33:d2:f1:a4:34:a6:ed:f0:bb:1e:75:
8a:68:39:18:0b:16:6c:ec:fc:bf:9b:07:89:94:2b:7e:91:da:
d7:eb:b2:92:1a:3c:3b:b2:7c:67:bb:24:e6:cc:de:45:24:a1:
5a:1b:97:ee
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk1MUExRjEzRTk2OThF
M0MxMjEyMzNBMzJBQkFDOEE1RUU0MUE3NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoX8jvuWBOUur/YasRaqBNrn9pilRYhZQclJubimGL5vYcrOfq
GljC7qBraTs1MAKaXjpvc2SdPIiJtFWzq7eQIBTw0hsTZXN/1TrpfM9Biaj/zbOx
Ig0g2pbeccn4eK4Px2rlrqyaCXq3m1SbLi1twfFE1OKbwifRpdjrNtpO0gG/0uaN
XjfkinkVp6C8+5ulMHYRcJVxWobTvksxTFUaTspd3osGSRSkW+ErjL3ymaivyQoe
ZGZPD9RPKZgrytWvHF7ZBWoKyP30V7703Ks1r27wjVLamD3nPlJGurnZG8Ua9dAa
s2fI8bWHumDNVUunBOmoDb1QoGCV+G4iF2kPAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUlRofE+lpjjwSEjOjKrrIpe5Bp1cwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9sUm9mRS1scGpqd1NFak9qS3JySXBlNUJwMWMucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa0gwDQYJKoZIhvcNAQEL
BQADggEBAKtnRDfLXcmtuBQR8WhN9vkDXm65bftAU3O8JevV21zgp8e+9N7V56Nm
3rhwtMA48tZT+R7Eqrn99O55aiYk/H8HZ4sTtK818PDYvtoaC3gTJYdJ8bYgXNPc
7l2Ae1lhehyzhCJxppvDnROBP/yq87eqwNF5o8DtFM8A4KdKXqW2JFSSIhJxnjvx
iFuP9oH5YavjVGw2RPyupsb/1jLhlgmpdItWvy+vLdhTOUkesfYLd0QrnuVXKZS6
ScnZPUMfFQbVVIZ8F0a4/B0GPMkz0vGkNKbt8LsedYpoORgLFmzs/L+bB4mUK36R
2tfrspIaPDuyfGe7JObM3kUkoVobl+4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:31 2026 by rpki-client