
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mkIATt5zIzJwl5lmIkHYr4Io-NE.roa
File: mkIATt5zIzJwl5lmIkHYr4Io-NE.roa (raw, json)
Hash identifier: ypVmkq1LKZyiVZ6wbqwTXkOleG+iEvUqk1oEuXAvm8k=
Subject key identifier: 9A:42:00:4E:DE:73:23:32:70:97:99:66:22:41:D8:AF:82:28:F8:D1
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 071F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mkIATt5zIzJwl5lmIkHYr4Io-NE.roa
Signing time: Tue 31 Mar 2026 08:27:14 +0000
ROA not before: Tue 31 Mar 2026 08:27:14 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:5100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:14 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=9A42004EDE732332709799662241D8AF8228F8D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:f9:8e:65:09:d4:a5:89:88:b2:d8:db:6d:
8b:c3:db:d2:32:35:ac:17:ee:17:91:aa:a1:25:33:
3e:9b:da:81:f3:ba:43:df:96:f4:fe:b3:f6:1b:b4:
fd:c6:91:ed:14:85:89:bd:26:02:e1:03:9e:14:7c:
29:41:c0:54:d6:28:4e:03:3f:bd:e2:4a:4e:81:df:
96:6b:c1:b1:bf:38:6b:10:7b:f6:64:35:44:b8:54:
22:e4:58:37:1e:ee:b8:6f:cc:67:49:97:15:0e:e7:
db:13:80:0e:aa:59:e5:4a:fc:e2:08:9c:88:ad:38:
10:f4:60:18:08:0f:55:52:aa:d3:31:21:03:88:26:
99:16:8a:2f:57:a3:6f:7a:74:bd:5c:38:14:d9:5b:
34:87:41:37:fd:17:f5:24:67:5f:89:87:93:7e:16:
14:de:91:5d:a5:3c:e2:1c:28:4b:31:5d:d7:e5:e4:
d7:5d:9a:58:35:c0:79:0d:98:ec:da:90:1a:05:25:
3a:50:f9:44:80:a6:77:f9:85:3d:61:01:9a:f6:65:
c5:bc:98:4b:55:85:2f:1e:be:21:95:3b:82:5b:cf:
3a:77:90:ad:dc:fc:92:7f:97:a4:5f:e7:f8:04:f7:
aa:33:d0:4c:b7:82:7f:2c:39:2a:fd:e7:e2:aa:7d:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:00:4E:DE:73:23:32:70:97:99:66:22:41:D8:AF:82:28:F8:D1
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mkIATt5zIzJwl5lmIkHYr4Io-NE.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:5100::/40
Signature Algorithm: sha256WithRSAEncryption
2f:ca:03:bd:ad:82:1c:31:d3:e2:ca:f5:8c:a2:8f:21:77:a2:
33:a7:69:a2:1a:2b:aa:db:e1:c6:52:b8:71:3e:47:5d:30:3b:
c3:49:ea:ba:10:63:02:1e:36:20:dc:67:eb:c3:66:13:1e:51:
09:67:59:60:83:13:d0:6f:42:a6:4a:fb:34:bb:c5:1f:01:e0:
43:c1:96:23:c9:f1:38:b5:21:dd:9d:26:d3:90:6f:d1:36:e3:
c1:04:83:06:96:d4:aa:2d:03:70:0c:6c:e1:fc:2b:50:cc:79:
67:0a:0c:be:39:89:34:ba:ef:f6:5e:51:4d:64:56:ee:84:a1:
1d:5b:26:e3:59:bc:6d:39:a9:1d:3d:78:87:b7:1e:be:20:45:
ac:5a:e6:ac:84:af:4b:1e:76:d7:66:23:66:b5:b9:81:2e:ef:
c7:de:92:19:62:7f:43:b3:51:ef:2e:7a:2e:58:72:1b:eb:20:
71:0b:62:65:75:78:3b:2f:f5:8e:2e:48:04:f3:19:ab:d1:5f:
52:4f:62:c1:44:5c:ef:a6:e8:c4:c2:d1:aa:e9:02:f1:16:63:
dd:2c:45:85:71:5a:8e:37:3b:26:5f:d4:3a:5e:3d:a3:66:c0:
00:cb:9f:70:73:d3:a2:f3:d7:28:07:0e:b3:d8:fe:60:43:6c:
7d:ec:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:40 2026 by rpki-client