
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5bpv6RRA7IaqDSaTKY9MIdw0g4.roa
File: r5bpv6RRA7IaqDSaTKY9MIdw0g4.roa (raw, json)
Hash identifier: Ji1H/SBFxGg7trRAx2xQ3fMsDrOD+7oL/BoXJsd18zs=
Subject key identifier: AF:96:E9:BF:A4:51:03:B2:1A:A8:34:9A:4C:A6:3D:30:87:70:D2:0E
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0656
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5bpv6RRA7IaqDSaTKY9MIdw0g4.roa
Signing time: Tue 31 Mar 2026 08:25:35 +0000
ROA not before: Tue 31 Mar 2026 08:25:35 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:ea00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:25:35 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=AF96E9BFA45103B21AA8349A4CA63D308770D20E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:19:bc:33:dc:cb:63:0f:f3:59:c3:2b:75:
9b:2e:f4:42:67:19:ec:01:db:fa:1f:f3:e8:48:45:
b7:33:15:2b:74:82:e3:ea:e4:7d:73:3a:78:ef:fa:
16:10:12:8d:70:98:49:16:18:fc:17:ef:ad:0b:31:
48:72:e6:4d:14:8c:19:41:dc:ca:16:a9:2c:ec:eb:
26:3f:6f:0d:53:39:8d:c7:8f:61:7a:04:9e:7b:bb:
3b:07:9b:cd:52:68:d0:8f:e4:4c:9e:5a:93:81:16:
4c:b0:68:b9:e1:6e:3c:e7:55:cb:08:05:d9:11:1f:
49:d3:c3:d5:b1:7d:6a:46:81:4c:09:57:98:f8:54:
a7:81:5f:9f:19:88:cb:23:86:32:39:e1:72:a9:86:
e3:aa:e5:75:d1:1f:42:66:84:48:20:82:95:68:bd:
6b:57:ec:8e:40:5f:50:1d:2f:48:11:b0:a0:19:18:
b9:c3:b6:06:76:ab:06:53:51:b0:ba:e8:fa:02:dd:
1f:3d:31:75:5e:bf:1a:53:02:df:8d:7d:14:09:0a:
b5:4d:3f:04:fa:a6:98:8b:db:bb:9d:b9:ea:5b:4b:
83:d1:c5:de:8f:fb:1f:31:82:4f:75:05:77:67:ff:
b0:7e:a7:90:35:d2:bb:a7:f0:a3:b5:7f:02:7b:66:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:E9:BF:A4:51:03:B2:1A:A8:34:9A:4C:A6:3D:30:87:70:D2:0E
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5bpv6RRA7IaqDSaTKY9MIdw0g4.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
a8:d0:20:38:22:b2:a3:e8:f0:9a:6a:60:7e:f4:6f:20:f8:33:
36:ae:1b:c0:a8:99:e2:d7:34:8b:a6:76:ee:fd:3a:5f:19:52:
68:b3:d8:ee:0b:70:39:55:c7:ed:c8:ce:c3:68:8c:72:24:35:
1e:36:26:1b:a0:54:c7:af:04:9a:b7:31:ce:1e:c0:eb:31:6f:
9d:48:9f:e2:6b:a1:44:a2:76:3f:a7:58:22:93:e9:c5:d0:1f:
70:71:cd:56:9b:09:4d:c3:17:1d:f2:75:0c:89:c6:6c:9c:99:
25:29:c6:3f:46:95:4e:fa:ba:12:dd:46:03:8c:27:68:77:e1:
eb:e6:b7:7a:0e:2c:54:2f:70:26:ca:07:b9:5b:c1:23:01:92:
72:24:2c:6f:5c:12:32:d0:09:5d:b4:5b:28:53:77:26:8e:d0:
da:25:e8:d1:63:f7:4d:b3:88:7e:7d:6f:2b:10:c7:c7:68:d6:
ce:ff:1c:7c:29:04:c7:0e:e9:7a:51:5f:6b:23:28:59:b3:18:
aa:10:b5:1e:86:56:dc:b8:02:c7:d2:5d:a2:47:24:b9:c4:b5:
0b:68:6a:74:00:e3:3f:3c:71:9a:2a:ac:50:50:7b:24:a0:1e:
b1:d1:d9:7c:63:66:3d:38:09:49:c4:b6:f5:5c:d6:57:1a:4e:
dd:44:a7:5d
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1MzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFGOTZFOUJGQTQ1MTAz
QjIxQUE4MzQ5QTRDQTYzRDMwODc3MEQyMEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmohm8M9zLYw/zWcMrdZsu9EJnGewB2/of8+hIRbczFSt0guPq
5H1zOnjv+hYQEo1wmEkWGPwX760LMUhy5k0UjBlB3MoWqSzs6yY/bw1TOY3Hj2F6
BJ57uzsHm81SaNCP5EyeWpOBFkywaLnhbjznVcsIBdkRH0nTw9WxfWpGgUwJV5j4
VKeBX58ZiMsjhjI54XKphuOq5XXRH0JmhEgggpVovWtX7I5AX1AdL0gRsKAZGLnD
tgZ2qwZTUbC66PoC3R89MXVevxpTAt+NfRQJCrVNPwT6ppiL27uduepbS4PRxd6P
+x8xgk91BXdn/7B+p5A10run8KO1fwJ7Zi59AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUr5bpv6RRA7IaqDSaTKY9MIdw0g4wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9yNWJwdjZSUkE3SWFxRFNhVEtZOU1JZHcwZzQucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa+owDQYJKoZIhvcNAQEL
BQADggEBAKjQIDgisqPo8JpqYH70byD4MzauG8ComeLXNIumdu79Ol8ZUmiz2O4L
cDlVx+3IzsNojHIkNR42JhugVMevBJq3Mc4ewOsxb51In+JroUSidj+nWCKT6cXQ
H3BxzVabCU3DFx3ydQyJxmycmSUpxj9GlU76uhLdRgOMJ2h34evmt3oOLFQvcCbK
B7lbwSMBknIkLG9cEjLQCV20WyhTdyaO0Nol6NFj902ziH59bysQx8do1s7/HHwp
BMcO6XpRX2sjKFmzGKoQtR6GVty4AsfSXaJHJLnEtQtoanQA4z88cZoqrFBQeySg
HrHR2XxjZj04CUnEtvVc1lcaTt1Ep10=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client