
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/saEkGLm9aE2LqhIV7nBxHJzBEjM.roa
File: saEkGLm9aE2LqhIV7nBxHJzBEjM.roa (raw, json)
Hash identifier: ns4hN4GKA21In63xS1VQ0mTlEvRQFAZC/flnK1ryIrg=
Subject key identifier: B1:A1:24:18:B9:BD:68:4D:8B:AA:12:15:EE:70:71:1C:9C:C1:12:33
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0692
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/saEkGLm9aE2LqhIV7nBxHJzBEjM.roa
Signing time: Tue 31 Mar 2026 08:26:08 +0000
ROA not before: Tue 31 Mar 2026 08:26:08 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:8200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682 (0x692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:26:08 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=B1A12418B9BD684D8BAA1215EE70711C9CC11233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:0f:77:e4:d9:3c:c2:ca:f7:ec:f6:6a:cd:
91:ef:bd:0b:bf:63:2c:db:9a:16:41:2b:ec:59:a4:
07:da:22:91:8d:91:e2:27:5f:c5:4b:b8:01:4b:d7:
28:c1:fa:5c:50:0d:a5:76:fa:67:e2:b7:be:76:84:
2e:7c:9b:39:68:51:c6:27:e1:a5:2e:05:fd:4a:7f:
a2:1d:7c:46:11:f7:56:ec:1f:f9:66:34:b1:70:18:
6d:02:c0:43:98:f9:71:b9:36:eb:ca:9e:ca:4d:4a:
e3:d6:ed:ac:65:05:04:d6:84:cd:2e:1b:4f:35:3a:
8c:41:77:d8:fe:e6:6a:44:0d:cc:bf:44:80:9e:45:
c0:29:69:63:18:fa:7c:85:7d:c4:76:f3:14:19:ed:
43:dc:82:c6:ac:2f:66:22:09:b0:48:ab:35:ce:a5:
d3:ba:0e:82:ac:aa:e6:d4:01:13:36:9f:37:d5:fc:
2d:6b:5f:69:5e:76:f4:e7:e4:ea:16:bb:03:27:e2:
97:68:ad:f4:36:3f:37:e3:ac:5a:3c:4c:eb:be:2b:
26:67:90:ef:5c:62:00:62:4f:ef:4a:97:eb:05:85:
bc:29:70:fa:a7:64:63:2f:19:e9:14:51:ac:dc:c1:
22:2b:12:98:11:56:7b:16:16:b3:2f:5c:eb:0c:05:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:24:18:B9:BD:68:4D:8B:AA:12:15:EE:70:71:1C:9C:C1:12:33
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/saEkGLm9aE2LqhIV7nBxHJzBEjM.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:8200::/40
Signature Algorithm: sha256WithRSAEncryption
59:e0:c9:ce:7e:da:89:2c:dc:94:21:fe:52:63:d6:85:1a:e6:
4a:7a:ab:74:dd:9c:ca:66:38:01:05:20:fa:ef:2e:85:8e:06:
97:f7:58:97:fd:d1:7a:41:e0:d0:3c:cc:5c:ff:08:7d:ce:c5:
ae:39:d9:f3:d6:c4:71:74:54:3b:7f:8c:9e:f0:56:aa:3f:ad:
52:d3:6c:3d:c8:3d:92:b8:c9:57:44:49:c7:7b:7b:87:ea:a0:
b1:3f:9e:0a:f8:e1:85:db:c6:0f:4a:f2:11:cb:f4:32:10:b6:
78:ed:af:a1:4e:f0:86:77:ae:eb:a1:b1:f9:1c:73:6b:54:98:
d6:ac:12:d9:5d:c8:cb:47:7e:11:88:cb:b4:11:83:f5:a3:d4:
16:3a:a9:3e:f9:86:c4:eb:da:05:5d:b2:e2:3d:12:9e:bb:79:
53:7e:4d:47:6f:66:9e:f4:2f:77:2a:2d:8a:67:d1:d2:17:67:
84:d6:84:a1:b9:be:25:08:6c:d2:7a:42:3a:45:be:b2:e0:8f:
9e:c7:da:99:26:49:5a:a4:37:a4:2b:8d:ef:ab:c9:96:ad:73:
bb:65:56:0a:8d:62:e5:97:6f:86:f4:cb:15:45:20:43:b0:7d:
f0:8a:3a:db:47:7f:b1:39:32:2d:c8:73:27:37:05:57:4b:9c:
59:c6:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:02:12 2026 by rpki-client