
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u-khTosMk1sU5d6gp4s2lBDj4sw.roa
File: u-khTosMk1sU5d6gp4s2lBDj4sw.roa (raw, json)
Hash identifier: SoKm+RQUhzeNMJF4iFoM8eSowX93N/GG40+bC1Zt1DY=
Subject key identifier: BB:E9:21:4E:8B:0C:93:5B:14:E5:DE:A0:A7:8B:36:94:10:E3:E2:CC
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 0744
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u-khTosMk1sU5d6gp4s2lBDj4sw.roa
Signing time: Tue 31 Mar 2026 08:27:32 +0000
ROA not before: Tue 31 Mar 2026 08:27:32 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:5300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:32 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=BBE9214E8B0C935B14E5DEA0A78B369410E3E2CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:67:f6:5c:f8:7b:f2:8c:b7:67:50:be:1a:
ab:d1:4d:42:51:2f:92:bc:bc:31:b4:ae:97:20:bd:
c2:1c:1c:01:a6:8a:44:13:d4:9a:34:a3:42:db:e8:
88:44:a3:53:cf:c9:15:18:cb:4e:99:37:4d:5d:54:
2f:5f:2b:dd:e1:43:d4:45:dd:f1:5e:d4:53:3b:0e:
11:31:14:37:3f:c0:83:1c:91:63:74:1f:3b:af:39:
ef:77:50:08:d4:f0:d3:76:19:45:ea:dc:14:b6:96:
08:bf:2d:1c:77:be:75:67:76:c9:99:c6:71:d9:e4:
de:4f:96:d7:e0:5e:d5:87:c3:a3:21:d7:92:af:59:
a5:0b:b5:6e:9d:12:fa:24:d6:7a:a0:56:67:91:4e:
c0:85:cd:d2:44:14:26:aa:da:2e:48:c2:88:a9:f6:
31:1d:dd:88:0c:e5:5a:86:d4:6a:8c:32:74:b6:a7:
cb:e8:83:2d:bf:f8:ef:e3:83:29:07:88:51:3c:bc:
db:6f:11:b9:1b:e0:37:db:82:b2:a8:08:ee:32:86:
fc:c7:5f:12:c7:7d:18:e5:52:b9:e7:06:66:59:4a:
1a:f8:b0:0e:80:07:75:10:a1:43:22:26:a2:68:56:
ba:d1:c4:70:5e:86:1b:0b:67:3d:80:6a:41:67:22:
a8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:21:4E:8B:0C:93:5B:14:E5:DE:A0:A7:8B:36:94:10:E3:E2:CC
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u-khTosMk1sU5d6gp4s2lBDj4sw.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:5300::/40
Signature Algorithm: sha256WithRSAEncryption
84:85:42:5c:78:69:8a:e4:f5:dd:42:36:d6:29:27:e4:70:2b:
d7:94:c6:82:0a:93:90:da:76:e6:ff:6c:24:d7:d9:82:cd:12:
a3:61:4b:c4:3d:c3:15:cd:94:05:f8:c6:86:b6:47:87:4c:e8:
6e:21:bb:81:c3:ff:4a:c7:db:d1:8b:d0:ae:71:6f:eb:56:9c:
00:b0:2f:5b:94:a6:71:9e:1e:9e:08:94:c7:13:93:72:95:9e:
dd:e1:c4:47:9d:d4:a8:95:38:30:04:61:02:51:b4:3c:01:86:
22:82:0b:e2:fc:31:3c:cd:d2:fe:e1:7e:91:39:eb:35:7b:3a:
14:1a:1f:06:63:82:d7:dd:d7:28:78:d9:63:87:26:d4:a7:c6:
1d:ae:5d:1a:66:e6:88:4b:53:30:c0:3c:ef:2b:87:78:ac:42:
a4:e6:f6:bc:93:a2:cb:0c:ac:ae:13:c8:0e:0a:49:7c:4e:b4:
ff:8d:30:e4:82:a5:ba:36:05:5e:98:69:5e:d3:92:4e:64:ca:
b0:83:b4:4f:12:14:a9:49:11:3c:77:89:20:a7:28:2d:cc:c7:
40:a2:2d:81:12:de:d8:15:41:65:f2:a6:ef:f0:1d:8c:6e:b0:
c6:58:f5:17:fc:e1:c1:12:4c:fb:be:99:a2:43:a3:1f:1c:fe:
61:99:54:e0
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJCRTkyMTRFOEIwQzkz
NUIxNEU1REVBMEE3OEIzNjk0MTBFM0UyQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoNmf2XPh78oy3Z1C+GqvRTUJRL5K8vDG0rpcgvcIcHAGmikQT
1Jo0o0Lb6IhEo1PPyRUYy06ZN01dVC9fK93hQ9RF3fFe1FM7DhExFDc/wIMckWN0
HzuvOe93UAjU8NN2GUXq3BS2lgi/LRx3vnVndsmZxnHZ5N5PltfgXtWHw6Mh15Kv
WaULtW6dEvok1nqgVmeRTsCFzdJEFCaq2i5Iwoip9jEd3YgM5VqG1GqMMnS2p8vo
gy2/+O/jgykHiFE8vNtvEbkb4DfbgrKoCO4yhvzHXxLHfRjlUrnnBmZZShr4sA6A
B3UQoUMiJqJoVrrRxHBehhsLZz2AakFnIqhJAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUu+khTosMk1sU5d6gp4s2lBDj4swwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS91LWtoVG9zTWsxc1U1ZDZncDRzMmxCRGo0c3cucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa1MwDQYJKoZIhvcNAQEL
BQADggEBAISFQlx4aYrk9d1CNtYpJ+RwK9eUxoIKk5Dadub/bCTX2YLNEqNhS8Q9
wxXNlAX4xoa2R4dM6G4hu4HD/0rH29GL0K5xb+tWnACwL1uUpnGeHp4IlMcTk3KV
nt3hxEed1KiVODAEYQJRtDwBhiKCC+L8MTzN0v7hfpE56zV7OhQaHwZjgtfd1yh4
2WOHJtSnxh2uXRpm5ohLUzDAPO8rh3isQqTm9ryTossMrK4TyA4KSXxOtP+NMOSC
pbo2BV6YaV7Tkk5kyrCDtE8SFKlJETx3iSCnKC3Mx0CiLYES3tgVQWXypu/wHYxu
sMZY9Rf84cESTPu+maJDox8c/mGZVOA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:08 2026 by rpki-client