
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yFcDd91vhTB44NJCi5r-QQFW1V8.roa
File: yFcDd91vhTB44NJCi5r-QQFW1V8.roa (raw, json)
Hash identifier: canISiTXpMIdCCEDph1fgEOfj09yV5fS9Y0RPedRjq0=
Subject key identifier: C8:57:03:77:DD:6F:85:30:78:E0:D2:42:8B:9A:FE:41:01:56:D5:5F
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 070B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yFcDd91vhTB44NJCi5r-QQFW1V8.roa
Signing time: Tue 31 Mar 2026 08:27:05 +0000
ROA not before: Tue 31 Mar 2026 08:27:05 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1803 (0x70b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:05 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=C8570377DD6F853078E0D2428B9AFE410156D55F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:61:9f:20:4a:29:98:43:f5:18:22:6c:03:
db:85:a1:4c:03:80:1f:bc:3f:1a:3d:04:d7:d8:80:
16:d0:fb:69:a1:6c:4d:20:38:b0:c7:84:ed:f3:f9:
1f:ac:43:cc:ce:e7:db:8b:05:a4:fc:30:0f:81:3f:
87:4e:e5:0c:d8:72:b1:89:f8:80:4c:b2:12:8d:b5:
e2:a4:c7:f9:ed:af:52:9a:ee:75:ca:4d:e1:32:c9:
6a:9e:e2:fe:52:68:95:b6:7a:22:a5:93:80:6e:f7:
46:41:e8:57:44:47:c2:86:84:10:f7:07:99:5d:1f:
81:5d:fc:94:e7:28:bf:81:66:b9:53:ce:bc:60:01:
d5:b9:93:15:5d:7d:4b:24:86:f6:5c:f7:dc:fc:4c:
41:ab:68:81:c4:39:94:09:7a:56:75:54:23:78:90:
e2:64:70:5a:98:59:5f:dd:f9:e6:10:1c:2f:9f:d5:
5b:73:dc:4c:f3:ae:57:bb:55:b1:c2:b1:db:47:ce:
cb:85:07:97:38:f6:9b:67:70:9d:64:02:93:0e:07:
9e:0a:d7:41:ba:aa:6e:4e:29:a5:02:cd:b0:70:f3:
98:bd:0c:44:ea:33:40:fd:b8:00:cb:b4:cd:79:d0:
98:24:b1:e6:1d:29:98:60:67:18:4b:69:2c:08:e6:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:57:03:77:DD:6F:85:30:78:E0:D2:42:8B:9A:FE:41:01:56:D5:5F
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yFcDd91vhTB44NJCi5r-QQFW1V8.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b::/40
Signature Algorithm: sha256WithRSAEncryption
16:9f:81:27:ba:14:a5:90:20:6c:d0:0e:cf:68:f7:97:5e:81:
f5:c3:21:5b:bc:71:75:97:2b:4b:7e:e9:fa:69:7f:e6:23:30:
ee:2f:18:6b:da:20:5a:9a:07:1e:84:06:55:e3:39:71:d0:5a:
8c:5a:9f:c1:78:c6:f9:0c:78:a7:ac:c1:38:87:df:2b:d2:9d:
62:ef:d5:7e:87:b3:29:f5:c9:6c:91:cc:4a:e0:7c:a1:0f:75:
db:43:2d:eb:1c:f8:ec:c1:3c:8c:e2:20:b1:64:27:ba:d3:1b:
0a:99:0b:52:74:20:59:19:13:fb:a7:73:5f:a3:48:e6:ad:d1:
3b:16:ee:dd:9d:ba:06:3d:2e:87:02:0a:e5:4c:f6:4a:f4:52:
67:01:a9:18:1c:0f:5c:96:56:fa:7f:33:4e:ed:13:80:d0:b1:
5e:28:3e:82:f4:42:5d:63:de:ee:84:4c:c8:95:6a:89:cf:2e:
3c:3f:52:fe:97:dc:3d:57:03:7b:0c:fe:ba:5c:df:75:2c:01:
b3:9f:b9:23:89:0c:87:dc:40:33:b0:c5:b0:f7:36:b2:df:38:
e6:48:bd:bd:bf:0f:6d:26:b4:38:03:1e:10:96:79:46:7d:65:
00:3c:bb:35:1b:83:24:1c:b1:4e:f5:3f:95:32:32:2e:b2:cf:
92:16:40:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:39 2026 by rpki-client