
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ygNRVA4SOfmIdXX1hynchNa8ut0.roa
File: ygNRVA4SOfmIdXX1hynchNa8ut0.roa (raw, json)
Hash identifier: 7eZ3KgXvJvYYzV7Lo26b54/YymvhvBm3Ir7SYBoB4WA=
Subject key identifier: CA:03:51:54:0E:12:39:F9:88:75:75:F5:87:29:DC:84:D6:BC:BA:DD
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 070C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ygNRVA4SOfmIdXX1hynchNa8ut0.roa
Signing time: Tue 31 Mar 2026 08:27:06 +0000
ROA not before: Tue 31 Mar 2026 08:27:06 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1804 (0x70c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Mar 31 08:27:06 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=CA0351540E1239F9887575F58729DC84D6BCBADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:8c:49:d4:d2:c9:39:d4:ac:3b:b6:4f:a0:
55:ee:16:16:9b:94:1a:14:81:10:cf:8b:19:9f:aa:
00:9d:de:56:0b:e2:af:90:81:5a:7a:ff:f0:19:b4:
ab:5b:a7:2e:6d:ef:aa:80:33:95:00:cf:d1:ee:a8:
12:f9:e9:13:2a:da:64:18:bb:57:8f:4c:97:2a:07:
01:97:ef:46:2d:c9:5c:ff:0e:af:c5:59:06:dc:91:
4c:3c:0a:c7:75:56:f8:de:d9:55:76:e9:41:c7:da:
d5:6a:3f:8d:e0:e2:b0:3f:10:dd:86:29:0e:35:a3:
c1:01:44:e5:27:20:7c:3a:b6:1b:20:be:03:ba:33:
b5:14:86:8d:bb:bc:fa:a6:c8:ac:14:11:9d:46:96:
f3:85:4e:32:11:42:cb:7c:93:db:a9:cf:f8:1f:bc:
20:88:5f:58:c2:17:5f:08:64:ea:cd:66:59:42:4d:
b3:86:18:08:e2:ae:50:a2:45:f8:fb:14:30:cd:21:
d1:83:1f:bd:b9:08:ee:42:e3:a6:f2:8d:ea:52:dd:
ff:f2:8c:31:83:bf:da:80:89:9b:8d:64:d5:29:0c:
ba:07:dd:94:ea:21:c6:af:0f:e9:4b:da:cd:61:74:
07:76:c1:49:b0:55:f6:aa:91:f8:0c:4c:c4:97:86:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:03:51:54:0E:12:39:F9:88:75:75:F5:87:29:DC:84:D6:BC:BA:DD
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ygNRVA4SOfmIdXX1hynchNa8ut0.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:2000::/40
Signature Algorithm: sha256WithRSAEncryption
34:8b:c2:a4:85:33:e7:25:2a:96:cc:d6:c8:0d:bc:52:18:50:
d0:10:4a:8c:2c:34:30:99:79:ad:93:93:e3:d9:15:a3:49:4d:
5a:dc:ad:af:65:6d:68:22:f2:d2:11:86:e5:1b:4d:8b:81:54:
9c:f5:96:f1:07:35:14:65:8e:0c:9d:30:a2:4f:86:2b:2f:8d:
30:ee:8c:98:67:da:93:60:10:e0:55:d2:e0:d5:21:5e:c6:b2:
99:2a:89:56:47:76:13:64:0f:9e:e4:e5:59:b0:e5:e6:2a:1d:
c3:f7:07:23:5f:5c:41:da:cf:7d:f5:83:19:e6:c8:b0:d6:27:
95:2c:91:fa:5b:97:0f:72:48:bc:db:d2:b9:cc:1a:12:fb:45:
22:76:19:7b:48:c7:e1:f3:ba:b3:08:cf:ea:ad:d6:ad:44:d3:
9a:23:78:d7:bc:c8:b7:31:89:e6:55:0e:2b:f7:62:7d:31:3f:
b1:e4:a5:a8:e6:b6:b3:9f:dd:f8:39:45:69:5d:ed:d0:b6:28:
29:e8:1d:e0:36:06:c1:21:b6:d5:81:7d:37:35:66:dc:63:9a:
e4:72:cd:09:00:96:09:46:e4:34:c9:94:c5:e1:78:d1:a5:cb:
d5:d4:3b:03:4a:e1:17:04:c8:f3:95:81:f5:00:4e:7f:98:3b:
32:40:76:87
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENBMDM1MTU0MEUxMjM5
Rjk4ODc1NzVGNTg3MjlEQzg0RDZCQ0JBREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDg+oxJ1NLJOdSsO7ZPoFXuFhablBoUgRDPixmfqgCd3lYL4q+Q
gVp6//AZtKtbpy5t76qAM5UAz9HuqBL56RMq2mQYu1ePTJcqBwGX70YtyVz/Dq/F
WQbckUw8Csd1Vvje2VV26UHH2tVqP43g4rA/EN2GKQ41o8EBROUnIHw6thsgvgO6
M7UUho27vPqmyKwUEZ1GlvOFTjIRQst8k9upz/gfvCCIX1jCF18IZOrNZllCTbOG
GAjirlCiRfj7FDDNIdGDH725CO5C46byjepS3f/yjDGDv9qAiZuNZNUpDLoH3ZTq
IcavD+lL2s1hdAd2wUmwVfaqkfgMTMSXhqXTAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUygNRVA4SOfmIdXX1hynchNa8ut0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS95Z05SVkE0U09mbUlkWFgxaHluY2hOYTh1dDAucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAayAwDQYJKoZIhvcNAQEL
BQADggEBADSLwqSFM+clKpbM1sgNvFIYUNAQSowsNDCZea2Tk+PZFaNJTVrcra9l
bWgi8tIRhuUbTYuBVJz1lvEHNRRljgydMKJPhisvjTDujJhn2pNgEOBV0uDVIV7G
spkqiVZHdhNkD57k5Vmw5eYqHcP3ByNfXEHaz331gxnmyLDWJ5Uskfpblw9ySLzb
0rnMGhL7RSJ2GXtIx+HzurMIz+qt1q1E05ojeNe8yLcxieZVDiv3Yn0xP7Hkpajm
trOf3fg5RWld7dC2KCnoHeA2BsEhttWBfTc1ZtxjmuRyzQkAlglG5DTJlMXheNGl
y9XUOwNK4RcEyPOVgfUATn+YOzJAdoc=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:43 2026 by rpki-client