
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iDrP2KrxTzQbrtxoQl3p_X3XOe0.roa
File: iDrP2KrxTzQbrtxoQl3p_X3XOe0.roa (raw, json)
Hash identifier: kjSipNGXGoCq4qWbwjPzaFPA+eZ6n63fxVMztp88y9Q=
Subject key identifier: 88:3A:CF:D8:AA:F1:4F:34:1B:AE:DC:68:42:5D:E9:FD:7D:D7:39:ED
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 079A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iDrP2KrxTzQbrtxoQl3p_X3XOe0.roa
Signing time: Fri 26 Jun 2026 05:20:40 +0000
ROA not before: Fri 26 Jun 2026 05:20:40 +0000
ROA not after: Tue 15 Jun 2027 01:30:02 +0000
asID: 9605
IP address blocks: 240a:60:f05e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 09:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 26 05:20:40 2026 GMT
Not After : Jun 15 01:30:02 2027 GMT
Subject: CN=883ACFD8AAF14F341BAEDC68425DE9FD7DD739ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:e5:ab:1a:0a:14:b9:be:c7:cb:f3:73:31:
10:a7:d7:8c:b4:7d:10:f3:04:d1:1c:37:d5:ab:57:
c4:fe:e8:f8:8a:4b:26:e6:eb:f8:60:82:14:e6:1e:
fc:d8:db:78:5a:b4:9a:aa:5c:65:6f:b2:e9:83:89:
ad:e9:02:dd:87:95:ce:ec:96:2c:77:75:4d:98:b3:
97:0e:9d:83:d9:b8:ba:6c:58:35:61:98:9d:79:7c:
24:20:92:d3:49:b8:83:87:76:61:99:1d:ed:3e:92:
4c:7c:a9:96:99:82:84:3c:f5:e4:37:a9:24:e9:9b:
8c:79:b6:d9:55:50:4f:26:d2:f7:ed:07:c2:c3:31:
49:67:59:e5:cb:dd:d4:0c:c5:32:0a:49:b1:1d:a9:
e2:a3:0f:19:ef:df:bd:c8:9e:29:4d:09:60:46:97:
7c:b0:8e:e3:ee:5e:44:ff:3f:d0:0a:93:5d:74:28:
c8:1c:ab:cd:d4:c7:58:7b:e8:a7:40:a8:8a:09:3e:
2c:d6:75:91:b5:dd:02:76:28:fa:b0:17:6f:38:22:
58:0b:96:2f:68:de:3d:e7:74:c7:87:c0:70:6a:c8:
ef:cc:18:fe:ec:21:09:f7:69:b1:2d:42:d3:82:e1:
f8:9e:71:1c:0b:91:2a:8f:51:e9:88:43:7b:fb:24:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:CF:D8:AA:F1:4F:34:1B:AE:DC:68:42:5D:E9:FD:7D:D7:39:ED
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iDrP2KrxTzQbrtxoQl3p_X3XOe0.roa
sbgp-ipAddrBlock: critical
IPv6:
240a:60:f05e::/48
Signature Algorithm: sha256WithRSAEncryption
c5:ce:2d:80:bb:2b:c3:27:11:dc:c0:fe:e3:65:29:1e:0b:04:
e5:05:43:61:77:5b:5b:2c:29:d1:3d:e4:5d:d2:bc:25:b1:0a:
06:eb:2b:8e:e4:86:10:95:35:b4:59:f4:6e:bc:b4:ce:0e:29:
8c:30:8b:7b:6d:ba:b3:d4:a5:b7:12:91:c5:c3:ba:88:ab:5a:
3b:a8:f1:16:b3:23:9a:99:cc:4f:71:e0:18:42:1f:be:ec:44:
8c:ab:05:c7:a3:ba:1e:bb:c8:fe:98:3a:e4:37:0c:f9:17:9b:
a3:11:63:6b:6c:b2:fb:52:25:79:79:11:a6:aa:82:99:36:c5:
8d:47:ca:60:2f:d7:00:ba:cf:58:0d:62:1a:d3:20:43:be:8e:
dd:5c:56:67:89:dd:9f:8d:5d:f9:be:bf:f5:6d:69:9a:f9:db:
f7:d1:40:48:85:3e:1e:d4:6b:5a:66:40:70:78:9f:84:01:f9:
9d:e3:24:07:66:bc:c0:49:e0:1d:6c:b1:51:7f:a4:d6:ad:d1:
6b:66:47:84:0f:c6:bb:b6:e9:bf:cb:d2:5e:e6:66:9a:41:76:
9d:ea:c8:3b:d7:65:d4:cc:0f:b7:bc:3e:90:58:af:12:cf:77:
85:c9:ea:42:bc:27:09:8a:fd:05:93:cf:e2:e1:5f:cc:d2:a5:
da:c9:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:19 2026 by rpki-client