
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/3wqKQtRrcqqO3lmbc5xnB3OkMe4.roa
File: 3wqKQtRrcqqO3lmbc5xnB3OkMe4.roa (raw, json)
Hash identifier: q5Y8r144huWmo+0owJ/U01MkgOTozkWzTCONYJdZcIY=
Subject key identifier: DF:0A:8A:42:D4:6B:72:AA:8E:DE:59:9B:73:9C:67:07:73:A4:31:EE
Certificate issuer: /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial: 31
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/3wqKQtRrcqqO3lmbc5xnB3OkMe4.roa
Signing time: Tue 31 Mar 2026 08:41:43 +0000
ROA not before: Tue 31 Mar 2026 08:41:43 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 18282
IP address blocks: 180.94.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
Validity
Not Before: Mar 31 08:41:43 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DF0A8A42D46B72AA8EDE599B739C670773A431EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:b6:39:95:d5:32:fa:ba:fe:ec:0e:8d:9c:
cb:fb:b8:57:8d:68:10:da:7e:4b:5b:e0:99:7d:4a:
37:8b:64:ee:74:6d:4e:ae:6a:b3:9d:39:da:a3:f1:
2c:6e:a3:10:2a:04:fe:f2:6c:e9:4e:d5:d7:9f:4e:
3c:55:15:68:a0:65:32:c0:2d:b7:a9:e5:71:33:e8:
ae:f6:a2:56:15:af:49:1f:15:39:71:f8:95:65:34:
02:78:fe:65:e7:48:72:ec:c9:0a:c6:5c:47:9f:ab:
44:65:13:30:12:3c:46:0e:c8:c0:ed:65:88:99:fd:
11:00:3a:d9:29:a0:ce:a9:85:9d:79:aa:d6:87:96:
24:75:45:d2:d8:b0:a0:a0:51:26:25:13:f8:1e:52:
29:85:7c:66:a3:58:04:59:81:97:9a:a5:ac:99:36:
12:3a:45:4e:21:d0:d3:cf:6c:a8:04:50:2f:d6:06:
74:5c:8c:cb:d0:28:79:1d:9e:1c:04:e4:03:35:8b:
67:c1:45:c9:cf:2a:f8:31:b0:3e:52:ec:aa:13:64:
41:35:f4:5a:0c:ea:6c:ce:31:d6:3e:85:74:aa:cd:
17:1c:28:72:72:58:75:f1:89:a2:48:f1:01:87:cd:
5f:66:71:ad:10:2d:43:a1:ce:af:89:4c:f3:03:fa:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0A:8A:42:D4:6B:72:AA:8E:DE:59:9B:73:9C:67:07:73:A4:31:EE
X509v3 Authority Key Identifier:
keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/3wqKQtRrcqqO3lmbc5xnB3OkMe4.roa
sbgp-ipAddrBlock: critical
IPv4:
180.94.240.0/20
Signature Algorithm: sha256WithRSAEncryption
38:db:3e:18:3c:f0:ec:61:0d:1a:09:25:d1:13:99:f3:c4:25:
7e:d4:c4:f1:69:d9:d0:b2:18:98:b7:17:bb:55:34:38:d9:67:
2e:f4:18:86:f5:ff:96:fa:b0:af:9e:7b:db:02:5a:e2:9a:aa:
c4:6b:84:0a:3f:fb:62:ca:bc:bf:fa:a8:d4:89:33:8c:36:7f:
8c:c0:c8:46:58:14:1f:08:b1:d2:80:e6:08:e4:a8:a1:d3:3f:
68:84:df:0d:c3:0b:ff:cd:7e:93:06:dd:a3:8d:2b:15:fe:bd:
0e:56:32:f6:42:09:ca:24:3b:59:02:f7:1f:88:3d:c2:9d:a7:
c4:b6:dc:74:4d:9e:92:4d:bc:33:99:d5:54:77:ba:96:3c:37:
3c:0d:da:6f:57:f6:f0:7b:15:30:48:6d:5c:d3:f5:a5:87:a0:
74:fd:61:e8:bb:3f:b0:0f:41:0c:6c:eb:36:7b:c9:4f:5e:6e:
67:07:ca:e9:48:38:c0:00:7e:47:c0:1a:b7:98:14:ea:af:92:
73:eb:79:7f:0d:37:c1:2e:4e:1e:34:10:37:37:f9:ef:ca:e1:
76:3c:e0:3e:4f:db:69:90:d0:88:10:43:8e:02:23:ba:1a:26:
2e:cb:2c:6f:d3:4a:be:61:aa:f9:0a:3a:6d:70:5d:d4:df:7e:
42:9f:1c:45
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNTA0
MDFDNzg4QjU2OUIzRDQ0MDA0MTczMEUyOEE5OTFGNDAxOEQyMB4XDTI2MDMzMTA4
NDE0M1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREYwQThBNDJENDZCNzJB
QThFREU1OTlCNzM5QzY3MDc3M0E0MzFFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANJGtjmV1TL6uv7sDo2cy/u4V41oENp+S1vgmX1KN4tk7nRtTq5q
s5052qPxLG6jECoE/vJs6U7V159OPFUVaKBlMsAtt6nlcTPorvaiVhWvSR8VOXH4
lWU0Anj+ZedIcuzJCsZcR5+rRGUTMBI8Rg7IwO1liJn9EQA62SmgzqmFnXmq1oeW
JHVF0tiwoKBRJiUT+B5SKYV8ZqNYBFmBl5qlrJk2EjpFTiHQ089sqARQL9YGdFyM
y9AoeR2eHATkAzWLZ8FFyc8q+DGwPlLsqhNkQTX0WgzqbM4x1j6FdKrNFxwocnJY
dfGJokjxAYfNX2ZxrRAtQ6HOr4lM8wP6g5ECAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTfCopC1Gtyqo7eWZtznGcHc6Qx7jAfBgNVHSMEGDAWgBQFBAHHiLVps9RABBcw
4oqZH0AY0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxNjAvQlFRQng0aTFhYlBVUUFRWE1PS0ttUjlBR05JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQlFRQng0aTFhYlBVUUFRWE1PS0tt
UjlBR05JLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTYwLzN3cUtRdFJyY3FxTzNsbWJjNXhuQjNPa01lNC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0XvAwDQYJKoZIhvcNAQELBQAD
ggEBADjbPhg88OxhDRoJJdETmfPEJX7UxPFp2dCyGJi3F7tVNDjZZy70GIb1/5b6
sK+ee9sCWuKaqsRrhAo/+2LKvL/6qNSJM4w2f4zAyEZYFB8IsdKA5gjkqKHTP2iE
3w3DC//NfpMG3aONKxX+vQ5WMvZCCcokO1kC9x+IPcKdp8S23HRNnpJNvDOZ1VR3
upY8NzwN2m9X9vB7FTBIbVzT9aWHoHT9Yei7P7APQQxs6zZ7yU9ebmcHyulIOMAA
fkfAGreYFOqvknPreX8NN8EuTh40EDc3+e/K4XY84D5P22mQ0IgQQ44CI7oaJi7L
LG/TSr5hqvkKOm1wXdTffkKfHEU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:09 2026 by rpki-client