
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/pJ3P2LJVX96lE-AM-d_d6tmYvs8.roa
File: pJ3P2LJVX96lE-AM-d_d6tmYvs8.roa (raw, json)
Hash identifier: p3AUtT1YjZkt2tZBfNH6njnRUtEkotUq+ErMgTeg2R8=
Subject key identifier: A4:9D:CF:D8:B2:55:5F:DE:A5:13:E0:0C:F9:DF:DD:EA:D9:98:BE:CF
Certificate issuer: /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial: AD
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/pJ3P2LJVX96lE-AM-d_d6tmYvs8.roa
Signing time: Tue 31 Mar 2026 08:37:17 +0000
ROA not before: Tue 31 Mar 2026 08:37:17 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7679
IP address blocks: 218.40.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173 (0xad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Validity
Not Before: Mar 31 08:37:17 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=A49DCFD8B2555FDEA513E00CF9DFDDEAD998BECF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e0:08:3c:9e:7d:80:36:6b:fd:cc:c7:a8:d6:
bf:b6:2f:bd:d1:5b:fb:a7:b2:09:18:d6:68:95:b3:
d4:62:3b:3f:b8:ee:61:50:95:f4:d6:77:5f:d5:ca:
92:2d:8f:75:b1:2c:72:37:40:1f:17:54:de:f9:6f:
f1:75:dd:b6:03:ab:d5:f2:be:66:70:32:1c:2b:99:
da:87:df:a6:89:73:cd:48:59:95:5f:46:a1:ec:8c:
11:de:87:08:a9:90:93:46:00:73:62:51:53:d7:dd:
9b:84:ac:5b:e6:22:4b:c4:2c:85:ca:b4:b1:63:20:
fc:e2:5e:88:02:c6:82:4d:b0:ab:b5:13:c1:21:f9:
69:58:dd:f2:14:9a:f9:07:0d:f6:c0:c8:6e:26:37:
66:7f:8e:74:d9:43:47:ff:73:ad:e8:0a:30:83:c3:
a1:af:89:e9:85:78:e3:cb:ad:22:d1:3e:27:29:ee:
89:8d:6f:77:47:fc:bb:17:11:3c:3b:f4:a3:67:41:
fa:99:79:1e:fb:f9:f3:ae:d1:f4:0e:61:a7:e9:72:
42:5d:a1:1d:5f:60:62:e9:54:db:b1:68:cf:dd:1c:
40:08:62:1a:85:22:b3:59:af:7c:9e:9d:b4:63:fc:
e7:b4:38:43:8d:8d:c1:8f:8c:1c:b0:16:35:b5:f1:
19:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9D:CF:D8:B2:55:5F:DE:A5:13:E0:0C:F9:DF:DD:EA:D9:98:BE:CF
X509v3 Authority Key Identifier:
keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/pJ3P2LJVX96lE-AM-d_d6tmYvs8.roa
sbgp-ipAddrBlock: critical
IPv4:
218.40.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:12:f0:6c:bc:e2:93:31:93:67:04:c8:0f:7f:71:ac:27:ea:
b7:e5:79:fa:a7:ec:ce:63:21:b9:8b:a9:cf:0f:74:5c:fd:f8:
79:d8:c1:16:d5:2d:6d:ae:71:4d:b9:5f:6c:32:11:56:9f:f2:
43:ee:dc:7d:fe:f2:82:82:42:91:6e:9c:68:bd:10:3a:64:5f:
b7:5e:49:46:31:e1:68:82:13:f8:3a:ba:ca:81:c3:b0:90:c6:
78:94:92:ad:d2:e3:07:b1:f2:e7:54:28:ed:61:77:22:e2:85:
da:bb:4b:b6:f2:99:20:d5:ec:d3:39:07:82:f4:5a:a4:43:a0:
04:a3:67:94:81:65:95:52:4a:d0:97:eb:07:d4:05:30:59:d3:
78:40:e2:ab:a1:56:70:df:00:40:8b:77:b9:4f:8c:55:92:0e:
2f:96:81:a8:d1:61:3e:07:f2:86:04:86:fc:9e:6e:53:2d:d8:
71:3a:ef:5c:7e:79:a5:0c:96:f6:60:97:9c:ff:7c:27:00:60:
a3:bd:03:18:4c:ad:e9:9c:00:ed:45:c1:10:41:23:07:9c:f7:
bc:c1:98:2a:22:c5:73:ad:27:83:f4:54:75:1f:75:d5:18:e3:
86:e8:ed:83:40:50:ae:1b:4d:59:8e:01:16:7f:f1:73:cc:cc:
54:bb:fe:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:56 2026 by rpki-client