
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30116/3V2GDkYhtHwI57sLCSvuYh5R18A.roa
File: 3V2GDkYhtHwI57sLCSvuYh5R18A.roa (raw, json)
Hash identifier: KuRPMUlB+Ofxhm+ZOA2GpAF0Ly1fBeqQ9n4+yPTI1VE=
Subject key identifier: DD:5D:86:0E:46:21:B4:7C:08:E7:BB:0B:09:2B:EE:62:1E:51:D7:C0
Certificate issuer: /CN=860EF222D33C7231304FF861B8D4685215ABB1DB
Certificate serial: 05
Authority key identifier: 86:0E:F2:22:D3:3C:72:31:30:4F:F8:61:B8:D4:68:52:15:AB:B1:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hg7yItM8cjEwT_hhuNRoUhWrsds.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30116/3V2GDkYhtHwI57sLCSvuYh5R18A.roa
Signing time: Tue 31 Mar 2026 08:48:37 +0000
ROA not before: Tue 31 Mar 2026 08:48:37 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 24278
IP address blocks: 2400:f400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30116/hg7yItM8cjEwT_hhuNRoUhWrsds.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30116/hg7yItM8cjEwT_hhuNRoUhWrsds.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hg7yItM8cjEwT_hhuNRoUhWrsds.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 16:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860EF222D33C7231304FF861B8D4685215ABB1DB
Validity
Not Before: Mar 31 08:48:37 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=DD5D860E4621B47C08E7BB0B092BEE621E51D7C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:1b:ee:97:16:97:ef:65:51:47:e0:66:17:
15:29:c9:06:2c:6f:4f:e4:0a:c8:c9:4f:b5:7d:ab:
d5:35:b9:98:8f:9e:c5:ef:bc:01:10:1f:3c:44:39:
5b:09:0e:29:b4:0c:89:d0:f0:f5:7f:42:13:34:a1:
5d:d6:34:39:c6:7e:63:bc:3b:f6:59:57:74:fc:43:
53:4a:d0:7a:cc:46:2a:ee:90:e8:cb:6f:25:7d:a1:
74:85:fd:b3:20:0b:75:6a:d8:2f:94:bb:2a:86:a3:
d1:37:3e:29:db:d8:fe:a0:10:9a:17:ed:46:5b:78:
6c:9d:c5:c8:f2:06:35:8c:36:86:4a:d2:1d:5a:a4:
81:56:4b:81:dd:bd:b9:58:b4:37:f5:b1:cd:a0:13:
69:18:42:24:e0:55:0c:9e:29:f7:d6:9d:1e:a6:55:
f7:e5:e7:92:c6:51:8d:77:a3:1c:f3:7c:d8:38:cc:
02:61:6c:95:0a:23:51:92:4e:fb:75:3e:24:c0:4f:
df:32:0e:dd:70:db:01:b8:4d:bb:eb:f9:db:2f:fb:
47:6b:5a:67:41:c1:3a:d8:1d:1b:ef:81:20:b4:25:
21:cb:48:33:16:2e:15:e8:44:b2:32:5b:a6:41:07:
42:f2:26:be:9d:cf:6a:f1:93:27:67:8f:47:a7:a5:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:86:0E:46:21:B4:7C:08:E7:BB:0B:09:2B:EE:62:1E:51:D7:C0
X509v3 Authority Key Identifier:
keyid:86:0E:F2:22:D3:3C:72:31:30:4F:F8:61:B8:D4:68:52:15:AB:B1:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30116/hg7yItM8cjEwT_hhuNRoUhWrsds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hg7yItM8cjEwT_hhuNRoUhWrsds.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30116/3V2GDkYhtHwI57sLCSvuYh5R18A.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:f400::/32
Signature Algorithm: sha256WithRSAEncryption
3b:91:d1:12:5a:8c:22:4e:eb:2d:38:59:fa:54:c7:f6:64:89:
9c:b1:d9:43:c2:0b:30:0c:83:c1:14:c5:85:02:90:b0:8c:9f:
c7:ec:5d:79:36:d7:5a:4d:36:78:e6:bc:33:3a:de:39:3e:28:
9d:f3:5c:3d:2e:8c:76:90:af:81:2f:cb:ae:7b:27:b1:4d:82:
6a:4d:49:c7:b8:e0:b1:e8:ba:70:8b:91:e7:99:3d:8b:ad:30:
6f:1a:65:8f:d7:a4:f9:71:f4:42:23:8f:eb:a0:97:18:7e:2a:
9b:ca:dd:a4:d1:12:cf:ca:b5:de:5a:c1:7b:de:08:69:10:47:
a3:88:85:35:ad:23:b5:ba:81:25:7a:5e:13:f9:7a:af:7a:ec:
94:a0:a9:3f:9e:d7:60:aa:bf:8e:8a:02:9f:8d:81:f1:28:af:
4c:8d:33:ee:ba:4b:ed:78:e2:62:be:3e:7d:e6:23:11:64:5f:
e0:0b:65:e8:b3:99:a4:6d:6b:1b:12:ad:d2:c0:5c:a9:f4:32:
25:1b:dc:e1:0b:21:9f:a7:37:dd:06:ed:b9:33:1f:e5:63:3c:
48:4d:af:2f:46:4c:ee:26:12:b8:e7:d0:ef:90:5c:f2:5c:8f:
7a:0d:07:4f:79:9b:9d:d8:94:8e:c9:e8:1d:12:2a:5c:b4:15:
08:e7:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:03 2026 by rpki-client